$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: TnMKGVkRV+XzOAAtTGffHxFK5KdO/Dvh/DGW2S1g27I= Subject key identifier: F2:8E:E7:59:04:2E:2F:CF:B1:82:8B:03:E5:9B:B2:7D:E6:85:EE:5A Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 0142 Signing time: Thu 21 May 2026 05:38:29 +0000 Manifest this update: Thu 21 May 2026 05:38:29 +0000 Manifest next update: Thu 28 May 2026 05:38:29 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: xOh0Vx/2Qfv65OlivlsM7HCYm8IL5CzOkKmuRFuLaUQ=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: May 21 05:38:29 2026 GMT Not After : May 28 05:38:29 2026 GMT Subject: CN=6a0e9a55-c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:90:88:98:95:d5:6f:97:de:54:f9:1e:28: e5:3e:87:8b:48:12:04:94:26:42:3b:90:b4:fd:84: e1:09:8f:82:4a:8b:ab:5f:04:ec:18:f7:74:1d:af: 6e:61:b5:d1:31:35:40:9e:a1:46:d2:19:6f:1a:53: 24:38:4c:04:6f:dd:2a:38:d1:4b:81:b8:e4:2c:be: 09:08:8d:0c:b8:77:3c:ff:cd:49:e6:2a:bd:a1:78: 2c:16:87:85:64:7d:8c:48:a1:e2:82:b3:01:30:b5: c5:94:29:42:de:95:8a:4b:c2:d5:af:3f:e4:3c:99: 0b:29:75:4d:9a:e7:60:8c:6c:99:86:f1:5f:fd:62: c0:a9:b2:ba:3a:c8:f2:32:c5:e6:ce:b0:33:39:34: 5b:9d:c0:f6:58:3d:1e:0e:dd:a6:29:b6:92:af:c9: 2c:6f:9e:a5:c4:5c:57:96:a2:a8:c9:50:65:ff:08: b0:97:b7:3d:cf:ec:ab:f7:6a:73:0d:89:46:a2:d7: d0:9f:d3:be:b6:3f:74:e4:a7:4d:3e:b7:de:85:e0: c8:b7:59:55:fa:a9:cb:20:fc:1f:a8:c8:2d:10:31: 44:f7:11:7b:f8:44:97:e9:71:ca:7c:4f:99:c9:a0: 14:17:cf:09:35:d0:ec:4c:82:5b:6f:8e:97:38:05: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:E7:59:04:2E:2F:CF:B1:82:8B:03:E5:9B:B2:7D:E6:85:EE:5A X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:8b:c9:3e:ee:b4:06:f2:f5:b2:33:d3:23:32:71:96:16:75: ff:54:28:08:88:c7:83:af:3b:75:73:72:93:5b:ec:6c:b3:36: bb:bf:d8:5a:79:0b:ae:0f:fa:dd:f0:ca:d3:54:59:f2:92:9e: f2:97:d2:14:92:35:33:34:cd:0a:bc:60:95:41:51:52:09:5a: 70:e7:af:ec:4f:59:48:b0:ad:4f:39:6b:98:24:64:58:b1:81: 3f:0f:ad:41:e4:cf:d7:2f:98:c9:70:26:8f:62:50:e9:86:e7: 3c:13:3f:cb:3c:34:f4:9c:8d:14:0c:39:4f:31:a8:ac:49:fc: 1e:80:0a:96:bf:ab:e0:67:91:70:d9:01:ee:12:f2:5c:c2:bb: f3:ed:b5:c6:8c:02:dc:fe:3b:25:48:4d:43:9e:c7:08:6e:83: 96:20:f1:e0:66:fc:16:43:62:96:ab:9f:23:45:aa:09:30:8a: 22:e0:1f:e8:5d:1e:1b:24:52:f5:7b:6b:d5:20:06:d7:9f:73: b8:07:cc:b0:42:7a:08:67:7f:4a:7c:d6:25:c8:3b:7c:88:d6: 68:16:43:e5:9b:1b:ac:9f:c4:aa:8a:ff:0f:db:45:b2:24:9c: 97:ee:53:58:14:bd:5f:8a:ec:fa:2f:c5:62:1e:5f:7a:12:c2: 77:c8:76:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjYwNTIxMDUzODI5WhcNMjYwNTI4MDUzODI5WjAYMRYwFAYD VQQDEw02YTBlOWE1NS1jODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nCQiJiV1W+X3lT5HijlPoeLSBIElCZCO5C0/YThCY+CSourXwTsGPd0Ha9u YbXRMTVAnqFG0hlvGlMkOEwEb90qONFLgbjkLL4JCI0MuHc8/81J5iq9oXgsFoeF ZH2MSKHigrMBMLXFlClC3pWKS8LVrz/kPJkLKXVNmudgjGyZhvFf/WLAqbK6Osjy MsXmzrAzOTRbncD2WD0eDt2mKbaSr8ksb56lxFxXlqKoyVBl/wiwl7c9z+yr92pz DYlGotfQn9O+tj905KdNPrfeheDIt1lV+qnLIPwfqMgtEDFE9xF7+ESX6XHKfE+Z yaAUF88JNdDsTIJbb46XOAXQCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKO51kE Li/PsYKLA+Wbsn3mhe5aMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASYvJPu60BvL1sjPTIzJxlhZ1/1QoCIjHg687dXNyk1vsbLM2u7/YWnkLrg/6 3fDK01RZ8pKe8pfSFJI1MzTNCrxglUFRUglacOev7E9ZSLCtTzlrmCRkWLGBPw+t QeTP1y+YyXAmj2JQ6YbnPBM/yzw09JyNFAw5TzGorEn8HoAKlr+r4GeRcNkB7hLy XMK78+21xowC3P47JUhNQ57HCG6DliDx4Gb8FkNilqufI0WqCTCKIuAf6F0eGyRS 9Xtr1SAG159zuAfMsEJ6CGd/SnzWJcg7fIjWaBZD5ZsbrJ/Eqor/D9tFsiScl+5T WBS9X4rs+i/FYh5fehLCd8h2rA== -----END CERTIFICATE-----Generated at Thu May 21 17:47:25 2026 by rpki-client