$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: Gz6qiWOSCDtxmx8NAq866GSqSy44mnxpFgrBEETUxHQ= Subject key identifier: 69:14:AE:62:F9:23:2D:0E:38:87:E7:25:B3:C9:9D:88:17:75:86:01 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 08A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 088F Signing time: Wed 20 May 2026 20:42:18 +0000 Manifest this update: Wed 20 May 2026 20:42:18 +0000 Manifest next update: Wed 27 May 2026 20:42:18 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: UUGNlkDD+MCfg8FpkWgvcq70bTrEx2N6tofdtSkCZ/E=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 4+lHA5+XA6q3WA0a7feDPb9rgvNk8uk4zcP3rt42nhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: May 20 20:42:18 2026 GMT Not After : May 27 20:42:18 2026 GMT Subject: CN=6a0e1caa-d715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:1b:bb:56:76:d6:cc:d3:82:f6:bd:dd:08: 98:05:49:38:1d:9d:55:cf:f5:f1:ec:f2:a1:1d:c6: 33:aa:59:97:f6:26:ac:8f:87:ad:07:ec:66:8f:3d: a0:0a:ac:6f:59:25:e2:7e:7c:66:64:6b:68:95:b0: b4:11:b4:bb:49:f1:14:e9:32:f7:68:6b:da:bf:5d: 3c:6c:c6:c6:04:b7:4e:61:53:f3:4b:d5:d6:52:41: be:1e:83:c8:1e:d0:f2:9a:1d:50:bf:25:78:5f:0a: 54:48:a7:4f:a2:38:8b:59:79:a2:92:59:c9:13:a1: 99:cb:78:80:a6:75:4f:b3:54:cf:19:c7:ef:e2:14: 5e:7d:a4:da:7b:71:c5:49:b2:5c:c4:ab:fd:cc:f7: b8:9e:4e:73:7e:5d:b1:97:d3:4a:00:92:6e:61:3b: e2:56:e8:db:2d:63:03:1a:41:58:f8:f7:8c:f1:7a: fa:de:ad:c4:33:7a:fe:53:9d:a9:7e:fe:f5:ff:1f: 14:7b:3d:3b:af:6d:11:1a:31:e7:ea:12:67:ea:ae: ce:9f:4c:73:29:a1:cd:52:cd:2f:4a:5a:68:16:df: 3e:cd:29:e3:e5:23:3e:d1:f9:a9:f2:db:a1:5f:42: f3:e8:b9:e8:8f:67:f1:9b:6e:72:86:1e:a0:18:e7: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:14:AE:62:F9:23:2D:0E:38:87:E7:25:B3:C9:9D:88:17:75:86:01 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:29:53:eb:d4:31:ea:88:43:66:9e:64:c6:70:e7:8e:e1:fb: b7:19:b8:7d:e9:2d:58:11:32:25:19:8c:fa:8e:f3:76:4b:5e: 36:18:6e:2b:11:a8:a2:3a:ce:58:9e:af:b7:63:c3:f0:e7:95: 6d:f7:29:07:76:73:aa:93:85:18:bb:a4:87:18:07:78:1e:8c: 2e:d3:d4:32:23:ac:30:32:82:9f:27:9c:10:23:06:69:04:2b: 6e:9e:94:cf:01:79:34:c4:c9:ab:f7:d4:45:0e:54:17:2a:c2: 65:04:7b:bf:06:fa:45:e3:e5:a6:2b:12:67:18:f6:d3:a5:38: 77:9c:66:b5:f5:a0:6c:1d:d5:9c:0c:d6:9c:5b:c2:05:44:77: 26:0f:c4:4f:45:d1:ff:70:10:1f:1a:bc:aa:b0:0f:00:02:da: 57:ab:57:d6:dd:a0:bc:09:d2:cb:7f:db:f4:66:b9:bc:88:31: 33:aa:80:2c:05:24:06:c6:1b:fa:f2:cd:d9:c0:f7:2d:d8:fd: 0e:77:17:48:4f:dc:cc:6e:e8:f3:01:48:fd:03:3f:5b:bd:33: 41:4e:33:f0:cd:0e:bf:36:4d:56:3a:63:04:3f:bb:fb:4c:e8: 8a:33:1d:f8:c1:ac:e4:e5:d8:7f:20:79:2d:f3:86:00:49:a9: dd:e0:5c:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjYwNTIwMjA0MjE4WhcNMjYwNTI3MjA0MjE4WjAYMRYwFAYD VQQDEw02YTBlMWNhYS1kNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jEbu1Z21szTgva93QiYBUk4HZ1Vz/Xx7PKhHcYzqlmX9iasj4etB+xmjz2g CqxvWSXifnxmZGtolbC0EbS7SfEU6TL3aGvav108bMbGBLdOYVPzS9XWUkG+HoPI HtDymh1QvyV4XwpUSKdPojiLWXmiklnJE6GZy3iApnVPs1TPGcfv4hRefaTae3HF SbJcxKv9zPe4nk5zfl2xl9NKAJJuYTviVujbLWMDGkFY+PeM8Xr63q3EM3r+U52p fv71/x8Uez07r20RGjHn6hJn6q7On0xzKaHNUs0vSlpoFt8+zSnj5SM+0fmp8tuh X0Lz6Lnoj2fxm25yhh6gGOeAywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkUrmL5 Iy0OOIfnJbPJnYgXdYYBMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASClT69Qx6ohDZp5kxnDnjuH7txm4fektWBEyJRmM+o7zdkteNhhuKxGoojrO WJ6vt2PD8OeVbfcpB3ZzqpOFGLukhxgHeB6MLtPUMiOsMDKCnyecECMGaQQrbp6U zwF5NMTJq/fURQ5UFyrCZQR7vwb6RePlpisSZxj206U4d5xmtfWgbB3VnAzWnFvC BUR3Jg/ET0XR/3AQHxq8qrAPAALaV6tX1t2gvAnSy3/b9Ga5vIgxM6qALAUkBsYb +vLN2cD3Ldj9DncXSE/czG7o8wFI/QM/W70zQU4z8M0OvzZNVjpjBD+7+0zoijMd +MGs5OXYfyB5LfOGAEmp3eBcIw== -----END CERTIFICATE-----Generated at Thu May 21 10:29:05 2026 by rpki-client