$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: kjQ3MNN9hVrvYAClDoXCvXPZFzTiEnFQCOyOiIS4u/o= Subject key identifier: 67:A9:C1:66:D4:6C:E8:A7:3B:A7:62:E7:C4:85:65:99:3A:61:57:C1 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 1602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 15F4 Signing time: Tue 12 May 2026 16:44:16 +0000 Manifest this update: Tue 12 May 2026 16:44:16 +0000 Manifest next update: Tue 19 May 2026 16:44:16 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: ncCw6NRZCRGgeShP3+dtfUM54C+NmkO6XJexv0+RVEc=) 2: 85CB3A8A4A9D11F1A2093B779BEE528E.roa (hash: BY+6H26Cj8DhX22dIV97gKFv22bXOYbyBpYT+3ZQkX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5634 (0x1602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: May 12 16:44:16 2026 GMT Not After : May 19 16:44:16 2026 GMT Subject: CN=6a0358e0-75ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:d6:00:9d:7d:b8:dd:76:77:6c:36:b9:ff: aa:f3:e3:a2:aa:24:fb:91:91:bc:a6:76:32:92:b1: 0a:4a:22:15:2a:74:5d:b1:91:5d:65:29:12:6c:7d: f2:cc:3f:14:e7:58:09:e8:85:4a:2e:62:ba:1f:3f: 4c:99:55:dc:f1:45:01:7a:1c:bf:9e:ae:39:20:1e: fe:d8:04:64:33:33:c8:01:f2:5f:42:ec:ab:5b:c7: b4:13:3f:13:b8:af:36:81:48:ca:24:44:5a:87:a2: db:6c:0b:b8:4d:29:45:56:2c:52:d4:05:c4:25:2c: 29:73:70:b6:fd:29:b0:cb:47:13:90:55:43:e3:a2: eb:be:28:6f:b7:26:98:64:cb:e8:1a:9b:6c:e9:33: 17:dd:44:63:1e:92:f2:5e:e1:80:f5:c0:83:3c:eb: 43:a7:38:38:4a:80:8b:56:4f:97:74:0d:79:2f:f0: 7b:45:31:e2:e8:b0:10:21:88:2a:c4:a0:3e:4b:61: f0:83:83:06:7f:fa:62:f3:4f:97:95:a7:43:6a:41: 85:9a:2d:51:6e:db:cd:85:d6:9e:92:28:e1:94:6a: 95:27:18:79:a1:67:92:c1:88:50:cb:69:f5:e3:72: ff:e4:03:45:5f:ed:ea:3a:ec:bd:d0:8d:28:4d:96: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A9:C1:66:D4:6C:E8:A7:3B:A7:62:E7:C4:85:65:99:3A:61:57:C1 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:09:40:80:06:cc:d5:1d:bf:81:04:39:35:5e:83:e1:ce:76: 40:6d:7d:07:9a:43:5d:ae:a0:82:4a:fb:16:f9:98:00:27:3f: a2:6e:d9:53:27:93:c5:1f:d7:44:86:00:c3:56:8a:a2:fb:77: ae:e6:ce:da:0a:fb:b5:3d:c4:87:ef:d8:f4:e5:5d:07:dd:89: 53:59:99:58:f0:1b:d1:5b:07:d1:f8:08:12:9e:48:e1:6d:2a: 24:d7:18:c9:1c:91:5e:1c:48:c5:0f:3e:97:11:45:5f:8b:09: 98:90:16:73:7b:3f:bc:d5:f4:ed:2d:57:5b:9c:e4:92:01:c9: 9a:2e:86:ed:e6:3e:9b:2b:4b:1b:f1:6d:e7:5b:7c:fe:aa:89: 0b:86:6c:9f:2b:43:91:2b:02:d6:d8:44:4b:c6:1a:af:bd:78: 9f:de:6c:c7:89:88:d2:62:57:42:c8:46:d1:8f:a0:9d:de:1f: bd:82:8f:e0:68:98:6a:a2:0e:7e:2c:77:c0:80:99:aa:c9:97: 81:ef:25:3f:64:32:f7:55:6c:0b:e4:2e:63:12:40:3c:5b:c5: 6d:d6:41:b7:6b:27:c8:ad:33:e9:6c:47:20:51:95:f9:20:e8: a9:88:f2:a7:6d:b7:dd:b5:f0:0d:f3:e3:3a:b6:fe:0f:78:17: ab:91:27:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjYwNTEyMTY0NDE2WhcNMjYwNTE5MTY0NDE2WjAYMRYwFAYD VQQDEw02YTAzNThlMC03NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuvWAJ19uN12d2w2uf+q8+OiqiT7kZG8pnYykrEKSiIVKnRdsZFdZSkSbH3y zD8U51gJ6IVKLmK6Hz9MmVXc8UUBehy/nq45IB7+2ARkMzPIAfJfQuyrW8e0Ez8T uK82gUjKJERah6LbbAu4TSlFVixS1AXEJSwpc3C2/Smwy0cTkFVD46LrvihvtyaY ZMvoGpts6TMX3URjHpLyXuGA9cCDPOtDpzg4SoCLVk+XdA15L/B7RTHi6LAQIYgq xKA+S2Hwg4MGf/pi80+XladDakGFmi1RbtvNhdaekijhlGqVJxh5oWeSwYhQy2n1 43L/5ANFX+3qOuy90I0oTZb7iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGepwWbU bOinO6di58SFZZk6YVfBMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQlAgAbM1R2/gQQ5NV6D4c52QG19B5pDXa6ggkr7FvmYACc/om7ZUyeTxR/X RIYAw1aKovt3rubO2gr7tT3Eh+/Y9OVdB92JU1mZWPAb0VsH0fgIEp5I4W0qJNcY yRyRXhxIxQ8+lxFFX4sJmJAWc3s/vNX07S1XW5zkkgHJmi6G7eY+mytLG/Ft51t8 /qqJC4ZsnytDkSsC1thES8Yar714n95sx4mI0mJXQshG0Y+gnd4fvYKP4GiYaqIO fix3wICZqsmXge8lP2Qy91VsC+QuYxJAPFvFbdZBt2snyK0z6WxHIFGV+SDoqYjy p2233bXwDfPjOrb+D3gXq5EnDA== -----END CERTIFICATE-----Generated at Wed May 13 00:01:49 2026 by rpki-client