$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: qHYlQPxipAo53SL3vhXBHNQ1oAQ9DO9NrUQ61HsXX4c= Subject key identifier: 73:3C:94:3B:60:A4:A3:73:F6:E9:B8:5F:A0:84:B5:52:5A:07:AF:DF Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 021C Signing time: Wed 13 May 2026 02:55:17 +0000 Manifest this update: Wed 13 May 2026 02:55:16 +0000 Manifest next update: Wed 20 May 2026 02:55:16 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: yCaePLTtj1DhUUVgtTSimNu2RfuztU8uEYJaLKkcx0I=) 2: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=) 3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=) 4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: May 13 02:55:16 2026 GMT Not After : May 20 02:55:16 2026 GMT Subject: CN=6a03e815-348e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:9c:52:59:6e:38:eb:07:6e:fb:f7:01:57: 91:90:84:06:d3:f8:97:e9:f0:64:e2:26:e8:6d:ef: 39:cc:7e:dc:3c:5b:ab:a1:df:df:2e:1b:23:f6:f2: 54:5d:99:f5:ce:c0:c6:f4:c9:b3:13:5d:e1:7c:94: 97:f2:80:37:6f:84:7e:c4:63:70:88:6e:f4:60:ba: 13:e4:1c:34:2e:a1:a1:5a:de:42:47:f4:b5:05:7b: 82:67:36:30:63:37:b6:8b:8e:3b:41:b0:12:70:6c: c9:3f:b4:55:84:98:a9:21:02:f6:d6:91:31:c1:22: 8b:82:05:20:c2:3e:2c:64:ca:d1:c1:c5:0e:e6:88: ca:84:ac:01:82:5c:ad:5a:07:11:bd:1a:99:91:2f: 87:bf:19:c7:9d:27:e7:8c:8e:dc:03:9c:35:ef:66: ae:79:43:40:15:24:30:fb:8d:66:68:d6:31:5b:b4: b4:df:62:05:e5:67:2c:ba:80:74:f9:63:0b:24:68: 70:82:80:5e:f1:52:67:42:2e:76:03:98:af:7a:b3: 48:54:64:cc:b4:94:89:3b:6e:f7:d4:1b:1f:e1:e5: 3d:23:23:ff:f4:0b:b8:6e:9f:d0:c0:48:1a:59:83: f4:97:54:79:1d:c8:17:26:16:88:8f:ce:49:fc:eb: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3C:94:3B:60:A4:A3:73:F6:E9:B8:5F:A0:84:B5:52:5A:07:AF:DF X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:39:b2:3f:be:71:8d:f3:1a:20:ae:71:e8:50:a9:3c:7c:b7: af:be:c0:bc:eb:1e:16:6b:55:03:77:d8:46:49:bc:26:11:44: 36:3b:25:8d:96:5a:26:20:7e:1d:76:49:04:55:b3:ff:e8:35: f4:f1:a8:94:c2:b8:00:14:c3:06:08:e7:e9:77:da:58:6b:48: 43:01:9e:fa:34:5e:6f:ef:1b:bf:f9:c9:e2:ca:52:b1:25:41: d5:82:cb:7b:db:9a:da:a4:34:8b:45:71:6b:c5:2d:eb:20:9c: 56:8e:05:12:0d:f9:fc:f9:2d:ec:ff:87:4b:81:09:d9:14:07: c6:1a:1f:2a:65:64:cd:3b:f1:ba:f0:f9:39:06:38:0a:72:da: 15:a3:4f:0f:39:98:fe:0e:68:89:d5:8d:85:32:ca:e1:3b:7e: 3e:35:e7:39:11:0f:ab:62:d1:ce:6e:a7:6d:4c:24:66:83:79: d0:f5:15:74:60:20:8e:7e:18:a6:63:65:49:72:b7:42:c2:9c: f4:83:97:c9:66:d8:6b:95:92:ce:c3:04:dc:75:3f:02:7b:d1: c2:5e:7e:09:d9:aa:02:ed:9d:ee:77:bd:e3:d0:38:e0:f8:61: 27:d0:3d:89:b8:7c:b3:df:b2:89:d3:d8:73:76:ba:88:ab:a6: 0b:3f:9a:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjYwNTEzMDI1NTE2WhcNMjYwNTIwMDI1NTE2WjAYMRYwFAYD VQQDEw02YTAzZTgxNS0zNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPacUlluOOsHbvv3AVeRkIQG0/iX6fBk4ibobe85zH7cPFurod/fLhsj9vJU XZn1zsDG9MmzE13hfJSX8oA3b4R+xGNwiG70YLoT5Bw0LqGhWt5CR/S1BXuCZzYw Yze2i447QbAScGzJP7RVhJipIQL21pExwSKLggUgwj4sZMrRwcUO5ojKhKwBglyt WgcRvRqZkS+HvxnHnSfnjI7cA5w172aueUNAFSQw+41maNYxW7S032IF5WcsuoB0 +WMLJGhwgoBe8VJnQi52A5iverNIVGTMtJSJO2731Bsf4eU9IyP/9Au4bp/QwEga WYP0l1R5HcgXJhaIj85J/Otk9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHM8lDtg pKNz9um4X6CEtVJaB6/fMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaTmyP75xjfMaIK5x6FCpPHy3r77AvOseFmtVA3fYRkm8JhFENjsljZZaJiB+ HXZJBFWz/+g19PGolMK4ABTDBgjn6XfaWGtIQwGe+jReb+8bv/nJ4spSsSVB1YLL e9ua2qQ0i0Vxa8Ut6yCcVo4FEg35/Pkt7P+HS4EJ2RQHxhofKmVkzTvxuvD5OQY4 CnLaFaNPDzmY/g5oidWNhTLK4Tt+PjXnOREPq2LRzm6nbUwkZoN50PUVdGAgjn4Y pmNlSXK3QsKc9IOXyWbYa5WSzsME3HU/AnvRwl5+CdmqAu2d7ne949A44PhhJ9A9 ibh8s9+yidPYc3a6iKumCz+aGA== -----END CERTIFICATE-----Generated at Wed May 13 16:18:58 2026 by rpki-client