$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: 1aJ0Ga/KeuwVwEsbsipl3/uYiTqf8RGxfXGD56+1P34= Subject key identifier: 03:D7:03:CA:7D:33:AE:2F:E3:5E:56:28:B5:E2:C1:3D:BE:96:45:8E Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 029E Signing time: Wed 13 May 2026 01:41:09 +0000 Manifest this update: Wed 13 May 2026 01:41:08 +0000 Manifest next update: Wed 20 May 2026 01:41:08 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: DmnH5+LH+MFHTn2mr5D4zhrt3/9yLT2OnuE1TecwQmo=) 2: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=) 3: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: May 13 01:41:08 2026 GMT Not After : May 20 01:41:08 2026 GMT Subject: CN=6a03d6b5-2aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:af:d0:66:f5:78:e1:9f:22:04:d5:6e:d3: 16:e7:d9:99:c0:16:84:53:c1:6a:1e:13:7f:af:9f: ca:7a:ba:d5:86:26:84:8c:0a:2b:6a:54:ef:47:b4: 3e:67:6d:aa:c8:82:68:be:77:3a:1f:7d:b6:dd:dd: 13:ac:d5:42:2b:29:68:1a:ef:db:71:1a:9c:08:c4: be:fb:a8:ec:63:74:83:ff:dc:ab:68:54:dd:74:a6: b6:06:89:6a:cd:76:5d:d6:88:95:06:b4:63:f1:ca: d3:1e:3b:50:db:ef:37:59:9a:a0:93:88:00:16:a4: 78:1b:b7:cc:98:74:ed:e4:d7:b7:24:59:9a:4d:f3: ed:6c:18:90:78:33:ca:51:78:43:07:7a:e0:14:77: e8:04:79:66:40:bd:75:4c:5e:8e:6f:c2:e3:e3:4a: 9e:e8:a7:85:00:2d:e2:e8:76:cc:94:bf:16:bf:bc: 03:09:3c:e5:9c:ba:4d:80:4d:d4:36:61:01:6b:e6: ce:a6:a7:0e:cd:0c:b3:eb:ce:8c:d7:8d:fd:40:6d: 53:8f:c7:c0:04:df:2d:2b:1d:ab:c4:cb:e2:ee:29: 52:88:4c:d6:84:bd:b6:6a:4a:b2:77:a4:d3:73:bd: ed:fd:89:78:87:ba:de:03:4c:c0:8e:7b:34:33:8c: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D7:03:CA:7D:33:AE:2F:E3:5E:56:28:B5:E2:C1:3D:BE:96:45:8E X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:96:ee:7d:54:21:33:8c:5a:a8:07:f6:4c:fb:cb:3a:74:e8: b8:a3:66:f8:4f:13:ee:b4:60:f2:ca:d7:1f:3f:a2:f3:0c:6e: d5:ea:92:69:65:8b:df:00:a8:f8:fa:b0:4b:eb:85:db:fe:e6: 16:28:dc:65:b8:88:96:39:69:40:7e:08:5c:9c:26:9e:1d:fe: 78:fb:7f:cf:3d:f7:1c:7c:83:de:d4:34:15:6a:d4:55:23:6c: ae:e1:0c:ec:8a:98:c8:46:8b:5c:15:7f:0f:73:25:d8:13:62: 1e:b8:73:54:04:b9:2f:bd:fe:9c:ba:a2:d3:a5:ca:4f:98:d0: 52:46:b5:72:a9:da:fc:98:08:ed:62:8b:da:7c:df:78:01:23: 93:0a:e7:f2:6f:12:00:70:ef:42:91:35:52:38:e1:53:77:8e: e5:85:84:31:a2:d0:06:54:4e:2b:01:56:7e:56:cd:22:02:dd: af:a4:61:78:c8:aa:d9:f3:f7:19:51:62:d3:42:7d:fa:fd:18: 26:4e:1e:0d:65:f2:18:fb:21:26:2d:d2:b0:c9:59:f3:a3:22: ff:a3:54:5f:5a:9f:7d:29:a6:be:7a:28:1d:38:23:71:f1:da: 7a:5c:86:a1:f1:ac:ff:09:f4:31:df:1e:eb:ec:2e:12:24:6f: dc:11:aa:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjYwNTEzMDE0MTA4WhcNMjYwNTIwMDE0MTA4WjAYMRYwFAYD VQQDEw02YTAzZDZiNS0yYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6yv0Gb1eOGfIgTVbtMW59mZwBaEU8FqHhN/r5/KerrVhiaEjAoralTvR7Q+ Z22qyIJovnc6H3223d0TrNVCKyloGu/bcRqcCMS++6jsY3SD/9yraFTddKa2Bolq zXZd1oiVBrRj8crTHjtQ2+83WZqgk4gAFqR4G7fMmHTt5Ne3JFmaTfPtbBiQeDPK UXhDB3rgFHfoBHlmQL11TF6Ob8Lj40qe6KeFAC3i6HbMlL8Wv7wDCTzlnLpNgE3U NmEBa+bOpqcOzQyz686M1439QG1Tj8fABN8tKx2rxMvi7ilSiEzWhL22akqyd6TT c73t/Yl4h7reA0zAjns0M4yWkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPXA8p9 M64v415WKLXiwT2+lkWOMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZbufVQhM4xaqAf2TPvLOnTouKNm+E8T7rRg8srXHz+i8wxu1eqSaWWL3wCo +PqwS+uF2/7mFijcZbiIljlpQH4IXJwmnh3+ePt/zz33HHyD3tQ0FWrUVSNsruEM 7IqYyEaLXBV/D3Ml2BNiHrhzVAS5L73+nLqi06XKT5jQUka1cqna/JgI7WKL2nzf eAEjkwrn8m8SAHDvQpE1UjjhU3eO5YWEMaLQBlROKwFWflbNIgLdr6RheMiq2fP3 GVFi00J9+v0YJk4eDWXyGPshJi3SsMlZ86Mi/6NUX1qffSmmvnooHTgjcfHaelyG ofGs/wn0Md8e6+wuEiRv3BGqng== -----END CERTIFICATE-----Generated at Wed May 13 04:34:49 2026 by rpki-client