$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: eoMQT48Fiwk8swWEoJOkF6oQL8TcLccaxvAQ7f2Or7w= Subject key identifier: 6F:C0:CE:40:54:D9:4B:30:ED:FC:77:EF:07:D3:EA:38:3F:8E:15:F2 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D61 Signing time: Tue 12 May 2026 18:03:32 +0000 Manifest this update: Tue 12 May 2026 18:03:31 +0000 Manifest next update: Tue 19 May 2026 18:03:31 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: lfza7Iy7k5kQJSJ/FmHSG6GZy2wcNBGzKF2TAMdUrsY=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3458 (0xd82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: May 12 18:03:31 2026 GMT Not After : May 19 18:03:31 2026 GMT Subject: CN=6a036b74-a66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:62:4c:ed:74:a4:6a:86:28:d4:f5:0f:c8: 95:11:80:c0:56:8b:0b:f6:58:99:41:dc:13:82:47: 8b:64:18:33:5b:3b:6c:63:e8:0f:7f:50:67:5b:6e: 19:03:38:26:7b:b3:12:ed:c6:ce:ea:a0:c1:a5:f1: 74:4d:24:0c:c2:ba:27:66:6c:2b:c3:21:c1:0e:fb: d8:c2:77:e4:fb:f6:25:3f:28:00:24:fd:ca:6a:63: e8:07:6b:0f:8a:56:6b:ba:de:d3:ee:19:ad:e6:fc: ef:86:c2:c9:29:d2:a4:9a:c8:44:dc:31:27:f0:bc: e7:81:af:8e:6a:db:4a:f6:d8:1e:f4:63:a1:cb:1c: 73:40:f9:f8:8c:df:e8:70:ff:30:33:05:f2:0e:cb: b6:34:df:b2:ca:76:62:e3:49:2c:ba:44:d4:11:14: 41:be:98:23:b2:b1:d6:4a:72:6f:d5:5e:5f:04:e7: e8:07:56:6a:c8:11:44:64:76:a7:16:14:61:78:3d: 94:cf:fe:10:4d:3e:5b:e3:76:57:36:6d:03:ee:29: 7a:31:62:a6:45:ae:93:9a:6d:76:b5:a5:00:a1:5e: e6:97:cc:4a:23:a7:55:05:ed:b9:17:c5:6c:43:69: 9d:39:90:15:43:97:31:78:34:98:36:73:97:1a:d1: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:CE:40:54:D9:4B:30:ED:FC:77:EF:07:D3:EA:38:3F:8E:15:F2 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d0:2b:4e:55:e8:fc:21:9a:32:01:26:72:68:5c:24:bd:20: d1:90:c8:f4:df:3b:b1:ce:18:f6:da:41:d4:80:68:14:43:82: 8c:81:ee:84:85:c1:c4:c5:f7:6e:19:e9:88:f0:d1:f7:e8:f7: 6c:b5:1a:b6:1d:44:92:d5:58:4c:82:11:f1:ec:e4:a3:e4:35: 92:b6:9c:34:61:a2:1e:31:fa:52:4d:b9:e6:98:06:dc:fb:bc: f5:23:78:57:79:50:9d:3a:47:26:7b:e3:05:17:4c:f1:00:74: 54:8b:a0:74:eb:1b:a1:71:a6:18:41:80:74:26:18:19:76:09: ac:f9:5a:12:73:b7:b1:40:8e:fd:ef:ae:bd:6e:85:8b:6c:b2: 55:ab:66:d8:60:66:dd:2a:4c:7f:08:de:77:56:d2:f3:19:7c: 39:93:5e:37:9b:66:d2:b0:e9:60:5e:2a:e6:ec:33:68:cf:2c: 44:11:6c:1c:65:9f:64:a6:70:c3:3c:4e:f5:fd:7d:d3:0f:ef: c9:39:c5:3f:35:06:f1:1d:af:1b:f4:28:79:9d:89:46:03:51: 74:3e:d1:fe:e7:fc:a3:ec:75:ef:96:03:8d:3b:79:b3:79:2e: cd:22:51:30:83:d4:af:43:0f:35:fa:f1:ef:ae:bb:c5:a9:0a: 43:6c:86:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjYwNTEyMTgwMzMxWhcNMjYwNTE5MTgwMzMxWjAYMRYwFAYD VQQDEw02YTAzNmI3NC1hNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA169iTO10pGqGKNT1D8iVEYDAVosL9liZQdwTgkeLZBgzWztsY+gPf1BnW24Z Azgme7MS7cbO6qDBpfF0TSQMwronZmwrwyHBDvvYwnfk+/YlPygAJP3KamPoB2sP ilZrut7T7hmt5vzvhsLJKdKkmshE3DEn8Lznga+OattK9tge9GOhyxxzQPn4jN/o cP8wMwXyDsu2NN+yynZi40ksukTUERRBvpgjsrHWSnJv1V5fBOfoB1ZqyBFEZHan FhRheD2Uz/4QTT5b43ZXNm0D7il6MWKmRa6Tmm12taUAoV7ml8xKI6dVBe25F8Vs Q2mdOZAVQ5cxeDSYNnOXGtErDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/AzkBU 2Usw7fx37wfT6jg/jhXyMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ9ArTlXo/CGaMgEmcmhcJL0g0ZDI9N87sc4Y9tpB1IBoFEOCjIHuhIXBxMX3 bhnpiPDR9+j3bLUath1EktVYTIIR8ezko+Q1kracNGGiHjH6Uk255pgG3Pu89SN4 V3lQnTpHJnvjBRdM8QB0VIugdOsboXGmGEGAdCYYGXYJrPlaEnO3sUCO/e+uvW6F i2yyVatm2GBm3SpMfwjed1bS8xl8OZNeN5tm0rDpYF4q5uwzaM8sRBFsHGWfZKZw wzxO9f190w/vyTnFPzUG8R2vG/QoeZ2JRgNRdD7R/uf8o+x175YDjTt5s3kuzSJR MIPUr0MPNfrx7667xakKQ2yGyw== -----END CERTIFICATE-----Generated at Wed May 13 03:10:34 2026 by rpki-client