$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: jk1IgEMHYXZiEg9W+6NoccVETedalRmm1k2HxV2EPQA= Subject key identifier: DF:74:30:03:32:D1:85:5A:61:E5:E2:37:A4:D2:5F:76:DD:CE:57:D4 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 0251 Signing time: Wed 13 May 2026 02:24:16 +0000 Manifest this update: Wed 13 May 2026 02:24:15 +0000 Manifest next update: Wed 20 May 2026 02:24:15 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: ByOgvsi5NJG9Oor0FTaAFTg8gtIHcVukjJ/4wdN5s7s=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: ZjWTn7RPw7EchMonKVaN+HGBpWShBdJZb78EKus3MRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: May 13 02:24:15 2026 GMT Not After : May 20 02:24:15 2026 GMT Subject: CN=6a03e0d0-fddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:50:c4:fd:fd:45:4e:0d:a0:35:de:74:d8: 4f:95:c7:86:c8:6b:e7:ba:c7:24:ff:4f:7e:2e:6d: 4a:bb:b9:10:b1:71:5c:5d:eb:89:1b:35:0b:05:78: 76:db:11:ca:c3:61:59:10:2a:1d:36:06:6f:82:30: e7:a8:1d:77:99:b9:88:ca:c3:07:83:03:d8:69:6c: 7f:94:b0:2a:b9:c2:85:50:c1:0e:c4:24:f3:ea:7f: be:26:0c:2d:52:16:6f:e3:8b:1b:38:22:e2:ab:24: 58:c6:b0:f0:b9:38:bf:7a:fe:63:5a:82:a3:45:00: e0:eb:3d:62:fe:74:c9:6d:8a:86:ff:24:92:d5:5b: 0d:55:84:cc:63:1e:dd:80:0c:de:fc:64:64:f2:32: 3a:0d:ca:eb:f4:84:ec:5c:d4:e4:86:4a:ce:54:36: a6:db:8b:d0:b6:f1:16:be:1d:8d:8b:c5:ec:15:a6: 28:64:41:b2:2e:56:8f:e0:ee:20:1f:a6:a3:a7:72: 34:5c:80:3e:d8:bd:5a:b7:53:1a:6e:51:49:5a:b6: d8:fd:8d:24:9f:7c:d8:85:bf:f4:24:d5:5b:19:9c: 8b:e5:05:ee:98:90:34:a5:b4:71:c9:fb:4d:79:c9: 8d:25:5a:f2:de:2a:c3:e9:fd:69:59:9e:fd:77:58: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:74:30:03:32:D1:85:5A:61:E5:E2:37:A4:D2:5F:76:DD:CE:57:D4 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:24:ad:d9:e4:b2:80:08:be:57:fc:e1:59:4f:fb:6e:ea:06: 41:c6:77:b9:e3:26:1f:4c:d0:b4:76:57:18:56:72:5a:08:63: 3a:c6:aa:f1:01:d9:1a:68:30:b3:62:45:4e:b8:2e:ba:57:0a: 5b:a1:6e:b2:b1:6d:b0:66:f5:ca:4c:42:4e:2e:4c:79:38:13: 1a:da:60:0f:04:2c:9c:bf:83:0b:3e:51:e8:14:0e:89:0a:38: cc:49:9f:43:04:6b:91:4d:8b:3c:27:81:55:dd:fa:06:ea:80: 30:a8:48:2f:a2:b1:3c:3e:fb:0c:10:c3:6c:2d:ad:1c:a9:4f: cc:fc:f6:60:f6:2c:0c:d4:16:a9:07:99:c4:ae:44:b9:1b:61: c7:e2:e2:eb:26:ed:b5:25:44:fe:8d:cf:92:5f:5b:d2:2c:8b: 08:c0:eb:2b:59:ef:e8:97:ee:22:38:f5:d7:c5:48:c1:ef:5e: 1e:74:d6:18:26:94:7b:f9:8d:42:ff:2a:6f:ad:2a:38:8a:b4: ed:dd:30:64:f0:8a:9d:b3:c4:06:52:be:62:f4:87:29:a1:f0: c4:33:ce:0a:f2:53:9e:01:41:bd:eb:1d:4c:cd:02:b9:2e:a5: d0:d5:56:47:00:11:8f:be:16:79:0f:00:f4:3e:50:40:43:70: aa:cf:6f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjYwNTEzMDIyNDE1WhcNMjYwNTIwMDIyNDE1WjAYMRYwFAYD VQQDEw02YTAzZTBkMC1mZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/pQxP39RU4NoDXedNhPlceGyGvnusck/09+Lm1Ku7kQsXFcXeuJGzULBXh2 2xHKw2FZECodNgZvgjDnqB13mbmIysMHgwPYaWx/lLAqucKFUMEOxCTz6n++Jgwt UhZv44sbOCLiqyRYxrDwuTi/ev5jWoKjRQDg6z1i/nTJbYqG/ySS1VsNVYTMYx7d gAze/GRk8jI6Dcrr9ITsXNTkhkrOVDam24vQtvEWvh2Ni8XsFaYoZEGyLlaP4O4g H6ajp3I0XIA+2L1at1MablFJWrbY/Y0kn3zYhb/0JNVbGZyL5QXumJA0pbRxyftN ecmNJVry3irD6f1pWZ79d1iKmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN90MAMy 0YVaYeXiN6TSX3bdzlfUMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhiSt2eSygAi+V/zhWU/7buoGQcZ3ueMmH0zQtHZXGFZyWghjOsaq8QHZGmgw s2JFTrguulcKW6FusrFtsGb1ykxCTi5MeTgTGtpgDwQsnL+DCz5R6BQOiQo4zEmf QwRrkU2LPCeBVd36BuqAMKhIL6KxPD77DBDDbC2tHKlPzPz2YPYsDNQWqQeZxK5E uRthx+Li6ybttSVE/o3Pkl9b0iyLCMDrK1nv6JfuIjj118VIwe9eHnTWGCaUe/mN Qv8qb60qOIq07d0wZPCKnbPEBlK+YvSHKaHwxDPOCvJTngFBvesdTM0CuS6l0NVW RwARj74WeQ8A9D5QQENwqs9vew== -----END CERTIFICATE-----Generated at Wed May 13 11:44:41 2026 by rpki-client