$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json) Hash identifier: /7kZtiyDtJROVdw/ij0iuaR6hO++1VbJIwhj0FrWVFE= Subject key identifier: A3:45:20:74:32:69:36:60:F4:85:47:E3:46:1A:92:BA:22:76:65:D9 Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft Manifest number: 02BA Signing time: Wed 13 May 2026 01:38:03 +0000 Manifest this update: Wed 13 May 2026 01:38:02 +0000 Manifest next update: Wed 20 May 2026 01:38:02 +0000 Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: CENttwDpJOhok1YpHbDdQ54uH7Dv27QsAdzru9jA5So=) 2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Validity Not Before: May 13 01:38:02 2026 GMT Not After : May 20 01:38:02 2026 GMT Subject: CN=6a03d5fb-ffc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:18:f4:b4:d4:92:8a:ff:98:21:29:8a:6e: 95:fa:3a:99:09:03:4a:ee:af:67:84:bd:d8:31:f2: 27:29:76:fd:38:3f:a0:88:1f:f7:77:0c:d0:71:ae: f7:ab:77:38:38:26:b1:b4:37:c1:84:75:75:10:79: 3e:3d:55:44:18:32:e5:00:04:4e:42:8b:87:53:17: ad:24:56:29:06:14:2f:20:7c:db:6a:65:e8:ab:50: da:1a:a2:48:88:a3:79:a5:cc:db:d3:04:a1:fe:ae: 8a:4d:4a:61:4e:d5:87:18:f6:bd:12:12:f0:47:74: db:74:68:84:bc:29:d1:e0:e9:15:24:bb:d2:18:a9: bd:74:50:be:47:1d:be:82:a6:8a:64:64:52:32:18: c2:22:e6:c0:b6:65:b9:d4:13:8c:a9:cc:6a:03:23: e5:73:0a:ba:80:2a:84:f8:c7:c4:83:00:78:a3:b5: 93:f9:3e:eb:e3:c1:72:6e:68:78:23:37:b1:61:c1: 3d:b3:4f:c5:ba:d9:db:71:c5:47:fa:db:66:7f:74: 72:f2:ff:f8:19:c7:c4:30:cb:73:9b:65:84:a7:6f: 11:be:e0:13:3e:6f:ac:e9:bd:f2:78:30:79:10:ea: 26:a2:d7:46:61:18:08:04:90:03:0b:96:c7:d7:a5: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:45:20:74:32:69:36:60:F4:85:47:E3:46:1A:92:BA:22:76:65:D9 X509v3 Authority Key Identifier: keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:63:10:4b:10:a0:fe:c6:92:be:49:f6:7e:f9:c0:77:ad:5e: 5a:b7:af:cc:dc:99:43:1a:8d:93:40:d3:5f:09:c1:3b:52:80: 7c:8e:cc:33:1f:10:13:f3:86:42:74:c4:27:46:cc:a3:72:b1: 65:bf:2e:7e:17:cf:12:69:fc:89:0d:23:86:30:b6:04:5d:f6: 08:22:06:df:8c:98:76:58:0f:64:ba:7d:5d:b2:00:9f:48:20: ee:a5:be:fa:4b:9d:e4:dd:8d:4f:48:78:cb:46:28:5c:a8:e5: c4:c9:75:97:d9:bb:5c:7e:1c:f4:43:02:9e:24:97:cc:0a:fe: de:c9:44:0b:6b:78:1f:17:29:07:35:1f:dd:57:d4:de:e6:04: 49:ee:06:a2:71:92:c6:15:28:e2:17:8a:aa:a6:6b:e8:9b:90: 32:77:9a:9d:2f:cf:12:17:30:bd:b6:15:4d:65:85:fc:5b:81: df:be:69:c6:c0:14:d6:e6:32:cb:a0:18:98:c4:59:f5:a6:71: 80:0c:be:f3:fb:18:1a:8a:1a:52:08:d7:09:07:a9:71:62:71: d1:5a:f0:ee:f3:72:04:c1:2e:4d:eb:a4:90:8b:bd:22:79:e9: 32:49:4f:c2:20:ec:24:90:0c:b3:6b:b6:2f:1d:33:ac:d2:82: 89:22:b6:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNjcxMTAvBgNVBAUTKEY4RDY5M0EyNjk2NENEM0M1QTE5OUQyQzI2RUQyMjY0 N0EyMEU3N0UwHhcNMjYwNTEzMDEzODAyWhcNMjYwNTIwMDEzODAyWjAYMRYwFAYD VQQDEw02YTAzZDVmYi1mZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZwY9LTUkor/mCEpim6V+jqZCQNK7q9nhL3YMfInKXb9OD+giB/3dwzQca73 q3c4OCaxtDfBhHV1EHk+PVVEGDLlAAROQouHUxetJFYpBhQvIHzbamXoq1DaGqJI iKN5pczb0wSh/q6KTUphTtWHGPa9EhLwR3TbdGiEvCnR4OkVJLvSGKm9dFC+Rx2+ gqaKZGRSMhjCIubAtmW51BOMqcxqAyPlcwq6gCqE+MfEgwB4o7WT+T7r48Fybmh4 IzexYcE9s0/FutnbccVH+ttmf3Ry8v/4GcfEMMtzm2WEp28RvuATPm+s6b3yeDB5 EOomotdGYRgIBJADC5bH16UwWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNFIHQy aTZg9IVH40YakroidmXZMB8GA1UdIwQYMBaAFPjWk6JpZM08WhmdLCbtImR6IOd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2Ny8xMkNFNThDMDRC Q0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pUeGFHWjBzSnUwaVpIb2c1 MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OYVRvbWxrelR4YUdaMHNKdTBpWkhvZzUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2Ny8xMkNFNThDMDRCQ0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pU eGFHWjBzSnUwaVpIb2c1MzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADmMQSxCg/saSvkn2fvnAd61eWrevzNyZQxqNk0DTXwnBO1KAfI7MMx8QE/OG QnTEJ0bMo3KxZb8ufhfPEmn8iQ0jhjC2BF32CCIG34yYdlgPZLp9XbIAn0gg7qW+ +kud5N2NT0h4y0YoXKjlxMl1l9m7XH4c9EMCniSXzAr+3slEC2t4HxcpBzUf3VfU 3uYESe4GonGSxhUo4heKqqZr6JuQMneanS/PEhcwvbYVTWWF/FuB375pxsAU1uYy y6AYmMRZ9aZxgAy+8/sYGooaUgjXCQepcWJx0Vrw7vNyBMEuTeukkIu9InnpMklP wiDsJJAMs2u2Lx0zrNKCiSK2jA== -----END CERTIFICATE-----Generated at Wed May 13 12:35:00 2026 by rpki-client