$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json) Hash identifier: fusNM7C2TEFhsW+eM2/ez/aZ2E8+dIaL/8zQL1206Sg= Subject key identifier: D3:5E:09:B0:98:57:1E:8D:CA:37:58:92:58:8B:48:83:EA:87:7F:96 Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 1497 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft Manifest number: 1471 Signing time: Tue 12 May 2026 15:26:26 +0000 Manifest this update: Tue 12 May 2026 15:26:26 +0000 Manifest next update: Tue 19 May 2026 15:26:26 +0000 Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: +WM7iziMoq3ZoyqgqREg60HmsnYLLZTzi3S+tw0qHUg=) 2: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: w2NWjfabvdQFP3C4IwPEM+fGnRuZMPns4zEDrwbMyxc=) 3: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: yi1Y4ZAzUNkEpGZbqmVVGbSuzm1HULg6+CfEtcyOZy0=) 4: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: Ahq8pAmeUbi/UnTEDIDcD1i65MG+Vf7huahab+3HR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5271 (0x1497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: May 12 15:26:26 2026 GMT Not After : May 19 15:26:26 2026 GMT Subject: CN=6a0346a2-680c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:39:ab:d6:08:76:ba:3b:bf:8a:fb:6d:ce: 2a:50:fd:ad:36:eb:ff:d0:5a:f6:4d:c1:d9:82:bb: 2d:6e:8b:aa:8e:e4:59:c5:7a:c7:d8:c2:d3:ce:66: 7a:b2:3a:8d:2b:b5:6b:11:da:3d:ae:74:3a:de:ed: 38:ad:2f:b1:df:55:80:23:f4:d3:39:87:af:18:15: cc:e6:29:36:5d:df:f7:7e:d1:b7:ef:fc:18:70:3d: 31:67:43:a4:2f:c8:a1:6f:09:e2:11:0a:b7:de:e2: d5:c6:1b:6a:f3:1a:2e:b9:9d:ca:93:b7:64:f1:c3: d4:27:f7:91:de:75:27:36:0b:c4:a0:ac:9e:98:e5: d1:5d:ed:6c:be:30:f5:01:66:8d:d5:44:99:29:0d: 8d:d7:0d:01:c5:d0:40:52:7e:45:1e:7d:4e:dc:e7: 8c:bb:69:4c:77:fc:c1:8b:ed:d7:20:fe:d5:6b:67: d8:61:ff:1b:45:33:b1:52:5c:ec:3f:eb:1b:b4:28: 55:39:10:c3:b9:9b:99:44:c7:db:5b:c0:84:f0:01: f1:b3:f5:bb:68:55:93:36:c3:95:96:cf:c4:12:74: cf:97:51:20:e9:6a:8d:d0:11:f2:42:ce:fc:4b:37: 42:c8:41:03:98:dd:15:49:b6:56:a0:d8:f1:6f:82: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:09:B0:98:57:1E:8D:CA:37:58:92:58:8B:48:83:EA:87:7F:96 X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:e1:50:f9:45:91:5a:29:c5:a3:92:fb:82:00:99:74:ef: a4:60:94:21:2a:58:eb:5d:33:e2:05:12:80:f5:e2:8a:0e:cd: 88:e1:92:96:4f:c8:fd:1b:33:b6:39:2e:e0:6d:c3:da:13:8d: 37:32:db:f4:9a:bd:09:34:f4:16:12:e3:31:53:3c:68:fd:17: fa:85:90:5d:67:18:c2:80:89:43:f6:11:6c:68:81:cf:17:cc: 4a:3e:f9:32:bd:fa:0c:ce:78:50:c2:a0:b4:21:37:35:0a:c9: 0b:ea:69:36:2a:36:29:c4:e0:40:0a:f7:c5:a1:0f:52:2a:3f: be:85:a2:d1:16:4b:6f:89:4c:08:f9:55:3f:cf:2b:7e:a4:b2: 05:98:c9:79:74:b2:46:eb:3b:5c:27:de:f9:80:7d:97:ad:e5: 58:e3:b4:9a:e4:ba:d2:4d:f9:5b:82:51:61:5a:e0:af:0a:b6: fb:3a:75:01:29:b8:5a:d2:fc:9a:48:e8:8d:01:61:3e:cb:79: d4:13:a4:f6:55:a2:11:9e:5e:8c:6e:8c:ad:75:c4:cb:0e:fc: a7:36:83:9b:7b:8f:e3:85:23:6f:13:ce:2f:05:81:2b:f4:f9: 06:78:f1:2e:cd:8a:03:bd:b7:0f:cb:8a:55:4d:8f:1c:9a:51: 92:0d:3a:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYwNTEyMTUyNjI2WhcNMjYwNTE5MTUyNjI2WjAYMRYwFAYD VQQDEw02YTAzNDZhMi02ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHI5q9YIdro7v4r7bc4qUP2tNuv/0Fr2TcHZgrstbouqjuRZxXrH2MLTzmZ6 sjqNK7VrEdo9rnQ63u04rS+x31WAI/TTOYevGBXM5ik2Xd/3ftG37/wYcD0xZ0Ok L8ihbwniEQq33uLVxhtq8xouuZ3Kk7dk8cPUJ/eR3nUnNgvEoKyemOXRXe1svjD1 AWaN1USZKQ2N1w0BxdBAUn5FHn1O3OeMu2lMd/zBi+3XIP7Va2fYYf8bRTOxUlzs P+sbtChVORDDuZuZRMfbW8CE8AHxs/W7aFWTNsOVls/EEnTPl1Eg6WqN0BHyQs78 SzdCyEEDmN0VSbZWoNjxb4L9twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNeCbCY Vx6NyjdYkliLSIPqh3+WMB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wNzQ5NTg5MDkxODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5R LUFJM2phM2RTQUcxWndvLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHPhUPlFkVopxaOS+4IAmXTvpGCUISpY610z4gUSgPXiig7NiOGSlk/I/Rsz tjku4G3D2hONNzLb9Jq9CTT0FhLjMVM8aP0X+oWQXWcYwoCJQ/YRbGiBzxfMSj75 Mr36DM54UMKgtCE3NQrJC+ppNio2KcTgQAr3xaEPUio/voWi0RZLb4lMCPlVP88r fqSyBZjJeXSyRus7XCfe+YB9l63lWOO0muS60k35W4JRYVrgrwq2+zp1ASm4WtL8 mkjojQFhPst51BOk9lWiEZ5ejG6MrXXEyw78pzaDm3uP44UjbxPOLwWBK/T5Bnjx Ls2KA723D8uKVU2PHJpRkg06ew== -----END CERTIFICATE-----Generated at Wed May 13 06:36:20 2026 by rpki-client