$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: CAOAUODFFTSobzdDaIYNBYBCCnoampUqcAwwuW9U6DE= Subject key identifier: F9:A3:36:77:01:0C:5A:78:F2:E1:90:F1:A4:A8:03:34:58:FE:E0:6E Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 0223 Signing time: Wed 13 May 2026 02:53:35 +0000 Manifest this update: Wed 13 May 2026 02:53:34 +0000 Manifest next update: Wed 20 May 2026 02:53:34 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: ttPVyVT9zmpcerGpzBQkNbuJcoPevLIr687UcocZ4kg=) 2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: qnvrSMl0yQyYkmnyhwN0g0h+sOgggPn26d38v0T1z/c=) 3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: /zH5NCxaOe44lNiOZuL2x1qIFvtAXXk9k531YTZP3Dw=) 4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: WH/ILcSrKq9+xG39/9dwHQTlGi9rnQp31CFmoa5QIUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: May 13 02:53:34 2026 GMT Not After : May 20 02:53:34 2026 GMT Subject: CN=6a03e7ae-21c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:7f:9c:a4:ac:87:f3:58:ca:2e:1d:b7:3a: 2b:f9:3e:b9:8b:74:9d:3f:6e:b9:6b:c1:cc:cb:a7: 15:42:ab:d1:e8:a0:c1:b5:a1:01:64:8f:2a:44:31: 78:88:ea:a9:ad:a9:bb:f7:c9:68:01:ad:d5:e6:2b: 00:36:dc:ce:71:11:c8:01:37:56:8d:a3:89:b2:c1: e0:95:e1:1b:b9:c4:51:c3:f7:d8:1d:dc:74:50:41: 49:61:92:6f:72:5e:c6:09:06:30:ae:aa:91:16:94: 6d:47:17:37:e5:a5:59:fc:7d:0a:1a:37:cd:fa:9d: c4:48:fa:5f:81:5d:40:65:71:b5:2d:99:1c:ca:bd: 70:28:6c:a0:ec:51:02:4b:ac:4f:7f:ee:d2:13:e3: 0d:65:92:ad:16:cf:7f:58:60:17:58:54:5a:6d:4f: 47:5c:cf:21:62:0b:76:f4:a3:38:6e:0c:21:d2:3e: 76:69:9a:0a:5d:9c:51:62:33:7c:b2:b4:95:18:21: c2:de:e9:c5:73:c6:8f:10:55:45:0f:66:5a:1c:78: 7a:f7:ed:fd:52:f7:a5:1a:39:27:3f:2e:ad:07:8a: af:de:b2:3f:06:32:48:f0:52:7f:62:2e:19:19:f2: b9:31:d1:d7:8f:ca:23:1c:08:72:50:11:d2:b2:4e: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A3:36:77:01:0C:5A:78:F2:E1:90:F1:A4:A8:03:34:58:FE:E0:6E X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:91:27:28:4c:6a:ca:41:4e:78:88:ac:7e:9d:58:82:75:90: 91:e6:62:ff:10:e6:a4:b1:14:07:aa:d1:5b:44:89:ee:5e:9b: d2:35:3c:60:89:ff:a8:3a:22:d8:99:c0:a5:5a:0f:b3:97:4e: 90:d3:6c:76:01:97:e2:66:ba:e2:a8:39:e1:3b:42:77:4c:84: 6e:72:e1:2e:40:ba:f2:66:d0:92:12:3d:6a:3d:6d:d1:ed:35: e0:b8:f4:9f:73:30:fa:bf:e3:0b:db:b1:12:47:ac:8f:dd:49: 45:e2:7f:1b:bb:a3:d0:c2:c9:e4:16:68:fc:7d:1a:e5:b3:8d: b8:33:10:be:b1:83:75:26:48:42:46:91:9a:2d:7f:b4:06:5d: 46:b1:5b:03:28:8e:26:fd:8b:8a:50:24:3d:cb:af:4c:3b:f6: 55:af:74:c8:8b:19:aa:cb:55:1f:a8:ff:b3:bf:91:cf:74:3b: ba:d9:56:7a:7e:6a:2c:b8:dc:0c:04:ff:47:b2:cb:69:42:8a: 67:96:94:8b:5c:83:b7:d7:46:63:3b:fe:87:e1:71:9b:be:61: 83:10:26:6d:3d:25:8a:d1:84:7e:8d:2b:cb:e2:91:cf:69:d8: 1a:0a:2c:6d:16:bf:72:5f:05:1c:d4:ce:8e:4e:8f:3f:5e:4f: e2:25:a2:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjYwNTEzMDI1MzM0WhcNMjYwNTIwMDI1MzM0WjAYMRYwFAYD VQQDEw02YTAzZTdhZS0yMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VZ/nKSsh/NYyi4dtzor+T65i3SdP265a8HMy6cVQqvR6KDBtaEBZI8qRDF4 iOqpram798loAa3V5isANtzOcRHIATdWjaOJssHgleEbucRRw/fYHdx0UEFJYZJv cl7GCQYwrqqRFpRtRxc35aVZ/H0KGjfN+p3ESPpfgV1AZXG1LZkcyr1wKGyg7FEC S6xPf+7SE+MNZZKtFs9/WGAXWFRabU9HXM8hYgt29KM4bgwh0j52aZoKXZxRYjN8 srSVGCHC3unFc8aPEFVFD2ZaHHh69+39UvelGjknPy6tB4qv3rI/BjJI8FJ/Yi4Z GfK5MdHXj8ojHAhyUBHSsk4KaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmjNncB DFp48uGQ8aSoAzRY/uBuMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA65EnKExqykFOeIisfp1YgnWQkeZi/xDmpLEUB6rRW0SJ7l6b0jU8YIn/qDoi 2JnApVoPs5dOkNNsdgGX4ma64qg54TtCd0yEbnLhLkC68mbQkhI9aj1t0e014Lj0 n3Mw+r/jC9uxEkesj91JReJ/G7uj0MLJ5BZo/H0a5bONuDMQvrGDdSZIQkaRmi1/ tAZdRrFbAyiOJv2LilAkPcuvTDv2Va90yIsZqstVH6j/s7+Rz3Q7utlWen5qLLjc DAT/R7LLaUKKZ5aUi1yDt9dGYzv+h+Fxm75hgxAmbT0litGEfo0ry+KRz2nYGgos bRa/cl8FHNTOjk6PP15P4iWiOQ== -----END CERTIFICATE-----Generated at Wed May 13 12:34:35 2026 by rpki-client