$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: 6TM+65dk/JkTwiQ/erzcQICwZ7uESeM6agQKKFqYcD8= Subject key identifier: 03:36:83:C6:EE:66:01:14:16:BD:1D:D4:47:FA:C5:2C:04:25:05:BE Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F9F Signing time: Wed 20 May 2026 15:59:35 +0000 Manifest this update: Wed 20 May 2026 15:59:34 +0000 Manifest next update: Wed 27 May 2026 15:59:34 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: uWmkasH0+GaAXGkx3Joz8hlxqjIl2TxwKFVDz2YjjZ8=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: 7bZVWDDzeJy/J7H2CBXO1GlKPPanYSksg2kAm3KALD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8111 (0x1faf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: May 20 15:59:34 2026 GMT Not After : May 27 15:59:34 2026 GMT Subject: CN=6a0dda67-61e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:77:02:f3:29:16:35:cc:ce:4b:5a:97:14: 6e:9d:71:40:47:b3:8a:14:9d:7b:8a:c8:45:e1:57: 9f:2b:15:9f:ef:6d:64:6d:5a:e6:bc:84:9c:bb:da: 7f:0b:60:f8:fd:cf:33:95:80:ea:a0:a5:7a:f6:cd: 94:05:0b:c8:5c:bf:3f:30:44:ea:84:32:82:a7:ed: 16:43:7d:68:3c:a4:3c:7f:54:29:e7:d7:79:9d:72: 47:0e:e9:14:12:24:ce:17:db:71:2a:21:c3:2b:bb: e0:82:52:5f:f2:2d:e7:69:d3:8e:39:ac:dd:1d:de: fc:1e:9e:a5:e4:fc:8b:09:ec:c7:a0:d9:88:a2:5e: dc:5d:72:fc:84:3f:7f:75:77:35:dc:21:15:01:3e: ea:b0:2b:6a:b3:a9:a5:d7:0c:69:61:d3:ce:96:b6: a6:d6:ff:9f:23:70:7c:21:d4:dc:f1:f1:5f:44:c3: ea:fb:fb:36:5c:86:ac:be:af:f8:8b:e0:95:70:93: f5:6f:4d:62:0c:a4:53:e6:80:0a:92:94:65:cd:50: ad:72:d6:c1:79:43:6c:4e:32:c8:67:f0:52:2f:5b: de:20:37:fb:7e:15:71:90:a1:10:47:f0:6b:15:39: 42:5c:1a:a7:e5:dc:4f:1d:81:c7:22:eb:51:1b:88: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:83:C6:EE:66:01:14:16:BD:1D:D4:47:FA:C5:2C:04:25:05:BE X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:5c:40:7a:02:5c:07:69:ba:d8:b4:e7:67:4a:60:3b:66:bb: bc:e3:8f:04:86:71:5e:03:ba:52:33:c6:6a:35:ee:c9:6d:21: 09:fb:a2:c4:71:4e:df:8c:24:2c:f9:1d:fc:b9:46:7b:0f:e4: 5b:ba:27:bf:c8:05:f6:43:93:3c:9f:87:99:3f:b1:d8:e3:67: 22:a6:e7:40:d1:fd:2f:4b:4a:f5:63:90:6e:c3:30:d2:80:f6: 98:99:d9:aa:39:09:10:17:08:ce:f2:bf:8a:38:d3:79:3a:88: ee:7e:f0:9d:d5:e6:84:db:3e:ee:1a:27:ab:65:fb:47:6c:fe: 07:b6:ec:db:65:47:8d:68:73:30:60:97:28:43:ab:dc:1c:e0: bf:8a:97:70:84:91:5c:4e:6a:c5:37:d3:33:62:27:13:f6:f6: 37:32:5f:1e:77:35:24:d1:4a:09:95:f9:44:11:8d:f9:05:d2: 6f:50:e5:f6:3b:3c:68:c4:13:68:2d:60:ce:f2:3a:c2:61:7f: c3:7e:5a:ad:ae:c8:29:ab:0d:c1:c9:2a:53:72:3e:22:f5:ed: be:e7:c3:31:0f:5f:8c:85:d5:73:44:79:cf:30:03:61:8b:99: 04:72:9f:93:6b:eb:f1:a5:b0:36:75:0f:3c:d0:e2:71:b3:f5: ae:c2:3a:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjYwNTIwMTU1OTM0WhcNMjYwNTI3MTU1OTM0WjAYMRYwFAYD VQQDEw02YTBkZGE2Ny02MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAral3AvMpFjXMzktalxRunXFAR7OKFJ17ishF4VefKxWf721kbVrmvIScu9p/ C2D4/c8zlYDqoKV69s2UBQvIXL8/METqhDKCp+0WQ31oPKQ8f1Qp59d5nXJHDukU EiTOF9txKiHDK7vgglJf8i3nadOOOazdHd78Hp6l5PyLCezHoNmIol7cXXL8hD9/ dXc13CEVAT7qsCtqs6ml1wxpYdPOlram1v+fI3B8IdTc8fFfRMPq+/s2XIasvq/4 i+CVcJP1b01iDKRT5oAKkpRlzVCtctbBeUNsTjLIZ/BSL1veIDf7fhVxkKEQR/Br FTlCXBqn5dxPHYHHIutRG4g4MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAM2g8bu ZgEUFr0d1Ef6xSwEJQW+MB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr1xAegJcB2m62LTnZ0pgO2a7vOOPBIZxXgO6UjPGajXuyW0hCfuixHFO34wk LPkd/LlGew/kW7onv8gF9kOTPJ+HmT+x2ONnIqbnQNH9L0tK9WOQbsMw0oD2mJnZ qjkJEBcIzvK/ijjTeTqI7n7wndXmhNs+7honq2X7R2z+B7bs22VHjWhzMGCXKEOr 3Bzgv4qXcISRXE5qxTfTM2InE/b2NzJfHnc1JNFKCZX5RBGN+QXSb1Dl9js8aMQT aC1gzvI6wmF/w35ara7IKasNwckqU3I+IvXtvufDMQ9fjIXVc0R5zzADYYuZBHKf k2vr8aWwNnUPPNDicbP1rsI6jA== -----END CERTIFICATE-----Generated at Thu May 21 09:36:30 2026 by rpki-client