$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: 5swhXM/8KcWSvbY/aDtBNpi/yI7gfm1MfgjKgLEGc6E= Subject key identifier: C0:17:17:37:05:A8:BD:85:E7:93:E4:43:F5:D9:8C:E2:2D:8A:D8:74 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 010C Signing time: Wed 20 May 2026 14:28:11 +0000 Manifest this update: Wed 20 May 2026 14:28:10 +0000 Manifest next update: Wed 27 May 2026 14:28:10 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: 3q+bmssHlEOPaDdzdIAtJExkjGZ9jMn4aPel3hG48s4=) 2: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: F9kzLS7p92HyECYzd+gu+WPkfZ5MMIAg8YgWcb7OD+A=) 3: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aWovwb/XvB9GCwrFHdnkc0vXtORNJSBEV1rN72Z1NuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: May 20 14:28:10 2026 GMT Not After : May 27 14:28:10 2026 GMT Subject: CN=6a0dc4fa-6496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:59:b1:a1:c6:75:da:36:f8:0b:1e:b7:ad: fd:0c:1f:27:65:9d:35:c8:48:10:2e:11:5a:d9:90: 86:65:62:7a:56:91:59:b4:bb:a1:44:ae:71:f6:ac: 35:38:94:37:2b:13:a8:02:65:9a:1e:b4:d7:35:92: 61:c5:4b:a3:0f:c3:47:e2:74:6f:5d:9a:b2:17:25: fd:60:da:94:e9:e5:32:c3:59:82:76:28:f8:ce:dd: 4a:d7:0a:57:41:ef:27:c2:d2:60:fb:ae:b9:17:2f: e8:2d:4e:ec:58:a7:5b:15:cd:44:e1:40:ba:56:4f: b7:35:12:4f:e3:42:b1:dc:b8:b5:85:b2:80:af:ff: 06:ad:b6:a3:24:72:cd:8a:1c:2c:b7:b4:38:76:d0: 97:b2:2f:5d:b1:08:a2:81:48:67:a6:d9:6c:1e:e2: 48:84:17:90:28:77:3e:9b:f4:dc:4e:29:a6:72:71: e4:b1:18:1e:8d:64:de:72:ff:a6:90:a6:fb:43:70: 21:00:cf:89:b1:ad:49:a9:1a:68:93:40:d7:7c:4a: 29:e8:cb:15:b5:37:1b:aa:73:15:a7:8e:51:8d:2c: f3:88:46:4d:67:00:1e:7b:bf:5d:59:dc:df:68:ee: 27:0a:c1:09:b6:7f:37:b5:81:88:8a:38:13:bf:a5: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:17:17:37:05:A8:BD:85:E7:93:E4:43:F5:D9:8C:E2:2D:8A:D8:74 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c4:40:04:c4:92:4e:0f:21:d2:9e:4d:e1:b5:38:92:82:81: 68:3c:0d:0f:81:f5:bd:28:90:2a:68:36:40:47:a4:7b:b7:77: c7:ce:85:b7:97:1f:8f:fe:df:ab:bc:5b:b0:8d:44:8f:a0:ea: 4d:22:77:25:74:fa:ad:dd:21:a4:7e:7e:05:9b:5f:73:c6:34: ab:be:27:83:7d:c2:43:5b:89:26:6e:a4:99:a0:e8:32:e2:d4: 71:59:f6:80:4a:98:1b:40:1b:a5:ac:b4:a8:67:df:91:14:55: 30:84:8f:82:40:c3:25:ad:82:13:54:cb:3a:2b:d9:c1:6a:91: d3:7e:b4:6d:53:e0:c0:97:81:ab:62:75:64:a2:9f:32:d7:db: 0c:79:f5:73:3c:bb:1f:ee:e4:84:b4:ea:0c:d5:0e:a8:2b:1d: 68:a2:9a:51:1c:c4:7f:8c:cf:7d:52:1f:f2:cf:f0:f3:dc:90: 80:b7:02:17:c6:7a:fe:6b:a0:59:d8:6a:7f:bc:01:18:7d:15: 33:56:19:ef:37:4a:11:0a:fa:8a:09:7b:cd:68:3c:6f:a7:70: 2d:99:01:ed:fb:4a:49:ae:89:59:6d:17:8f:79:80:55:90:f4: ef:18:65:60:60:dc:76:be:df:b4:12:16:2b:96:d7:5c:5a:78: 0c:9f:df:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjYwNTIwMTQyODEwWhcNMjYwNTI3MTQyODEwWjAYMRYwFAYD VQQDEw02YTBkYzRmYS02NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPJZsaHGddo2+Aset639DB8nZZ01yEgQLhFa2ZCGZWJ6VpFZtLuhRK5x9qw1 OJQ3KxOoAmWaHrTXNZJhxUujD8NH4nRvXZqyFyX9YNqU6eUyw1mCdij4zt1K1wpX Qe8nwtJg+665Fy/oLU7sWKdbFc1E4UC6Vk+3NRJP40Kx3Li1hbKAr/8GrbajJHLN ihwst7Q4dtCXsi9dsQiigUhnptlsHuJIhBeQKHc+m/TcTimmcnHksRgejWTecv+m kKb7Q3AhAM+Jsa1JqRpok0DXfEop6MsVtTcbqnMVp45RjSzziEZNZwAee79dWdzf aO4nCsEJtn83tYGIijgTv6VKFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAXFzcF qL2F55PkQ/XZjOItith0MB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ8RABMSSTg8h0p5N4bU4koKBaDwND4H1vSiQKmg2QEeke7d3x86Ft5cfj/7f q7xbsI1Ej6DqTSJ3JXT6rd0hpH5+BZtfc8Y0q74ng33CQ1uJJm6kmaDoMuLUcVn2 gEqYG0Abpay0qGffkRRVMISPgkDDJa2CE1TLOivZwWqR0360bVPgwJeBq2J1ZKKf MtfbDHn1czy7H+7khLTqDNUOqCsdaKKaURzEf4zPfVIf8s/w89yQgLcCF8Z6/mug Wdhqf7wBGH0VM1YZ7zdKEQr6igl7zWg8b6dwLZkB7ftKSa6JWW0Xj3mAVZD07xhl YGDcdr7ftBIWK5bXXFp4DJ/f6Q== -----END CERTIFICATE-----Generated at Thu May 21 16:53:38 2026 by rpki-client