$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: oIZXeLwBuuFM0MvfvSK6nSbz1IXrwAZllp3Tm3zcS00= Subject key identifier: 9E:7E:D8:01:49:5C:7D:2A:A9:08:3C:E8:0A:12:C7:80:31:62:C5:B3 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 01F5 Signing time: Wed 13 May 2026 03:16:53 +0000 Manifest this update: Wed 13 May 2026 03:16:52 +0000 Manifest next update: Wed 20 May 2026 03:16:52 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: zNTH47eFISrO1jptUMRvIo+2tzCk+mGdaGBoYSAYIvQ=) 2: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=) 3: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=) 4: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: May 13 03:16:52 2026 GMT Not After : May 20 03:16:52 2026 GMT Subject: CN=6a03ed25-aef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:d2:de:ce:80:30:76:9a:24:71:29:2e:20: 1e:31:eb:43:57:f5:fc:a2:b2:58:e4:29:4b:f0:fd: 43:7b:6b:4d:cc:3e:7b:f8:d8:ed:81:6b:ea:11:b3: 4f:b3:3b:17:74:17:84:c2:14:94:df:1a:82:af:5c: 8b:44:4d:77:cc:30:8b:cb:4a:74:ed:73:3b:ce:95: 08:81:22:5c:16:2c:c2:35:4a:9f:94:9e:c3:18:ad: a5:85:ae:03:70:27:8b:3f:f3:a2:ed:73:ed:68:98: 7c:a9:28:49:42:9f:23:94:1e:7d:2a:50:d8:5e:ca: 10:ae:5e:7c:8c:c1:a8:0c:d2:95:c6:11:ef:6c:a4: 2c:f2:1b:5a:68:c3:b2:67:dd:5b:5e:ab:f6:96:87: ee:7b:09:72:67:a7:92:f2:a7:ce:05:c4:aa:0e:bc: 18:03:f1:52:1e:a8:c4:c9:b0:a8:6e:36:6d:0e:6a: ce:50:cc:45:b5:91:99:26:29:c4:02:ab:76:11:c8: 54:b1:3f:dd:1b:14:c4:ac:3d:70:83:56:64:da:79: bb:f3:2b:63:eb:26:b9:48:df:67:4f:90:df:c4:e8: 2f:b9:66:0d:bd:be:ab:e3:27:e4:4f:87:3f:6c:81: 53:d5:c1:3a:bc:d2:2a:97:94:1e:06:8d:42:1a:b9: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:D8:01:49:5C:7D:2A:A9:08:3C:E8:0A:12:C7:80:31:62:C5:B3 X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9a:a2:f3:42:86:05:f1:b9:95:21:1b:31:93:40:28:1e:85: ac:98:01:93:7b:a0:1b:19:d4:73:bf:a5:e7:a0:59:ca:5f:61: 5f:d1:bc:0a:1f:11:cb:38:a1:df:7b:e2:2b:68:be:2e:6c:f8: 32:f4:70:9d:0e:12:26:8f:c0:5a:4b:b8:0e:fd:62:a6:66:f5: ed:1b:9e:27:be:b2:e4:0a:76:7c:6a:57:f2:42:a4:07:db:01: d0:95:76:d7:9c:e1:c4:b5:83:f1:fa:b5:97:c9:46:05:2a:a2: 07:4d:be:3a:ae:3a:aa:0f:35:21:09:b6:87:84:3b:f3:87:d3: 71:74:ee:df:84:f0:47:72:14:d5:55:a5:f1:0e:de:fc:35:de: 3a:ba:d8:cf:c6:c1:fc:53:71:c8:c3:46:23:7c:4c:8f:15:12: 5f:48:41:18:61:5b:60:82:8e:c0:d8:46:e3:6b:c1:c5:f8:77: 1d:94:76:4f:e4:26:55:94:c0:7b:64:05:f9:81:84:e9:21:32: f2:c7:c1:62:16:eb:b6:6c:33:8d:e3:11:56:67:da:24:95:36: 75:b9:87:16:57:9a:36:a1:f5:1b:d5:0a:07:3c:b6:75:9c:b4: 00:24:2b:d7:33:33:c0:d6:ff:9e:31:4f:3a:12:0e:a1:64:6d: ac:c6:fd:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjYwNTEzMDMxNjUyWhcNMjYwNTIwMDMxNjUyWjAYMRYwFAYD VQQDEw02YTAzZWQyNS1hZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYDS3s6AMHaaJHEpLiAeMetDV/X8orJY5ClL8P1De2tNzD57+NjtgWvqEbNP szsXdBeEwhSU3xqCr1yLRE13zDCLy0p07XM7zpUIgSJcFizCNUqflJ7DGK2lha4D cCeLP/Oi7XPtaJh8qShJQp8jlB59KlDYXsoQrl58jMGoDNKVxhHvbKQs8htaaMOy Z91bXqv2lofuewlyZ6eS8qfOBcSqDrwYA/FSHqjEybCobjZtDmrOUMxFtZGZJinE Aqt2EchUsT/dGxTErD1wg1Zk2nm78ytj6ya5SN9nT5DfxOgvuWYNvb6r4yfkT4c/ bIFT1cE6vNIql5QeBo1CGrk7OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5+2AFJ XH0qqQg86AoSx4AxYsWzMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsJqi80KGBfG5lSEbMZNAKB6FrJgBk3ugGxnUc7+l56BZyl9hX9G8Ch8Ryzih 33viK2i+Lmz4MvRwnQ4SJo/AWku4Dv1ipmb17RueJ76y5Ap2fGpX8kKkB9sB0JV2 15zhxLWD8fq1l8lGBSqiB02+Oq46qg81IQm2h4Q784fTcXTu34TwR3IU1VWl8Q7e /DXeOrrYz8bB/FNxyMNGI3xMjxUSX0hBGGFbYIKOwNhG42vBxfh3HZR2T+QmVZTA e2QF+YGE6SEy8sfBYhbrtmwzjeMRVmfaJJU2dbmHFleaNqH1G9UKBzy2dZy0ACQr 1zMzwNb/njFPOhIOoWRtrMb98Q== -----END CERTIFICATE-----Generated at Wed May 13 06:41:59 2026 by rpki-client