$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: bWC2PungDTRD+mSZu1Xb7XRXxa7Tc4PCAB5ir2zh+P8= Subject key identifier: C4:32:3F:72:13:93:33:D7:3B:66:ED:D3:35:4B:B6:4F:04:B5:1B:60 Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 0876 Signing time: Wed 20 May 2026 20:49:35 +0000 Manifest this update: Wed 20 May 2026 20:49:35 +0000 Manifest next update: Wed 27 May 2026 20:49:35 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: huR7CBCtBhmy1LjZMF2MUccJ2t2klyHR5JnhY+x8f3g=) 2: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=) 3: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: May 20 20:49:35 2026 GMT Not After : May 27 20:49:35 2026 GMT Subject: CN=6a0e1e5f-d8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:ba:d1:89:88:a9:5c:91:22:7b:1d:db:a6: 5c:77:e8:18:f8:f3:3f:fd:65:ba:05:a1:53:69:45: 0e:28:3c:42:c7:33:57:e6:f6:72:f1:c4:18:64:15: 4b:a5:ae:50:08:18:49:c6:c8:e3:ae:c4:55:e5:52: 36:78:b2:b6:63:92:89:0d:c6:06:c8:5d:f2:17:1b: 1c:03:1b:9e:f4:2f:13:cd:8b:24:02:75:f7:9a:83: 91:93:c9:d2:fb:cc:6c:c6:95:13:5b:a9:72:d1:5a: 03:4d:24:59:ec:5a:dd:55:28:43:df:2f:5a:54:e5: e5:2c:21:7a:63:a6:5c:4c:28:86:11:89:43:de:41: e4:33:b3:ef:9d:4a:ca:b8:39:d6:a7:18:41:35:87: b4:ca:de:35:ac:95:0c:62:db:42:b4:48:33:11:01: b2:65:6a:fd:16:ee:ff:c8:70:5b:0f:fb:a5:98:88: 03:bc:b2:e7:6c:54:1f:df:9b:d4:b5:d3:56:bb:69: 80:5c:ff:59:2a:d9:2e:12:ff:15:32:5b:51:82:2b: 3c:5b:3c:d7:df:9b:ab:3f:0f:a8:47:ca:88:c6:cb: b8:07:e6:95:cc:a8:19:5f:ef:b7:38:4c:d7:ed:38: d7:57:cd:37:e9:22:25:18:e3:c6:4f:40:35:a4:d5: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:3F:72:13:93:33:D7:3B:66:ED:D3:35:4B:B6:4F:04:B5:1B:60 X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a4:78:e8:b5:8b:f7:4a:36:91:cf:b4:18:d4:a2:cc:ae:e5: c3:f7:c1:c6:e1:18:b5:c4:28:6e:73:d3:b1:67:34:ad:59:70: 5a:6d:14:5b:dc:db:09:15:80:ef:b5:9d:47:cd:a6:ed:1a:cd: 5b:c0:b8:a5:99:17:1b:26:f6:50:32:37:d0:28:42:4d:57:db: b0:97:69:a0:6f:25:a2:69:14:a9:51:28:2b:8f:1f:97:c8:a0: 9a:75:1f:b2:81:40:33:02:30:27:2a:e5:05:74:7e:84:5a:3a: 8a:e8:14:4e:22:55:e0:51:4a:ea:5a:37:49:ed:35:17:14:75: 9a:7d:b4:db:83:e5:67:2b:4a:17:6e:3c:f9:3c:30:a4:90:b5: 4d:3a:e9:db:d5:13:9d:e0:08:ee:4f:69:c1:8d:c6:c0:11:e3: 3e:cc:ef:2a:da:da:d1:c7:eb:82:f8:37:d4:12:41:0e:b9:f7: b5:1e:26:e3:a0:bc:81:e2:92:2e:a8:2a:21:33:52:54:57:6b: dd:29:89:7a:25:dd:02:65:5b:7f:eb:cd:42:ef:96:c2:74:bb: 81:4b:de:80:23:81:52:7c:2d:11:15:f0:03:1e:45:67:f5:3e: a6:67:95:62:18:bc:00:91:ca:7b:58:cb:37:69:87:0b:9f:1b: 8d:6a:17:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjYwNTIwMjA0OTM1WhcNMjYwNTI3MjA0OTM1WjAYMRYwFAYD VQQDEw02YTBlMWU1Zi1kOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotm60YmIqVyRInsd26Zcd+gY+PM//WW6BaFTaUUOKDxCxzNX5vZy8cQYZBVL pa5QCBhJxsjjrsRV5VI2eLK2Y5KJDcYGyF3yFxscAxue9C8TzYskAnX3moORk8nS +8xsxpUTW6ly0VoDTSRZ7FrdVShD3y9aVOXlLCF6Y6ZcTCiGEYlD3kHkM7PvnUrK uDnWpxhBNYe0yt41rJUMYttCtEgzEQGyZWr9Fu7/yHBbD/ulmIgDvLLnbFQf35vU tdNWu2mAXP9ZKtkuEv8VMltRgis8WzzX35urPw+oR8qIxsu4B+aVzKgZX++3OEzX 7TjXV8036SIlGOPGT0A1pNXQWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQyP3IT kzPXO2bt0zVLtk8EtRtgMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcqR46LWL90o2kc+0GNSizK7lw/fBxuEYtcQobnPTsWc0rVlwWm0UW9zbCRWA 77WdR82m7RrNW8C4pZkXGyb2UDI30ChCTVfbsJdpoG8lomkUqVEoK48fl8igmnUf soFAMwIwJyrlBXR+hFo6iugUTiJV4FFK6lo3Se01FxR1mn2024PlZytKF248+Tww pJC1TTrp29UTneAI7k9pwY3GwBHjPszvKtra0cfrgvg31BJBDrn3tR4m46C8geKS LqgqITNSVFdr3SmJeiXdAmVbf+vNQu+WwnS7gUvegCOBUnwtERXwAx5FZ/U+pmeV Yhi8AJHKe1jLN2mHC58bjWoXOA== -----END CERTIFICATE-----Generated at Thu May 21 10:14:59 2026 by rpki-client