$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: XZUXlgORVUVa6MAU2NPDV3cxSECWnU9Y4F5BSQNR7Dg= Subject key identifier: D5:67:42:12:13:50:DC:F0:2B:47:A5:2F:48:0A:83:84:9C:B1:15:E5 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 0285 Signing time: Wed 13 May 2026 01:55:20 +0000 Manifest this update: Wed 13 May 2026 01:55:19 +0000 Manifest next update: Wed 20 May 2026 01:55:19 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: Q5zDFscj2fJ1iGVPY/QkfAD5cDj3MAxCtEOl4IFXNX4=) 2: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=) 3: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: May 13 01:55:19 2026 GMT Not After : May 20 01:55:19 2026 GMT Subject: CN=6a03da08-7113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:7d:49:5b:66:ed:dd:98:91:8f:51:cc:d8: 4a:07:f8:89:4d:f0:2b:f4:6b:09:ab:ac:90:b5:11: f5:4a:29:11:41:01:9a:37:65:d1:3d:7f:74:59:ee: e7:db:a1:98:6b:b9:17:18:58:82:29:e3:7a:59:9c: 63:ff:e4:aa:13:85:fd:f2:ee:16:39:30:cd:32:9f: 36:1e:cd:7e:4f:a2:b5:66:e2:0c:9d:99:bf:09:33: 2f:77:63:c9:a0:32:0c:d5:08:65:1f:9e:aa:64:10: e4:f1:09:d6:bd:2f:21:61:4f:51:9f:10:cf:c1:44: 08:15:4d:91:06:56:23:ab:e8:90:19:6c:1e:b9:f2: 37:92:4c:f8:48:57:8a:24:03:08:e6:0e:26:d6:ae: 33:df:81:56:f2:6a:c9:cf:04:a9:18:37:4e:87:9a: 0e:51:e0:ac:9d:75:35:79:a1:f8:8a:e6:7c:de:7a: 01:72:78:75:7b:73:4f:fc:73:24:0b:53:41:54:be: 42:87:7e:3d:1b:74:95:a5:f2:03:bd:87:70:76:a5: 5c:fe:87:53:3c:d7:39:dd:f2:0b:69:10:d4:48:ca: 7c:fa:51:50:d7:09:5e:c1:69:33:e5:b8:30:99:15: 76:93:50:63:9e:bf:ca:6f:02:e6:95:30:f7:6b:ae: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:42:12:13:50:DC:F0:2B:47:A5:2F:48:0A:83:84:9C:B1:15:E5 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:99:fc:ba:03:15:5d:95:93:ec:2f:d6:35:4c:3b:02:1c: ac:c8:bd:b8:a0:fd:34:e3:a3:52:0c:e8:88:a2:66:5d:55:2e: 51:5a:ca:f3:42:8c:05:f1:ae:f3:ab:b3:4f:d5:75:a1:03:a4: 1f:6b:67:81:da:81:5b:67:d2:d2:63:0f:82:02:40:01:39:a6: f8:86:5e:a9:f0:29:8c:f2:db:2e:63:06:80:bf:53:eb:75:d7: 7d:45:bb:c9:d1:e8:b8:84:0d:11:19:4d:d7:ff:60:cf:4a:6d: 76:a6:80:ef:bf:94:db:32:b0:57:be:25:fc:8a:12:ef:6c:4f: 6e:78:db:8d:99:d7:82:9a:76:77:6e:c4:5d:b3:87:6e:19:bb: d6:2d:e6:98:f6:c6:81:eb:43:9b:12:6b:aa:7f:1e:a2:9f:ce: b9:51:49:8b:ce:eb:5d:fb:54:d5:42:f5:fe:93:81:75:8a:0a: 93:dc:b7:c3:08:5e:84:06:97:f4:0f:81:9f:9e:80:5b:3c:e5: d1:50:38:aa:7a:63:df:b5:4f:65:7d:dd:96:83:01:9b:2f:cf: b4:fd:31:1d:76:60:20:4c:93:a5:5a:4d:02:ec:70:5c:08:df: 13:b3:a6:38:5d:b7:b7:20:e5:89:5a:03:25:a0:1b:c6:36:c4: 46:70:89:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjYwNTEzMDE1NTE5WhcNMjYwNTIwMDE1NTE5WjAYMRYwFAYD VQQDEw02YTAzZGEwOC03MTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2z99SVtm7d2YkY9RzNhKB/iJTfAr9GsJq6yQtRH1SikRQQGaN2XRPX90We7n 26GYa7kXGFiCKeN6WZxj/+SqE4X98u4WOTDNMp82Hs1+T6K1ZuIMnZm/CTMvd2PJ oDIM1QhlH56qZBDk8QnWvS8hYU9RnxDPwUQIFU2RBlYjq+iQGWweufI3kkz4SFeK JAMI5g4m1q4z34FW8mrJzwSpGDdOh5oOUeCsnXU1eaH4iuZ83noBcnh1e3NP/HMk C1NBVL5Ch349G3SVpfIDvYdwdqVc/odTPNc53fILaRDUSMp8+lFQ1wlewWkz5bgw mRV2k1Bjnr/KbwLmlTD3a66gvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVnQhIT UNzwK0elL0gKg4ScsRXlMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5iZ/LoDFV2Vk+wv1jVMOwIcrMi9uKD9NOOjUgzoiKJmXVUuUVrK80KMBfGu 86uzT9V1oQOkH2tngdqBW2fS0mMPggJAATmm+IZeqfApjPLbLmMGgL9T63XXfUW7 ydHouIQNERlN1/9gz0ptdqaA77+U2zKwV74l/IoS72xPbnjbjZnXgpp2d27EXbOH bhm71i3mmPbGgetDmxJrqn8eop/OuVFJi87rXftU1UL1/pOBdYoKk9y3wwhehAaX 9A+Bn56AWzzl0VA4qnpj37VPZX3dloMBmy/PtP0xHXZgIEyTpVpNAuxwXAjfE7Om OF23tyDliVoDJaAbxjbERnCJDQ== -----END CERTIFICATE-----Generated at Wed May 13 12:56:41 2026 by rpki-client