$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: b622cUuufIaQiB2qLIzC7YFJgBYhE0Ll8iJQb42vYUY= Subject key identifier: 72:5E:A8:1E:48:23:5C:52:E6:25:97:95:51:A4:D2:E7:8B:FD:5D:5C Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 097D Signing time: Tue 12 May 2026 20:06:50 +0000 Manifest this update: Tue 12 May 2026 20:06:49 +0000 Manifest next update: Tue 19 May 2026 20:06:49 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: uGoZXq5ycjfffbNsUGz1+kLzkDcL9HAYk/m0Tzz94k8=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: mcK4qQYqmr139GB74M+RvHkP1qDPO4dE/sdLHTuRilw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: May 12 20:06:49 2026 GMT Not After : May 19 20:06:49 2026 GMT Subject: CN=6a03885a-d1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:5d:64:ec:dc:f3:90:03:31:31:4a:a9:34: 95:52:02:8a:40:e7:45:38:bb:4a:56:d8:27:5d:e2: b2:2f:0c:85:ad:4f:ee:98:86:02:cc:e9:23:76:36: 2d:2b:1c:15:f1:ca:57:b6:16:10:2c:91:a8:c0:86: 31:d4:2f:df:c7:0b:30:9c:7f:4a:30:f5:9f:47:8d: 19:50:80:1c:51:de:ef:e7:b7:c4:9d:9c:c2:a9:78: 2d:53:1d:76:f9:a0:85:6b:8e:f5:71:95:d0:6a:8f: 79:32:ee:37:73:c4:12:c5:b5:0c:9d:ba:50:e0:17: 16:39:33:fd:3d:64:91:e5:f1:fd:d9:8a:17:a8:1c: 60:a7:b4:d8:04:3b:f4:fb:f2:b9:dc:af:c3:1e:e6: c9:4d:2f:8b:ea:7d:19:3d:e4:76:15:07:41:a3:19: 7a:f8:b4:dd:4f:87:c5:28:92:ef:71:04:01:2e:13: ac:53:53:4c:9b:c0:03:ef:c2:d2:c3:5c:ec:9a:fb: 14:06:70:5c:02:e6:8f:89:0e:25:24:23:cd:b1:86: 8f:4d:11:e7:fa:a4:d6:cc:d5:6a:7a:ca:b8:d1:af: ef:7c:61:fc:0c:9f:ad:41:ee:20:a6:a9:4e:bf:f0: 72:0d:02:73:cc:f2:01:05:45:3d:e9:d7:a4:30:ac: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:A8:1E:48:23:5C:52:E6:25:97:95:51:A4:D2:E7:8B:FD:5D:5C X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0b:b0:c2:10:13:48:9c:ab:5e:a4:0a:b9:2b:65:eb:b9:4a: 6a:99:2e:81:a4:66:88:b4:eb:3c:fa:92:18:79:cc:a7:29:82: 34:8e:c1:3f:ad:95:28:3e:d5:10:52:2a:af:2d:48:57:55:af: 53:e2:05:8a:7f:64:a5:1b:8c:96:07:de:d3:d8:fe:0c:ce:f7: 33:f6:3c:aa:55:ee:0d:34:e0:bc:ab:dc:a4:41:35:cd:49:89: b4:40:81:29:f9:26:6c:4e:92:eb:44:98:72:2d:78:50:22:14: bf:7a:c4:dd:f4:ab:01:ac:48:81:01:37:84:68:c0:19:61:44: c4:10:37:6b:25:2a:33:58:85:0c:9a:bf:17:60:d9:b5:c2:b7: 5a:0e:96:26:4a:e9:2b:31:a7:a1:1d:93:3d:a5:9b:6d:79:4c: 18:ec:62:f3:ae:92:a0:f8:51:e0:ae:62:38:bd:d7:58:2f:47: aa:ab:1d:66:1d:2c:4d:f0:13:48:03:82:82:0a:4e:38:ae:2b: a1:bb:0f:eb:85:ca:84:da:4d:1f:01:b1:3d:be:a0:f1:a3:4a: df:f1:fd:7f:df:35:94:51:6c:90:c6:19:f1:56:19:f1:c7:43: 76:00:93:c2:1e:f3:48:14:12:ff:ce:47:1d:7f:b9:9e:ba:f3: 34:fd:cf:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjYwNTEyMjAwNjQ5WhcNMjYwNTE5MjAwNjQ5WjAYMRYwFAYD VQQDEw02YTAzODg1YS1kMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG9dZOzc85ADMTFKqTSVUgKKQOdFOLtKVtgnXeKyLwyFrU/umIYCzOkjdjYt KxwV8cpXthYQLJGowIYx1C/fxwswnH9KMPWfR40ZUIAcUd7v57fEnZzCqXgtUx12 +aCFa471cZXQao95Mu43c8QSxbUMnbpQ4BcWOTP9PWSR5fH92YoXqBxgp7TYBDv0 +/K53K/DHubJTS+L6n0ZPeR2FQdBoxl6+LTdT4fFKJLvcQQBLhOsU1NMm8AD78LS w1zsmvsUBnBcAuaPiQ4lJCPNsYaPTRHn+qTWzNVqesq40a/vfGH8DJ+tQe4gpqlO v/ByDQJzzPIBBUU96dekMKyzjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJeqB5I I1xS5iWXlVGk0ueL/V1cMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmQuwwhATSJyrXqQKuStl67lKapkugaRmiLTrPPqSGHnMpymCNI7BP62VKD7V EFIqry1IV1WvU+IFin9kpRuMlgfe09j+DM73M/Y8qlXuDTTgvKvcpEE1zUmJtECB KfkmbE6S60SYci14UCIUv3rE3fSrAaxIgQE3hGjAGWFExBA3ayUqM1iFDJq/F2DZ tcK3Wg6WJkrpKzGnoR2TPaWbbXlMGOxi866SoPhR4K5iOL3XWC9HqqsdZh0sTfAT SAOCggpOOK4robsP64XKhNpNHwGxPb6g8aNK3/H9f981lFFskMYZ8VYZ8cdDdgCT wh7zSBQS/85HHX+5nrrzNP3PCg== -----END CERTIFICATE-----Generated at Wed May 13 01:22:49 2026 by rpki-client