$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft File: pCvBWA8L3pIR-4wIkUqlwsARIXs.mft (raw, json) Hash identifier: b3UT2aNkIGa78gpajUq9bCue1mis2gw/V7rnm8V5tno= Subject key identifier: 03:3A:9D:6E:DF:FC:91:7A:31:61:58:E1:8A:D9:EB:E5:51:E4:E9:25 Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B Certificate issuer: /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft Manifest number: 10 Signing time: Thu 21 May 2026 09:13:51 +0000 Manifest this update: Thu 21 May 2026 09:13:51 +0000 Manifest next update: Thu 28 May 2026 09:13:51 +0000 Files and hashes: 1: pCvBWA8L3pIR-4wIkUqlwsARIXs.crl (hash: 2sskIXgvPoWmXvbWyP+fH+o68eov75muZu0/oHfx2IM=) 2: AE0F1BEA42AC11F1AC02065EBB833773.roa (hash: 2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 09:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B Validity Not Before: May 21 09:13:51 2026 GMT Not After : May 28 09:13:51 2026 GMT Subject: CN=6a0ecccf-a94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:bf:9c:4a:7f:66:0d:b4:05:c9:2c:0e:6d: ec:e2:97:39:2c:13:86:e8:31:dc:8c:9b:a3:80:fa: 4c:75:ee:e4:0e:37:44:34:0f:e2:1e:24:47:8a:31: 0b:22:e3:c7:46:6a:07:ba:e7:c5:c9:8e:5e:ae:e6: 88:2f:fb:28:ad:3e:c5:0e:a6:fa:8b:6f:6d:88:69: 14:3f:f3:a8:7d:ba:c4:30:a7:53:7d:e4:8c:68:98: 1c:de:74:01:fa:ed:53:a0:c2:3e:77:be:dc:58:4f: 02:f4:2b:0b:c9:ad:f9:d5:bc:f8:fc:3d:b9:35:62: e0:93:49:2f:09:24:83:50:67:aa:9f:fe:f7:70:7b: f9:1c:47:dc:f1:92:8f:26:6f:30:d1:60:42:75:84: a2:17:fd:3e:02:01:c4:45:f5:a1:fc:26:9f:6a:cd: b4:70:88:18:2a:af:eb:5e:15:62:f9:dc:52:e5:98: 4f:6e:b8:1c:ce:8d:23:eb:08:79:16:35:f7:7b:32: 2f:65:48:2f:d5:ca:b7:69:20:39:84:b6:99:64:47: 0f:06:6e:e1:f9:e7:49:b7:c7:98:52:e1:41:65:a5: 98:4f:36:52:0e:2d:64:6c:c8:68:52:b2:cd:35:7d: d3:8c:19:b0:d0:c1:21:6a:73:31:ba:e4:d9:09:bc: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:9D:6E:DF:FC:91:7A:31:61:58:E1:8A:D9:EB:E5:51:E4:E9:25 X509v3 Authority Key Identifier: keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5d:ec:e8:6a:2a:79:58:a5:34:0c:68:42:57:50:12:c7:ea: 43:d7:56:0e:4c:df:45:64:9f:d7:ef:9b:e0:bd:98:47:86:f7: 17:b9:9d:72:7a:c2:dd:6d:25:dd:bd:a9:59:e9:45:ca:16:c0: 49:0e:76:7a:d0:0e:7c:05:4a:aa:30:3a:7c:da:3f:d8:bc:8f: ed:f3:3f:f6:1a:b8:9e:d0:0f:e6:b0:4f:1e:ad:27:f5:1d:dd: 1a:6e:33:20:0d:06:4e:f5:4f:8c:0f:d1:88:18:79:98:87:b4: d1:d7:b9:86:d3:e9:88:0c:31:fc:49:87:0f:f6:46:1c:34:ef: 5c:0b:7d:92:4f:c8:ae:b0:09:6f:3c:e6:c6:43:5a:85:64:a1: ba:65:52:42:65:91:03:da:7e:f8:85:4d:d7:23:fb:60:35:52: 61:bc:5d:09:d4:6b:a6:ba:29:c2:81:b5:cb:2c:01:e1:bc:4b: 41:72:60:ae:79:43:21:80:b5:cc:b1:fb:d9:c2:c6:26:d4:55: 02:ee:ec:5c:cb:ed:f9:7f:c4:f3:d1:b3:56:90:0c:be:0f:06: 2e:20:52:d3:fa:18:9c:b7:25:7d:40:81:6f:5f:7e:e3:ec:a4: dd:9e:5c:74:00:31:b2:67:84:00:af:5e:1f:5c:ae:81:c0:91: 77:3c:03:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTY2NzExMC8GA1UEBRMoQTQyQkMxNTgwRjBCREU5MjExRkI4QzA4OTE0QUE1QzJD MDExMjE3QjAeFw0yNjA1MjEwOTEzNTFaFw0yNjA1MjgwOTEzNTFaMBgxFjAUBgNV BAMTDTZhMGVjY2NmLWE5NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmb+cSn9mDbQFySwObezilzksE4boMdyMm6OA+kx17uQON0Q0D+IeJEeKMQsi 48dGage658XJjl6u5ogv+yitPsUOpvqLb22IaRQ/86h9usQwp1N95IxomBzedAH6 7VOgwj53vtxYTwL0KwvJrfnVvPj8Pbk1YuCTSS8JJINQZ6qf/vdwe/kcR9zxko8m bzDRYEJ1hKIX/T4CAcRF9aH8Jp9qzbRwiBgqr+teFWL53FLlmE9uuBzOjSPrCHkW Nfd7Mi9lSC/VyrdpIDmEtplkRw8GbuH550m3x5hS4UFlpZhPNlIOLWRsyGhSss01 fdOMGbDQwSFqczG65NkJvP9hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAzqdbt/8 kXoxYVjhitnr5VHk6SUwHwYDVR0jBBgwFoAUpCvBWA8L3pIR+4wIkUqlwsARIXsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNjY3L0Q3RTk5MkNDNDI5 QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJUi00d0lrVXFsd3NBUklY cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcEN2QldBOEwzcElSLTR3SWtVcWx3c0FSSVhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx NjY3L0Q3RTk5MkNDNDI5QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJ Ui00d0lrVXFsd3NBUklYcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCTXezoaip5WKU0DGhCV1ASx+pD11YOTN9FZJ/X75vgvZhHhvcXuZ1yesLdbSXd valZ6UXKFsBJDnZ60A58BUqqMDp82j/YvI/t8z/2Grie0A/msE8erSf1Hd0abjMg DQZO9U+MD9GIGHmYh7TR17mG0+mIDDH8SYcP9kYcNO9cC32ST8iusAlvPObGQ1qF ZKG6ZVJCZZED2n74hU3XI/tgNVJhvF0J1GumuinCgbXLLAHhvEtBcmCueUMhgLXM sfvZwsYm1FUC7uxcy+35f8Tz0bNWkAy+DwYuIFLT+hictyV9QIFvX37j7KTdnlx0 ADGyZ4QAr14fXK6BwJF3PANM -----END CERTIFICATE-----Generated at Thu May 21 12:14:30 2026 by rpki-client