$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft File: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json) Hash identifier: ePpROXQ5XDq76QMOm8T4RTVmjtKGEQ5/KtzXsO/Wu0g= Subject key identifier: 5F:5F:97:3B:E6:5D:C1:A1:89:9A:36:4D:2E:C9:D8:69:A1:B6:37:B7 Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC Certificate issuer: /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft Manifest number: 43 Signing time: Mon 11 May 2026 08:37:18 +0000 Manifest this update: Mon 11 May 2026 08:37:18 +0000 Manifest next update: Mon 18 May 2026 08:37:18 +0000 Files and hashes: 1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: UWlTASUTNq27GlnDcvfK4a+Qzvob1O2YqpxRQO1gb+c=) 2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC Validity Not Before: May 11 08:37:18 2026 GMT Not After : May 18 08:37:18 2026 GMT Subject: CN=6a01953e-871f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:23:1d:55:db:c7:b3:e3:0c:bd:1e:29:d3: 7e:09:bf:78:e1:3b:9b:21:fc:b7:76:b9:60:81:f1: 89:3b:90:81:62:03:af:e7:1b:d3:c7:4b:5b:3a:39: 85:db:0a:c5:ab:e6:d0:08:18:6a:f9:2d:28:3a:82: 23:f4:a2:08:f5:4e:4d:a6:d8:49:25:84:ed:36:d8: 9d:f7:b2:2e:2d:6c:17:33:f7:3c:c1:d0:a0:1e:3b: b7:47:43:ec:fb:4c:7e:04:52:59:78:17:e6:00:4b: 2e:42:05:cd:6a:94:02:49:e7:e4:9e:f8:8d:e0:6e: 1c:90:92:de:24:de:c8:d5:96:04:22:13:ea:97:dd: 32:4c:53:45:de:39:cc:7c:91:df:cc:a1:30:eb:92: b0:76:1a:b3:d0:e4:1f:d1:8b:44:be:bf:16:3b:4e: 5e:b2:ef:38:cf:56:5d:62:b5:bc:2b:00:03:62:0e: 77:24:c9:90:f9:a3:a2:b8:d8:f0:dc:b2:7c:ae:4d: 85:5d:9f:07:3c:a1:c1:bf:ac:5e:fe:e5:1f:6a:81: 19:c0:54:db:34:4c:9c:89:87:c9:59:b5:c3:63:37: 34:da:44:60:9d:a3:9a:d3:81:d3:6c:31:b0:49:ae: ea:9e:94:33:58:b3:fd:1a:1d:6a:89:87:bb:cf:10: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5F:97:3B:E6:5D:C1:A1:89:9A:36:4D:2E:C9:D8:69:A1:B6:37:B7 X509v3 Authority Key Identifier: keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0b:be:31:26:4b:4c:f5:e2:fc:58:a6:51:e3:c2:7d:1d:09: 87:e2:f6:07:68:f6:fd:cc:c7:2d:44:98:8b:cd:f8:e6:1b:5b: 1d:81:e0:97:c3:2a:2a:dd:c4:17:c5:41:44:70:17:6d:d4:23: 59:fc:b5:d6:bc:2a:b3:ad:69:50:3e:c2:1e:90:d9:63:7f:53: 7c:2d:67:f6:03:c9:59:12:80:92:1f:9a:6e:f7:75:bf:c6:a3: 58:5a:7a:a8:2a:f4:56:1a:c0:34:1e:01:78:22:e1:87:6e:a6: ad:b3:e3:38:85:78:72:26:8c:4b:3e:7d:a7:2d:42:82:72:58: bc:ff:fb:49:79:33:e4:ff:f3:e0:35:05:14:c5:3c:c6:26:49: fd:7e:f7:d5:e9:67:1e:74:2f:10:23:d3:03:29:b2:3f:fe:41: 5b:b7:02:3f:2d:fe:d9:f9:9d:ec:d9:23:7d:69:e3:cc:8a:5b: b0:7c:85:fa:9d:72:06:df:11:a9:3d:c3:07:fe:19:ce:c6:01: 26:31:b7:7c:82:46:1a:19:cf:73:f5:ca:80:57:08:02:68:e1: 34:3d:94:58:a4:95:18:0c:8a:ee:5c:cc:8d:ca:fa:43:a3:0f: 2b:4f:be:1c:79:81:e7:66:84:14:93:fa:80:ed:80:e2:39:01: e6:f2:e0:de -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RDk1MTExMC8GA1UEBRMoRTdENTI4REVFNTEwMjBBMEZFRURDQjVDMjZBNUI5MkM1 MEY4MUZBQzAeFw0yNjA1MTEwODM3MThaFw0yNjA1MTgwODM3MThaMBgxFjAUBgNV BAMTDTZhMDE5NTNlLTg3MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYjCMdVdvHs+MMvR4p034Jv3jhO5sh/Ld2uWCB8Yk7kIFiA6/nG9PHS1s6OYXb CsWr5tAIGGr5LSg6giP0ogj1Tk2m2EklhO022J33si4tbBcz9zzB0KAeO7dHQ+z7 TH4EUll4F+YASy5CBc1qlAJJ5+Se+I3gbhyQkt4k3sjVlgQiE+qX3TJMU0XeOcx8 kd/MoTDrkrB2GrPQ5B/Ri0S+vxY7Tl6y7zjPVl1itbwrAANiDnckyZD5o6K42PDc snyuTYVdnwc8ocG/rF7+5R9qgRnAVNs0TJyJh8lZtcNjNzTaRGCdo5rTgdNsMbBJ ruqelDNYs/0aHWqJh7vPEGBLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUX1+XO+Zd waGJmjZNLsnYaaG2N7cwHwYDVR0jBBgwFoAU59Uo3uUQIKD+7ctcJqW5LFD4H6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEOTUxLzNBMDBENTRDRUY2 QzExRjA4OURENjEzRjU5NkY1NkJDLzU5VW8zdVVRSUtELTdjdGNKcVc1TEZENEg2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTlVbzN1VVFJS0QtN2N0Y0pxVzVMRkQ0SDZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE OTUxLzNBMDBENTRDRUY2QzExRjA4OURENjEzRjU5NkY1NkJDLzU5VW8zdVVRSUtE LTdjdGNKcVc1TEZENEg2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/C74xJktM9eL8WKZR48J9HQmH4vYHaPb9zMctRJiLzfjmG1sdgeCXwyoq3cQX xUFEcBdt1CNZ/LXWvCqzrWlQPsIekNljf1N8LWf2A8lZEoCSH5pu93W/xqNYWnqo KvRWGsA0HgF4IuGHbqats+M4hXhyJoxLPn2nLUKCcli8//tJeTPk//PgNQUUxTzG Jkn9fvfV6WcedC8QI9MDKbI//kFbtwI/Lf7Z+Z3s2SN9aePMiluwfIX6nXIG3xGp PcMH/hnOxgEmMbd8gkYaGc9z9cqAVwgCaOE0PZRYpJUYDIruXMyNyvpDow8rT74c eYHnZoQUk/qA7YDiOQHm8uDe -----END CERTIFICATE-----Generated at Wed May 13 09:35:02 2026 by rpki-client