$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: SmR4ad/mtVFPnTu8yh1ODLq2UVa2xvqXwxGkCl/hyKs= Subject key identifier: 2B:0E:50:05:70:1E:63:D1:5C:56:12:28:98:AD:EB:FB:5F:9C:3F:B6 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 01CF Signing time: Thu 21 May 2026 03:44:06 +0000 Manifest this update: Thu 21 May 2026 03:44:06 +0000 Manifest next update: Thu 28 May 2026 03:44:06 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: DkYJkgprDSlGBasEYilzgKDsTLNNe+INVUxx9y9d3/w=) 2: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=) 3: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: May 21 03:44:06 2026 GMT Not After : May 28 03:44:06 2026 GMT Subject: CN=6a0e7f86-fa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:7c:ce:ce:e2:e8:68:86:a7:a3:46:b9:bf: 45:72:32:ac:5b:a1:8e:92:aa:d7:a5:f5:e6:83:b1: 92:43:a8:90:dd:63:20:20:dc:c4:bb:1d:01:96:c0: 6b:0e:0c:d3:4a:00:dd:e8:74:30:94:e7:b3:3e:18: ed:96:63:c5:0b:d7:37:6f:6b:63:a0:30:4a:47:f9: 7c:43:b3:c1:80:10:89:16:49:7b:67:6a:43:7f:62: 91:c4:8c:56:06:6a:ed:ba:45:a9:ba:39:19:d5:dd: 4a:f5:d9:62:a8:08:8a:e2:b4:4a:df:c9:f6:6b:dc: e0:58:93:ff:57:f0:f8:11:bc:11:13:da:3a:4c:38: 7a:cf:a4:73:c0:36:7a:e9:a1:b0:99:5d:0b:ae:f4: 22:88:12:69:e4:19:f7:61:94:8e:9a:59:b0:3a:d9: 2b:dd:14:98:f1:59:d2:20:14:cc:de:67:61:45:cc: 05:f2:91:2f:3b:d1:39:9d:c4:52:96:e2:31:5c:cc: a4:57:b4:6c:9a:4f:e8:cf:15:e5:2c:b9:77:f6:33: 59:88:0f:bf:dc:42:4e:3c:82:c7:b0:a6:8f:0d:74: 1a:3e:5f:17:d6:33:40:d4:5d:db:a3:6c:3a:da:a5: 7d:22:99:b8:ec:60:51:2f:36:3b:ee:91:53:3d:a4: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:50:05:70:1E:63:D1:5C:56:12:28:98:AD:EB:FB:5F:9C:3F:B6 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4e:61:da:c4:32:4c:8a:bc:3b:c1:23:94:9c:b5:12:ea:13: 72:0b:09:25:7c:2e:53:f9:92:61:98:85:d9:c2:bd:79:8c:d4: f2:42:25:6f:19:0c:31:d1:c4:98:26:1b:e0:b9:c0:e7:53:e3: db:28:28:43:ff:6f:5b:83:41:5b:8f:16:1e:a8:14:8f:47:4d: 6a:f0:e0:03:43:4e:2e:cd:0f:af:24:87:26:13:5f:7b:d8:ad: d1:58:d7:eb:ee:a0:a1:0d:93:48:1f:8c:50:6f:4b:24:ba:a8: c2:82:09:8e:aa:9a:25:24:cf:0c:97:42:84:70:49:e5:b3:cd: 9c:ff:c4:6e:83:09:ad:18:54:c7:71:38:84:9f:c5:68:9c:58: c3:63:af:1c:59:19:a8:b6:93:21:66:f1:18:a0:74:bc:17:cd: 1d:6f:38:1e:5f:10:e8:d5:3e:d9:a4:e6:8a:65:52:80:c2:80: 77:97:f6:1a:eb:3b:63:10:ea:dd:6c:82:7b:4a:1e:54:03:22: 9f:d5:8c:41:eb:14:1c:d0:bb:88:12:06:54:38:e2:5a:09:ad: a4:98:e5:8f:e5:d1:b5:4f:81:c1:35:70:d0:39:48:88:1e:a1: d5:3f:ea:48:aa:3f:79:7b:f6:43:42:47:73:da:2c:3b:7a:c4: 8a:55:29:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYwNTIxMDM0NDA2WhcNMjYwNTI4MDM0NDA2WjAYMRYwFAYD VQQDEw02YTBlN2Y4Ni1mYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9R8zs7i6GiGp6NGub9FcjKsW6GOkqrXpfXmg7GSQ6iQ3WMgINzEux0BlsBr DgzTSgDd6HQwlOezPhjtlmPFC9c3b2tjoDBKR/l8Q7PBgBCJFkl7Z2pDf2KRxIxW BmrtukWpujkZ1d1K9dliqAiK4rRK38n2a9zgWJP/V/D4EbwRE9o6TDh6z6RzwDZ6 6aGwmV0LrvQiiBJp5Bn3YZSOmlmwOtkr3RSY8VnSIBTM3mdhRcwF8pEvO9E5ncRS luIxXMykV7Rsmk/ozxXlLLl39jNZiA+/3EJOPILHsKaPDXQaPl8X1jNA1F3bo2w6 2qV9Ipm47GBRLzY77pFTPaQRUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsOUAVw HmPRXFYSKJit6/tfnD+2MB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP05h2sQyTIq8O8EjlJy1EuoTcgsJJXwuU/mSYZiF2cK9eYzU8kIlbxkMMdHE mCYb4LnA51Pj2ygoQ/9vW4NBW48WHqgUj0dNavDgA0NOLs0PrySHJhNfe9it0VjX 6+6goQ2TSB+MUG9LJLqowoIJjqqaJSTPDJdChHBJ5bPNnP/EboMJrRhUx3E4hJ/F aJxYw2OvHFkZqLaTIWbxGKB0vBfNHW84Hl8Q6NU+2aTmimVSgMKAd5f2Gus7YxDq 3WyCe0oeVAMin9WMQesUHNC7iBIGVDjiWgmtpJjlj+XRtU+BwTVw0DlIiB6h1T/q SKo/eXv2Q0JHc9osO3rEilUpZA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:43 2026 by rpki-client