$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: 6iyu9GYbZpLy+YcsvzDKwqFsqNJ4J7ZWXS4iLkzCEvg= Subject key identifier: 3F:44:1B:92:3A:CB:79:DF:CC:CB:37:B0:1E:D7:9D:66:E4:FD:7B:E6 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 0533 Signing time: Tue 12 May 2026 23:37:31 +0000 Manifest this update: Tue 12 May 2026 23:37:31 +0000 Manifest next update: Tue 19 May 2026 23:37:31 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: IZojpIW5e91kFXzCYDMO4F5pyWIXTYXhg/oJqCuQ8ts=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: May 12 23:37:31 2026 GMT Not After : May 19 23:37:31 2026 GMT Subject: CN=6a03b9bb-7e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:aa:6b:5b:ad:00:fb:db:2f:b5:e0:fe:7c: 2f:b2:a8:eb:04:b1:a1:56:de:ea:84:d8:2a:3b:38: ff:6b:21:e0:c7:5f:cc:02:a2:72:68:58:0a:4a:da: 8f:83:1e:c3:f8:f9:d2:f8:f0:dd:85:99:68:11:95: 80:db:4f:a7:02:03:55:76:0f:37:25:d9:85:7b:2c: 4f:bb:8e:95:e2:21:9e:c5:4d:80:43:ee:5d:79:a6: 5a:ed:9f:d1:48:76:80:53:e5:8b:17:4e:10:e6:b1: ba:7f:50:82:53:af:ea:02:62:c4:00:b0:57:2c:11: 20:fc:d9:a0:e1:00:c1:22:9d:ad:37:fa:e7:fd:94: 00:14:39:62:46:79:90:87:72:4c:9c:94:e7:89:9c: a7:80:85:fd:fe:31:2b:80:a9:8b:15:d3:6d:1b:d8: 81:12:b1:ae:1f:77:b5:6d:48:8f:da:4f:87:9b:15: d1:7a:a3:c6:31:52:e3:e5:65:74:3b:cf:5c:b9:3a: 3d:ea:bd:20:66:47:70:9d:ae:24:8d:80:71:9e:a2: 48:8c:b6:67:7e:cb:51:0d:7a:b3:20:ce:7e:d3:6c: e3:c7:c9:ef:8b:d7:70:b4:c2:31:6e:d7:38:4c:20: 61:36:c8:e1:25:3e:21:b9:db:75:ad:12:22:56:ad: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:44:1B:92:3A:CB:79:DF:CC:CB:37:B0:1E:D7:9D:66:E4:FD:7B:E6 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6b:4f:c5:b3:db:a2:26:23:2e:fa:23:98:cf:dc:98:1d:9c: 7a:f8:dc:0c:67:2b:61:e0:6c:c0:2c:3c:10:59:43:ce:fd:9e: 48:66:0b:c0:bc:6a:37:49:24:25:50:b5:43:00:ab:53:4d:19: 64:ad:ed:38:26:34:8d:4d:7e:32:fa:2f:e4:11:8e:71:eb:95: 2a:ea:5a:9c:88:23:95:76:09:88:9e:b3:82:eb:5f:8d:cb:f5: dc:6f:bb:e8:44:b2:7f:11:1a:75:b2:26:25:d2:09:76:6a:06: 9f:72:b0:2b:c0:0a:27:94:d5:7f:32:31:ff:8c:99:10:2d:70: 6c:88:45:3d:b3:3f:a8:ed:b6:9b:bc:fd:0e:6e:17:39:a8:97: f7:59:0e:ec:b2:9d:9d:cc:0d:7c:44:27:f9:b7:8c:0d:e9:6f: 74:b1:b2:49:d8:98:41:39:ba:e2:87:58:c0:96:7f:ad:63:e4: 08:d3:e6:34:e2:ef:51:77:64:7e:a8:22:12:9d:2d:db:d1:34: 39:86:67:34:b1:2f:5f:07:79:04:e9:6c:df:0b:13:ee:6f:d8: 35:2c:58:b9:34:94:a4:de:0b:af:24:3f:5c:73:19:e2:e3:9c: a4:55:42:54:21:d1:27:32:1c:6e:54:63:03:bb:0b:0d:a0:39: 64:d9:aa:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjYwNTEyMjMzNzMxWhcNMjYwNTE5MjMzNzMxWjAYMRYwFAYD VQQDEw02YTAzYjliYi03ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpOqa1utAPvbL7Xg/nwvsqjrBLGhVt7qhNgqOzj/ayHgx1/MAqJyaFgKStqP gx7D+PnS+PDdhZloEZWA20+nAgNVdg83JdmFeyxPu46V4iGexU2AQ+5deaZa7Z/R SHaAU+WLF04Q5rG6f1CCU6/qAmLEALBXLBEg/Nmg4QDBIp2tN/rn/ZQAFDliRnmQ h3JMnJTniZyngIX9/jErgKmLFdNtG9iBErGuH3e1bUiP2k+HmxXReqPGMVLj5WV0 O89cuTo96r0gZkdwna4kjYBxnqJIjLZnfstRDXqzIM5+02zjx8nvi9dwtMIxbtc4 TCBhNsjhJT4hudt1rRIiVq3jlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9EG5I6 y3nfzMs3sB7XnWbk/XvmMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMmtPxbPboiYjLvojmM/cmB2cevjcDGcrYeBswCw8EFlDzv2eSGYLwLxqN0kk JVC1QwCrU00ZZK3tOCY0jU1+Mvov5BGOceuVKupanIgjlXYJiJ6zgutfjcv13G+7 6ESyfxEadbImJdIJdmoGn3KwK8AKJ5TVfzIx/4yZEC1wbIhFPbM/qO22m7z9Dm4X OaiX91kO7LKdncwNfEQn+beMDelvdLGySdiYQTm64odYwJZ/rWPkCNPmNOLvUXdk fqgiEp0t29E0OYZnNLEvXwd5BOls3wsT7m/YNSxYuTSUpN4LryQ/XHMZ4uOcpFVC VCHRJzIcblRjA7sLDaA5ZNmqkw== -----END CERTIFICATE-----Generated at Wed May 13 13:52:12 2026 by rpki-client