$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: z6IjMhfJ33riOvjnxI87C0AxpItg+11loYGadEDM4RA= Subject key identifier: 3C:EF:E2:DD:D2:C1:AC:07:95:10:01:DF:C0:3B:52:0F:F1:6E:E3:00 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A3A Signing time: Tue 12 May 2026 19:50:29 +0000 Manifest this update: Tue 12 May 2026 19:50:28 +0000 Manifest next update: Tue 19 May 2026 19:50:28 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 5mDw2rIUYPwXcjzBkCvzMrhVC+KNsaVRMNishVnoMVc=) 2: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 3: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) 4: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 5: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2656 (0xa60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: May 12 19:50:28 2026 GMT Not After : May 19 19:50:28 2026 GMT Subject: CN=6a038485-9274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:38:70:b9:19:41:ca:e7:7a:ef:e2:ef:3a: 45:90:7a:a3:58:6f:49:82:c3:e3:ac:aa:5e:bc:7d: ac:07:2d:e0:13:4a:d9:00:04:49:01:50:8b:49:95: 72:94:6f:08:47:9f:ea:63:60:8c:58:c2:65:dc:5c: 0d:52:c3:f3:72:2b:54:9b:20:b0:fa:c6:0d:9f:68: 2a:d6:ec:30:74:6d:9d:3c:52:91:bd:a1:6b:ef:f3: 4e:09:8e:bd:d6:29:5d:5a:08:ed:cb:24:32:7f:45: 39:5c:6c:59:9e:3f:59:3d:b1:82:8a:31:a4:60:5e: 21:63:a3:38:2e:3b:2f:bd:f2:4b:bd:77:5c:19:0d: 33:3f:da:7b:7e:bc:39:24:8b:cc:63:c0:91:90:f6: a0:08:a8:92:24:35:00:2b:92:f9:a6:30:b0:7a:e2: b9:e0:05:24:06:d7:ff:3f:bf:2c:ba:d6:a5:c1:f9: ee:2f:26:b9:14:ed:77:50:e6:77:32:06:59:18:68: ab:49:08:24:7e:65:9d:a4:b9:75:d2:95:b6:0f:ef: 4a:0b:fe:3b:52:22:0b:da:2d:8a:fc:3f:72:eb:67: 32:0f:80:d1:85:09:ce:a7:3f:f7:e9:1a:2a:30:9e: 0b:c2:af:7d:21:a4:73:e5:64:05:49:16:9e:2a:48: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:E2:DD:D2:C1:AC:07:95:10:01:DF:C0:3B:52:0F:F1:6E:E3:00 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:90:9c:fc:27:b6:70:92:8e:d5:93:4e:5e:a3:6f:58:e1:bc: 50:05:a3:84:55:f6:7e:4f:ed:53:d4:cc:9e:d5:87:4f:2b:55: 42:a1:6d:61:eb:e6:60:2a:d6:58:5b:e8:bb:5e:4c:b8:9d:ff: 77:c3:87:60:47:f4:1a:2c:64:3f:47:70:9a:b6:a8:80:fc:ad: 25:90:eb:fd:52:c6:9c:56:88:b5:e9:f0:93:06:cd:2c:a8:bd: aa:50:19:2e:0c:b8:ec:e7:a1:59:ac:ef:1c:69:43:b9:5f:8f: 21:0c:39:65:48:9a:e9:db:05:b0:fa:e2:59:c0:11:04:85:f2: 76:53:7e:92:41:fa:e0:5a:58:d6:bc:be:7b:af:d8:14:ce:e1: 6d:18:bc:65:89:82:da:1d:9d:fc:ea:98:72:05:34:b7:53:ac: 18:4c:ee:27:c2:74:f8:08:aa:c9:3b:0e:f3:63:6b:aa:3d:74: dc:f2:d0:97:60:1b:b7:ff:b5:db:ac:ef:7d:59:0a:0e:c1:b0: df:05:6d:97:c1:a9:d7:ff:70:2e:47:56:ba:73:61:5c:2c:f3: 6a:96:a6:b9:0b:d6:35:10:08:7d:45:a7:7b:29:2e:91:ab:da: 10:d1:31:91:1a:a0:00:9e:f6:8c:35:8f:1a:cd:de:1c:4c:f3: 0f:78:87:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwNTEyMTk1MDI4WhcNMjYwNTE5MTk1MDI4WjAYMRYwFAYD VQQDEw02YTAzODQ4NS05Mjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDg4cLkZQcrneu/i7zpFkHqjWG9JgsPjrKpevH2sBy3gE0rZAARJAVCLSZVy lG8IR5/qY2CMWMJl3FwNUsPzcitUmyCw+sYNn2gq1uwwdG2dPFKRvaFr7/NOCY69 1ildWgjtyyQyf0U5XGxZnj9ZPbGCijGkYF4hY6M4LjsvvfJLvXdcGQ0zP9p7frw5 JIvMY8CRkPagCKiSJDUAK5L5pjCweuK54AUkBtf/P78sutalwfnuLya5FO13UOZ3 MgZZGGirSQgkfmWdpLl10pW2D+9KC/47UiIL2i2K/D9y62cyD4DRhQnOpz/36Roq MJ4Lwq99IaRz5WQFSRaeKkhU2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzv4t3S wawHlRAB38A7Ug/xbuMAMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL5Cc/Ce2cJKO1ZNOXqNvWOG8UAWjhFX2fk/tU9TMntWHTytVQqFtYevmYCrW WFvou15MuJ3/d8OHYEf0GixkP0dwmraogPytJZDr/VLGnFaItenwkwbNLKi9qlAZ Lgy47OehWazvHGlDuV+PIQw5ZUia6dsFsPriWcARBIXydlN+kkH64FpY1ry+e6/Y FM7hbRi8ZYmC2h2d/OqYcgU0t1OsGEzuJ8J0+AiqyTsO82Nrqj103PLQl2Abt/+1 26zvfVkKDsGw3wVtl8Gp1/9wLkdWunNhXCzzapamuQvWNRAIfUWneykukavaENEx kRqgAJ72jDWPGs3eHEzzD3iHJw== -----END CERTIFICATE-----Generated at Wed May 13 05:41:20 2026 by rpki-client