$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: 2jyFO+gLccJ/VDxf2nK53GTLojCQMzF2pl8PEeDepME= Subject key identifier: C9:20:50:70:6D:56:64:5D:B1:07:E7:40:E8:F4:95:06:27:21:5D:2E Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0C1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0C14 Signing time: Wed 20 May 2026 18:49:24 +0000 Manifest this update: Wed 20 May 2026 18:49:24 +0000 Manifest next update: Wed 27 May 2026 18:49:24 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 6cX79P/jmWQivWVGbkS1n/TCWIS6qJFHOSemziPZ+Ng=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: TI2KVdmBR8c+EKodG88ZYvgfW8TmL2x0GR8/djTO5Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: May 20 18:49:24 2026 GMT Not After : May 27 18:49:24 2026 GMT Subject: CN=6a0e0234-4f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:61:0c:0e:80:3a:a7:1a:c1:f0:91:f2:03: a7:57:a3:e2:a7:7d:c2:2c:63:96:9f:5c:f5:7d:1d: 81:2b:20:ef:13:71:d7:d2:ac:5c:e9:b4:4d:47:81: d9:9a:d5:7b:2d:4b:60:fb:6e:45:46:6d:85:2a:74: 05:93:e2:e1:1e:73:fa:65:1e:b3:70:c3:d9:48:0b: ea:cf:c5:75:3e:fd:18:02:2d:9c:5a:70:1c:b2:dc: 28:2f:fe:30:20:10:54:fa:04:0c:28:0d:90:eb:d5: 21:c2:4b:b8:84:3c:0b:dc:de:76:61:54:a4:4b:73: 9c:cd:56:c3:e1:7b:a9:8f:4c:76:e1:75:a0:f7:29: 18:af:1b:98:16:8d:15:5f:c0:8a:56:6c:ea:c3:b5: 4d:fb:86:7f:33:d4:d0:cb:c2:75:04:a8:da:7a:c4: 5d:07:93:cb:54:e9:0a:5c:78:80:c9:a4:f4:21:90: 55:ed:55:6f:6f:73:19:57:fb:8b:ab:b9:7f:f5:38: 11:e9:57:10:7d:10:f2:2b:4f:37:1c:a7:4e:63:d8: 2a:74:6e:b0:e6:e7:65:f6:f7:a7:9e:4b:29:27:3d: b7:1f:14:cd:d1:92:bd:9c:82:34:ca:18:b5:9c:7b: ea:22:a6:29:c7:41:55:c7:b7:67:88:65:3f:c4:09: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:50:70:6D:56:64:5D:B1:07:E7:40:E8:F4:95:06:27:21:5D:2E X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:24:5d:ce:b9:4f:56:30:31:86:b6:41:a6:c0:b8:4d:6a:f6: 43:6d:7a:ca:31:f4:99:39:64:89:54:e3:f4:c5:56:fd:c6:3b: b9:4d:6e:c8:f6:17:65:bb:a5:5e:17:5f:67:f1:08:59:16:7a: ca:7d:5d:2d:5c:97:3c:aa:71:63:ab:9f:7d:29:50:b9:33:74: d1:3b:31:b5:1b:45:bb:f3:ac:e6:3f:ce:ef:0e:79:15:4e:27: 24:2d:f9:90:3f:99:d6:b9:f3:d6:e5:f5:9b:c8:a3:d5:a1:5b: af:f2:23:c9:82:84:c5:65:fa:3f:2b:61:02:5a:6f:f6:2e:d8: 15:07:06:ee:06:ba:d9:25:aa:8a:fd:0a:36:2d:f0:6b:11:7e: b3:cf:00:87:a9:ec:68:e1:97:d0:30:7a:46:29:e5:cb:df:51: 75:38:eb:57:a9:e6:11:2a:23:79:7b:9b:79:72:ba:14:0b:36: 43:ab:f6:7a:c8:2d:a5:5f:e1:85:93:8c:af:6f:18:a9:08:8a: 64:0c:72:3a:8e:13:86:5c:01:f8:18:8a:b9:a9:63:25:28:6c: 26:1e:9c:7b:0d:55:7e:c8:a7:5a:16:df:3a:70:06:1c:1a:c1: 6f:a4:1d:ae:93:95:c0:32:43:c5:86:aa:6e:c5:1e:54:ea:4c: 51:00:75:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjYwNTIwMTg0OTI0WhcNMjYwNTI3MTg0OTI0WjAYMRYwFAYD VQQDEw02YTBlMDIzNC00ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO9hDA6AOqcawfCR8gOnV6Pip33CLGOWn1z1fR2BKyDvE3HX0qxc6bRNR4HZ mtV7LUtg+25FRm2FKnQFk+LhHnP6ZR6zcMPZSAvqz8V1Pv0YAi2cWnAcstwoL/4w IBBU+gQMKA2Q69Uhwku4hDwL3N52YVSkS3OczVbD4Xupj0x24XWg9ykYrxuYFo0V X8CKVmzqw7VN+4Z/M9TQy8J1BKjaesRdB5PLVOkKXHiAyaT0IZBV7VVvb3MZV/uL q7l/9TgR6VcQfRDyK083HKdOY9gqdG6w5udl9vennkspJz23HxTN0ZK9nII0yhi1 nHvqIqYpx0FVx7dniGU/xAkM4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkgUHBt VmRdsQfnQOj0lQYnIV0uMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdSRdzrlPVjAxhrZBpsC4TWr2Q216yjH0mTlkiVTj9MVW/cY7uU1uyPYXZbul XhdfZ/EIWRZ6yn1dLVyXPKpxY6uffSlQuTN00TsxtRtFu/Os5j/O7w55FU4nJC35 kD+Z1rnz1uX1m8ij1aFbr/IjyYKExWX6PythAlpv9i7YFQcG7ga62SWqiv0KNi3w axF+s88Ah6nsaOGX0DB6Rinly99RdTjrV6nmESojeXubeXK6FAs2Q6v2esgtpV/h hZOMr28YqQiKZAxyOo4ThlwB+BiKualjJShsJh6cew1VfsinWhbfOnAGHBrBb6Qd rpOVwDJDxYaqbsUeVOpMUQB1rg== -----END CERTIFICATE-----Generated at Thu May 21 11:59:18 2026 by rpki-client