$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: sb0hBDusSvP9TLdojv/VbjcpVi6toQZB4ZZ4AGxNcJI= Subject key identifier: 28:C6:64:88:8F:91:63:14:52:71:3F:7B:B0:F0:35:74:17:97:45:BB Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 01E2 Signing time: Mon 11 May 2026 03:33:43 +0000 Manifest this update: Mon 11 May 2026 03:33:43 +0000 Manifest next update: Mon 18 May 2026 03:33:43 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: mVu7DmBjXGZOywYJIsxHpWKy2jdYrxBNsU/ySKxQk74=) 2: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: 55QHoYjeQW2YY84IgZmrw7Bp3j4BU5OniNwUyuBN8Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: May 11 03:33:43 2026 GMT Not After : May 18 03:33:43 2026 GMT Subject: CN=6a014e17-66ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:a7:3d:35:9c:b9:43:1d:bc:81:c9:01:31: 93:66:f6:35:74:41:29:31:02:50:3d:dc:42:6a:7b: 71:1a:bb:87:db:36:25:58:e3:43:a8:47:8d:ae:a3: fc:3f:6f:d9:61:1c:e3:9e:75:30:d9:7f:74:3d:e8: b3:ef:a3:51:6e:00:49:5b:ba:fc:d0:d7:06:05:eb: 69:3b:50:f2:ba:12:80:b3:75:b6:d3:09:e1:3d:70: bf:40:a1:40:89:b2:30:fd:40:1e:31:79:cf:e2:e4: 12:52:69:76:85:39:4f:5f:c0:66:cc:78:3d:58:a4: 90:43:6c:0d:b0:df:f7:1a:c8:6e:01:8b:1d:4d:f2: d5:04:93:7f:be:f5:a7:c5:86:da:0b:3c:70:76:6f: 0f:e7:7d:b2:01:be:1c:5b:6a:36:27:d4:c1:d5:0d: bf:21:d0:2d:bf:a2:83:78:37:41:6f:24:ba:e4:6f: 2c:e1:73:bd:00:50:48:0f:0b:bf:7e:e6:4d:3c:7d: 58:39:3d:c6:7b:b6:39:72:f5:02:9c:b7:22:e7:4f: 4a:fc:a4:70:6e:b6:f2:95:bb:8e:9d:dc:de:8e:f9: 0b:3a:70:a0:f0:bf:84:44:7d:4c:3d:6a:6a:9b:13: bb:e5:fe:2e:cd:f5:bb:81:58:37:87:25:f2:a6:4f: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C6:64:88:8F:91:63:14:52:71:3F:7B:B0:F0:35:74:17:97:45:BB X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:35:85:c8:8c:8d:e3:f2:0a:50:2b:1f:1e:5e:4b:fd:f0:31: 06:46:4c:f7:01:b1:0d:9b:db:ce:7f:1c:8c:d0:24:76:35:5f: 28:6a:aa:c3:e9:30:86:92:3c:1b:5f:4f:39:b6:c5:11:74:46: 18:8d:0e:03:8b:7c:88:84:70:65:75:75:84:f6:0d:65:e1:a7: 47:5d:45:06:29:dd:b6:16:1b:87:75:7f:4f:8c:f7:ad:bf:51: 86:34:1f:91:5e:f8:7f:63:72:f6:e9:24:77:1c:10:41:e2:87: 5c:7b:f1:2d:f9:49:04:9e:dc:b1:5d:8a:99:80:a0:4a:7f:2c: 87:63:ed:0d:56:4c:51:bc:35:94:bd:e2:54:a6:bc:36:de:91: fd:c4:9c:7a:d5:5c:12:d8:9c:a1:04:27:81:ce:14:cf:e5:e2: 27:0f:cb:ac:cf:3b:8a:8d:ba:c2:8a:21:85:e9:10:d6:e4:c3: d5:d6:32:b0:3e:ff:3e:a2:4b:84:b9:7e:ba:06:7d:8b:e4:f0: 5c:89:53:78:f9:f1:98:4b:29:94:6a:02:a7:04:5f:c6:a6:49: 0a:98:16:29:7d:51:28:6c:b7:42:6c:c9:36:36:d3:fc:62:8c: 6d:c4:65:6c:b0:90:39:48:3c:10:68:94:e7:af:1f:a8:8e:64: 11:d5:56:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjYwNTExMDMzMzQzWhcNMjYwNTE4MDMzMzQzWjAYMRYwFAYD VQQDEw02YTAxNGUxNy02NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLGnPTWcuUMdvIHJATGTZvY1dEEpMQJQPdxCantxGruH2zYlWONDqEeNrqP8 P2/ZYRzjnnUw2X90Peiz76NRbgBJW7r80NcGBetpO1DyuhKAs3W20wnhPXC/QKFA ibIw/UAeMXnP4uQSUml2hTlPX8BmzHg9WKSQQ2wNsN/3GshuAYsdTfLVBJN/vvWn xYbaCzxwdm8P532yAb4cW2o2J9TB1Q2/IdAtv6KDeDdBbyS65G8s4XO9AFBIDwu/ fuZNPH1YOT3Ge7Y5cvUCnLci509K/KRwbrbylbuOndzejvkLOnCg8L+ERH1MPWpq mxO75f4uzfW7gVg3hyXypk/HlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjGZIiP kWMUUnE/e7DwNXQXl0W7MB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhzWFyIyN4/IKUCsfHl5L/fAxBkZM9wGxDZvbzn8cjNAkdjVfKGqqw+kwhpI8 G19PObbFEXRGGI0OA4t8iIRwZXV1hPYNZeGnR11FBindthYbh3V/T4z3rb9RhjQf kV74f2Ny9ukkdxwQQeKHXHvxLflJBJ7csV2KmYCgSn8sh2PtDVZMUbw1lL3iVKa8 Nt6R/cScetVcEticoQQngc4Uz+XiJw/LrM87io26woohhekQ1uTD1dYysD7/PqJL hLl+ugZ9i+TwXIlTePnxmEsplGoCpwRfxqZJCpgWKX1RKGy3QmzJNjbT/GKMbcRl bLCQOUg8EGiU568fqI5kEdVW4A== -----END CERTIFICATE-----Generated at Wed May 13 05:33:50 2026 by rpki-client