$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: 0Cbw4cNDWGVOYjuGikgAhRpMOvu8sLdp8M+Km41YxTU= Subject key identifier: A2:EC:86:2E:24:B5:93:EC:FA:21:32:6B:0B:67:CC:B6:93:58:B8:C1 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 0510 Signing time: Tue 12 May 2026 23:48:59 +0000 Manifest this update: Tue 12 May 2026 23:48:59 +0000 Manifest next update: Tue 19 May 2026 23:48:59 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: k4g/Fgn6EfBScOEfisr4rPm+fJYA+2al/YMzgp5XQgc=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: THixLa/45ZK/Pkv9/quk4OO+SRxBsBhh9iA6Q9k83cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: May 12 23:48:59 2026 GMT Not After : May 19 23:48:59 2026 GMT Subject: CN=6a03bc6b-8ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:f3:6c:95:67:2a:b0:f8:32:60:b1:9e:f8: 84:8a:9d:f1:84:1d:a0:77:0d:1d:3d:d2:2d:c8:af: 6c:7e:66:1e:0d:e3:1a:57:8d:f5:89:a1:0d:66:ff: 76:1b:67:e6:be:9b:c1:51:46:50:3d:89:83:64:b7: 05:7d:61:07:b3:29:3c:45:7a:f3:d3:95:47:80:da: 55:d4:89:52:04:4e:0f:89:89:55:bb:30:b5:2e:95: 1d:6b:69:d8:14:17:a9:e5:8d:ef:d4:0b:78:24:53: 13:83:08:50:45:96:9e:7b:e6:76:80:5b:c9:00:3c: 88:2c:6a:27:e6:77:46:20:a4:84:7b:94:a3:d7:f1: a8:f1:06:c0:c1:c1:b5:d9:96:e2:7b:27:4f:74:7c: c0:f5:9e:7b:6b:1c:41:7a:3a:29:37:ba:11:21:18: 02:d1:b5:c0:05:c1:16:d5:4e:92:d6:73:38:39:a6: 1f:45:56:f3:57:3c:2e:63:8b:49:4e:50:82:4f:6b: a6:43:df:d6:48:52:2b:84:be:37:cb:f0:9e:ac:90: 0b:30:85:37:79:d7:b3:28:1f:49:4d:89:a5:05:30: 85:fb:22:39:c1:bb:9f:73:25:38:38:cf:c9:d9:57: 76:a2:de:df:cb:aa:45:c9:6c:c1:5d:01:cf:7d:7a: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EC:86:2E:24:B5:93:EC:FA:21:32:6B:0B:67:CC:B6:93:58:B8:C1 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1a:40:72:78:da:7d:99:4d:89:46:d9:3e:df:09:73:8c:9c: 88:23:84:6a:08:07:9f:ed:22:34:50:c0:e6:b8:be:13:82:ee: da:10:6c:9b:26:3e:8e:5d:e9:58:30:db:37:cf:6c:41:90:7a: 50:d7:83:f0:6a:d8:97:f4:20:14:e3:b2:9e:98:93:34:0b:5a: dd:69:da:1d:7e:01:a6:45:9c:be:9c:bd:60:a7:4d:fd:8b:59: 69:0f:43:f6:62:0b:74:c7:e2:f2:4e:e1:6b:0a:10:dc:1b:c1: 85:2e:30:7e:87:6b:b1:e1:81:da:e7:d3:63:9a:98:fe:85:a5: ed:1f:71:48:69:a9:54:f8:e7:dc:f3:ab:e1:a3:f7:83:c3:66: 3f:df:48:94:b6:66:cf:11:d6:9b:58:ac:6a:61:7e:84:77:41: 98:cd:e9:36:4f:a7:9c:7f:13:33:f0:71:34:5a:c1:e3:ad:43: f1:46:9b:bc:42:04:dd:74:bd:2d:1c:08:42:93:ad:7d:2e:10: b9:f5:f9:84:8b:66:9b:2d:be:31:d1:1f:95:10:f7:1d:73:8d: 9d:ef:ad:d2:60:36:e6:d7:fc:ea:21:3a:be:f5:19:a2:84:af: d2:aa:b2:17:bc:7a:34:95:ef:81:4a:eb:a4:16:26:f4:3a:3a: a0:56:26:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjYwNTEyMjM0ODU5WhcNMjYwNTE5MjM0ODU5WjAYMRYwFAYD VQQDEw02YTAzYmM2Yi04ZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjTzbJVnKrD4MmCxnviEip3xhB2gdw0dPdItyK9sfmYeDeMaV431iaENZv92 G2fmvpvBUUZQPYmDZLcFfWEHsyk8RXrz05VHgNpV1IlSBE4PiYlVuzC1LpUda2nY FBep5Y3v1At4JFMTgwhQRZaee+Z2gFvJADyILGon5ndGIKSEe5Sj1/Go8QbAwcG1 2ZbieydPdHzA9Z57axxBejopN7oRIRgC0bXABcEW1U6S1nM4OaYfRVbzVzwuY4tJ TlCCT2umQ9/WSFIrhL43y/CerJALMIU3edezKB9JTYmlBTCF+yI5wbufcyU4OM/J 2Vd2ot7fy6pFyWzBXQHPfXogtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLshi4k tZPs+iEyawtnzLaTWLjBMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfRpAcnjafZlNiUbZPt8Jc4yciCOEaggHn+0iNFDA5ri+E4Lu2hBsmyY+jl3p WDDbN89sQZB6UNeD8GrYl/QgFOOynpiTNAta3WnaHX4BpkWcvpy9YKdN/YtZaQ9D 9mILdMfi8k7hawoQ3BvBhS4wfodrseGB2ufTY5qY/oWl7R9xSGmpVPjn3POr4aP3 g8NmP99IlLZmzxHWm1isamF+hHdBmM3pNk+nnH8TM/BxNFrB461D8UabvEIE3XS9 LRwIQpOtfS4QufX5hItmmy2+MdEflRD3HXONne+t0mA25tf86iE6vvUZooSv0qqy F7x6NJXvgUrrpBYm9Do6oFYmLg== -----END CERTIFICATE-----Generated at Wed May 13 04:49:56 2026 by rpki-client