$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: eGy4p+NtFEhoNr0gnEddFmPYH+Otm7KYs/hg1Wzb0j4= Subject key identifier: E0:4E:64:1D:B5:15:53:83:7D:12:BC:00:D6:E4:99:D2:93:5B:9A:0C Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 0602 Signing time: Sun 10 May 2026 22:59:51 +0000 Manifest this update: Sun 10 May 2026 22:59:51 +0000 Manifest next update: Sun 17 May 2026 22:59:51 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: gY6OwSgo/CLreyzopOnf9NFNU6a9C7Q79qA6DfLDvd4=) 2: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=) 3: C41221884B6011F092B79129C4F9AE02.roa (hash: yoHJyz0yzJ4YEb6A+CcIpp3EhYT5/ZPAYDAwC5c4zpY=) 4: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: bbQNzvv4nckI3fm1OaoK6AxA0GT1zzabnl8/hxp5r9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 22:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: May 10 22:59:51 2026 GMT Not After : May 17 22:59:51 2026 GMT Subject: CN=6a010de7-4d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:9a:d9:32:14:c3:8e:65:dc:00:6a:dd:31: 7e:90:25:3e:fb:e6:80:f3:44:c3:bc:0e:3b:48:6e: 80:e5:02:fe:b1:8a:61:fc:9b:89:f9:f3:20:cd:17: 4c:c9:6d:78:1e:81:51:69:90:ed:fd:43:ab:75:45: 61:9c:66:b4:99:2f:5a:cf:60:70:0b:58:81:e3:5a: 33:66:55:5a:da:12:02:8e:85:19:98:0a:69:25:49: a1:97:2a:3a:6e:21:b3:64:0d:8d:1f:10:ea:1f:b2: 88:cd:36:49:0b:16:72:dd:0a:24:8d:83:ac:06:a6: 69:f1:55:64:75:88:25:24:c0:37:43:d7:db:f6:f8: a4:c1:4c:d2:35:af:7c:56:dd:6c:e8:85:08:ec:a0: 82:7f:1a:25:58:ff:03:0c:e8:b5:41:33:72:d3:28: 04:43:8a:38:fd:46:a2:11:8a:50:bc:c3:7d:02:42: d8:f0:00:78:f5:fa:85:b1:d7:4d:29:96:fa:cd:a9: d1:6e:b7:3c:8f:71:2b:ce:93:b2:25:12:f9:cb:53: f0:40:cb:e4:4f:f4:b4:94:ed:1b:22:18:98:d4:30: 8b:53:d6:21:04:97:8b:b4:73:61:27:9e:03:1c:18: 6e:33:c8:34:5c:c4:e6:78:31:cb:67:b3:62:58:ec: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4E:64:1D:B5:15:53:83:7D:12:BC:00:D6:E4:99:D2:93:5B:9A:0C X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e6:21:28:b2:43:3c:cc:1e:fd:a4:99:6e:a0:22:16:33:e5: 80:3e:2a:68:ba:bd:b5:78:ec:eb:d4:c5:67:6d:2f:47:26:ba: 97:ff:98:68:41:fc:53:f4:d7:09:df:c5:21:a7:92:4c:38:00: 47:eb:d6:33:36:4b:92:0c:a5:1d:46:86:05:b7:21:86:be:b8: 02:ee:4c:92:df:05:9a:42:de:08:0f:5b:57:3f:56:78:76:1a: 50:53:36:69:31:62:7c:15:3f:3f:ec:87:9b:92:9a:78:4e:94: e7:99:5f:99:6b:44:cd:8d:ee:82:44:3d:0e:ef:1f:6d:db:8d: 5d:2c:c3:e4:ce:cd:5a:dd:43:92:2b:fa:03:b6:e2:08:19:73: 48:44:5e:cc:0f:db:36:e3:46:ea:ee:eb:aa:9a:ae:90:d6:4a: 77:80:87:5f:00:31:42:47:d4:f3:2f:d4:dc:fe:48:13:aa:e0: e1:c2:2b:b8:b2:15:1b:3e:53:0c:0a:d8:99:50:7a:75:cd:4c: 1a:d4:f3:75:d3:ab:bf:71:5b:cb:ca:6e:dc:4a:6a:f0:29:02: 18:27:9f:15:c1:4d:f9:7e:3b:ab:e6:66:bb:19:ae:54:c9:7a: 5e:5a:57:b4:3a:72:91:99:81:59:8f:03:9e:6d:4f:31:dc:b2: 38:9e:23:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjYwNTEwMjI1OTUxWhcNMjYwNTE3MjI1OTUxWjAYMRYwFAYD VQQDEw02YTAxMGRlNy00ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTWa2TIUw45l3ABq3TF+kCU+++aA80TDvA47SG6A5QL+sYph/JuJ+fMgzRdM yW14HoFRaZDt/UOrdUVhnGa0mS9az2BwC1iB41ozZlVa2hICjoUZmAppJUmhlyo6 biGzZA2NHxDqH7KIzTZJCxZy3QokjYOsBqZp8VVkdYglJMA3Q9fb9vikwUzSNa98 Vt1s6IUI7KCCfxolWP8DDOi1QTNy0ygEQ4o4/UaiEYpQvMN9AkLY8AB49fqFsddN KZb6zanRbrc8j3ErzpOyJRL5y1PwQMvkT/S0lO0bIhiY1DCLU9YhBJeLtHNhJ54D HBhuM8g0XMTmeDHLZ7NiWOzlmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBOZB21 FVODfRK8ANbkmdKTW5oMMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAouYhKLJDPMwe/aSZbqAiFjPlgD4qaLq9tXjs69TFZ20vRya6l/+YaEH8U/TX Cd/FIaeSTDgAR+vWMzZLkgylHUaGBbchhr64Au5Mkt8FmkLeCA9bVz9WeHYaUFM2 aTFifBU/P+yHm5KaeE6U55lfmWtEzY3ugkQ9Du8fbduNXSzD5M7NWt1Dkiv6A7bi CBlzSERezA/bNuNG6u7rqpqukNZKd4CHXwAxQkfU8y/U3P5IE6rg4cIruLIVGz5T DArYmVB6dc1MGtTzddOrv3Fby8pu3Epq8CkCGCefFcFN+X47q+ZmuxmuVMl6XlpX tDpykZmBWY8Dnm1PMdyyOJ4jUg== -----END CERTIFICATE-----Generated at Wed May 13 01:04:13 2026 by rpki-client