$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: R7GRXEwmWJ4R0GFVKsNZUXpoOCra16d8V7H4GnWwVCY= Subject key identifier: 6E:85:00:B2:16:E9:00:5C:70:C0:8A:A0:E2:4D:A8:D0:01:EF:12:6A Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2374 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 22FA Signing time: Wed 20 May 2026 15:51:27 +0000 Manifest this update: Wed 20 May 2026 15:51:26 +0000 Manifest next update: Wed 27 May 2026 15:51:26 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: dJtiVzCScUXu2xlenW8b02yOP3PNRBi/gy7wUCMDox0=) 2: D73D7F9A4F5C11F1A1CF9B1EC3833773.roa (hash: LsF8bIIMFOCcGprQVrGHhL56CpMqQ2fHf3ivIoU2OIg=) 3: B77C6462487411F1984AD6F3A8833773.roa (hash: SE41jHiW8n2mip93A+8BTUmeVD46xtl29br632rxTho=) 4: A44814E8EF8411F087F172675F6F56BC.roa (hash: wvN10FQ8zvYAowPbb2JVqT+LitRhCvH0XZWoM78inD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9076 (0x2374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: May 20 15:51:26 2026 GMT Not After : May 27 15:51:26 2026 GMT Subject: CN=6a0dd87f-a5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:3f:6b:29:27:86:e6:bf:99:b0:3b:da:7a: f9:b3:1d:e3:14:bf:6f:9d:5d:fa:35:02:8b:17:02: 9a:82:48:e1:6d:16:80:47:f3:73:7e:68:6f:ce:d1: f7:65:2f:82:24:f7:15:e5:c2:d1:fe:69:30:aa:e4: 31:54:42:4b:87:09:4b:f7:90:43:48:e8:13:31:67: fa:62:2a:21:42:ff:24:60:0e:ab:21:69:e2:45:c2: d0:c7:8e:26:f3:a9:1e:56:15:82:41:db:30:0d:36: f9:b2:53:90:ed:74:d6:8d:ad:2d:a7:2f:d8:03:1f: 05:43:20:8d:6c:09:2c:97:7d:8c:54:c4:b9:6a:16: f1:61:04:77:5c:4d:cc:3b:e1:a0:fb:46:d0:36:65: a9:59:df:e1:0d:93:8c:bb:27:f4:6b:21:c0:e5:f5: 21:db:66:89:9e:0c:30:5e:93:b4:04:ac:5f:0e:9d: 10:64:92:42:20:a5:6f:97:04:a2:73:f4:24:f9:59: 14:15:65:c4:3e:5b:c1:c8:02:08:d9:a9:ed:9e:0b: ba:83:d9:53:be:25:47:c3:02:2a:89:30:5d:dc:c1: 12:1d:6a:23:4a:b8:91:f5:fc:2b:b1:57:8e:ee:dc: 62:8f:13:83:b9:a6:be:0d:89:c8:ef:80:ed:1f:c1: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:85:00:B2:16:E9:00:5C:70:C0:8A:A0:E2:4D:A8:D0:01:EF:12:6A X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9a:4b:f1:03:d7:c2:e9:0d:16:ff:f4:15:3b:cb:fe:38:f7: a9:f1:bf:0d:86:9c:2e:a7:a5:67:d7:b0:bf:5d:be:58:5d:41: 5f:c0:af:b7:a3:8a:c3:5b:d9:90:2d:70:2a:1d:fa:62:70:30: f5:6f:d0:f9:0f:9d:2b:4f:64:bb:3a:40:11:ed:eb:03:40:d1: 98:a0:1a:11:92:3f:fd:3e:51:b8:be:5c:39:db:0c:bb:3b:8b: 16:77:53:dd:4a:a6:31:31:f7:86:bf:ed:09:42:1f:a7:c4:30: e3:f1:a5:fa:6b:2d:3a:1d:46:ff:bf:d8:50:6c:c8:5d:1a:d0: db:f3:02:51:b0:a5:19:cd:80:7a:ba:81:52:5a:ee:ce:52:f1: 10:58:19:8e:52:fe:10:25:bf:4a:65:1f:bc:eb:78:a5:84:49: c5:ef:c9:72:6a:fd:75:06:c5:92:80:2f:81:d4:c7:fd:c3:5e: 0f:20:f5:ab:14:12:21:6b:e1:6c:8b:27:71:67:87:eb:bf:48: d9:7c:aa:9b:01:9c:94:8a:dc:eb:b0:e7:37:48:df:69:1b:e1: 91:0b:09:d3:c1:2d:7a:14:a2:47:45:49:44:3e:6d:35:9a:dc: 6e:cd:69:62:f3:86:32:4f:f5:d9:5e:ba:15:5d:c3:5c:bf:0b: 14:4d:99:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjYwNTIwMTU1MTI2WhcNMjYwNTI3MTU1MTI2WjAYMRYwFAYD VQQDEw02YTBkZDg3Zi1hNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyU/ayknhua/mbA72nr5sx3jFL9vnV36NQKLFwKagkjhbRaAR/NzfmhvztH3 ZS+CJPcV5cLR/mkwquQxVEJLhwlL95BDSOgTMWf6YiohQv8kYA6rIWniRcLQx44m 86keVhWCQdswDTb5slOQ7XTWja0tpy/YAx8FQyCNbAksl32MVMS5ahbxYQR3XE3M O+Gg+0bQNmWpWd/hDZOMuyf0ayHA5fUh22aJngwwXpO0BKxfDp0QZJJCIKVvlwSi c/Qk+VkUFWXEPlvByAII2antngu6g9lTviVHwwIqiTBd3MESHWojSriR9fwrsVeO 7txijxODuaa+DYnI74DtH8FpAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6FALIW 6QBccMCKoOJNqNAB7xJqMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVJpL8QPXwukNFv/0FTvL/jj3qfG/DYacLqelZ9ewv12+WF1BX8Cvt6OKw1vZ kC1wKh36YnAw9W/Q+Q+dK09kuzpAEe3rA0DRmKAaEZI//T5RuL5cOdsMuzuLFndT 3UqmMTH3hr/tCUIfp8Qw4/Gl+mstOh1G/7/YUGzIXRrQ2/MCUbClGc2AerqBUlru zlLxEFgZjlL+ECW/SmUfvOt4pYRJxe/Jcmr9dQbFkoAvgdTH/cNeDyD1qxQSIWvh bIsncWeH679I2XyqmwGclIrc67DnN0jfaRvhkQsJ08EtehSiR0VJRD5tNZrcbs1p YvOGMk/12V66FV3DXL8LFE2ZRw== -----END CERTIFICATE-----Generated at Thu May 21 09:37:11 2026 by rpki-client