$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: jixQpwcLr13Z2aHZahtel/tpMPZ0cnDkt5R0+W2dPo0= Subject key identifier: BF:52:22:AE:3F:86:C2:C3:08:CD:3E:3A:51:1F:29:13:ED:19:DD:04 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 041E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0408 Signing time: Fri 15 May 2026 00:33:40 +0000 Manifest this update: Fri 15 May 2026 00:33:39 +0000 Manifest next update: Fri 22 May 2026 00:33:39 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: cwxJwG2Tsn9BLvjspBdvOWOB9Qtlph4QhpC8Is2cZPQ=) 2: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) 3: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 4: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: May 15 00:33:39 2026 GMT Not After : May 22 00:33:39 2026 GMT Subject: CN=6a0669e4-4373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:8c:ab:3e:78:ff:62:9f:d1:30:ef:28:11: 0a:9a:06:81:8f:9a:ea:b5:c4:cc:64:3e:03:38:2b: be:72:1a:a9:8e:ad:19:9b:99:0b:89:a5:8d:b4:c5: 1f:b1:16:44:b8:7d:c5:61:16:67:f8:70:c3:38:d1: a9:98:69:ce:3e:9e:ae:70:cb:e1:fe:82:5f:3f:09: 49:9c:fb:31:d7:05:14:e6:7f:78:35:c9:ff:2b:13: b7:85:33:dd:d2:c4:3e:e2:44:3f:18:4b:3b:a2:ff: 63:48:04:c1:8c:7a:0f:b6:1d:b9:6b:01:33:24:cf: 7f:26:1c:3c:13:0e:aa:ce:9b:51:36:f9:84:fb:a7: 30:0f:b0:3f:f8:13:f2:d3:5d:53:de:9a:49:16:76: c3:84:6f:58:0b:5d:79:74:7b:2a:87:f9:ec:7b:22: 74:55:31:16:72:30:1d:bc:b5:69:0f:9c:1e:87:da: 09:79:ac:06:65:44:2b:cf:6b:ce:af:8c:1c:4a:6e: 9a:fc:06:7f:ae:6f:e0:b2:e5:12:bb:77:62:fa:4c: 5e:e8:da:e9:c1:34:f7:19:01:0c:be:59:7c:1f:24: 0a:77:67:cd:2c:b3:6a:d3:2d:19:40:d5:2e:94:22: 00:99:a7:25:d8:f7:09:57:3c:aa:dc:41:16:10:70: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:52:22:AE:3F:86:C2:C3:08:CD:3E:3A:51:1F:29:13:ED:19:DD:04 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:45:a4:6f:aa:15:42:51:dc:d4:4c:db:aa:3d:c0:13:ee:00: 5e:0b:49:77:dc:74:a4:cb:6d:f4:a1:f1:ac:2b:92:3c:9f:9d: f7:0a:ff:18:45:cb:e0:d7:98:6b:1c:e9:93:7d:ac:94:93:56: bc:81:56:37:c8:5a:5e:90:d0:dc:6d:bf:e2:28:c3:52:38:39: c0:da:11:31:fd:03:ee:75:d2:e0:83:f7:92:58:77:b7:36:c4: 51:a0:e7:24:ad:2f:1c:1b:2a:f4:15:c5:9e:aa:49:40:f2:fa: 82:3e:a6:f6:74:9d:d7:ab:dc:d5:f7:f1:d6:a3:44:e9:30:f3: 0f:ff:e3:3c:3c:23:b6:87:ae:e1:be:56:19:4a:9b:9f:03:48: 2b:3e:99:69:79:5c:2f:72:cd:5e:5a:57:09:2d:7a:66:c3:af: 4d:a8:0e:75:e8:f5:6c:bb:8d:ca:0e:28:5e:9e:5d:f5:74:9f: ad:09:b6:c8:b5:6e:2b:57:f3:51:d2:f8:39:e2:ae:af:8e:e2: b9:17:1c:aa:5f:d6:4d:70:c1:da:a0:60:4b:1f:ec:1c:84:c8: 0f:5f:41:ee:9a:52:84:c0:ef:fe:ec:8b:27:56:3c:4d:c6:e9: 5a:68:8d:3a:43:e0:7f:08:f8:17:3e:e3:8a:bd:f4:2e:6d:3b: 28:c3:7a:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNTE1MDAzMzM5WhcNMjYwNTIyMDAzMzM5WjAYMRYwFAYD VQQDEw02YTA2NjllNC00MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kaMqz54/2Kf0TDvKBEKmgaBj5rqtcTMZD4DOCu+chqpjq0Zm5kLiaWNtMUf sRZEuH3FYRZn+HDDONGpmGnOPp6ucMvh/oJfPwlJnPsx1wUU5n94Ncn/KxO3hTPd 0sQ+4kQ/GEs7ov9jSATBjHoPth25awEzJM9/Jhw8Ew6qzptRNvmE+6cwD7A/+BPy 011T3ppJFnbDhG9YC115dHsqh/nseyJ0VTEWcjAdvLVpD5weh9oJeawGZUQrz2vO r4wcSm6a/AZ/rm/gsuUSu3di+kxe6NrpwTT3GQEMvll8HyQKd2fNLLNq0y0ZQNUu lCIAmacl2PcJVzyq3EEWEHDiWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9SIq4/ hsLDCM0+OlEfKRPtGd0EMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZEWkb6oVQlHc1Ezbqj3AE+4AXgtJd9x0pMtt9KHxrCuSPJ+d9wr/GEXL4NeY axzpk32slJNWvIFWN8haXpDQ3G2/4ijDUjg5wNoRMf0D7nXS4IP3klh3tzbEUaDn JK0vHBsq9BXFnqpJQPL6gj6m9nSd16vc1ffx1qNE6TDzD//jPDwjtoeu4b5WGUqb nwNIKz6ZaXlcL3LNXlpXCS16ZsOvTagOdej1bLuNyg4oXp5d9XSfrQm2yLVuK1fz UdL4OeKur47iuRccql/WTXDB2qBgSx/sHITID19B7ppShMDv/uyLJ1Y8TcbpWmiN OkPgfwj4Fz7jir30Lm07KMN6CA== -----END CERTIFICATE-----Generated at Fri May 15 20:44:09 2026 by rpki-client