$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft File: oQCGP_euS0zjitmLfMw3suVvSQk.mft (raw, json) Hash identifier: 9HzTViw+Jto6FOQrw4BigZGsDqrxsgZPB5CAa7/FTb8= Subject key identifier: 90:AC:93:75:58:80:53:50:A5:99:E1:75:87:BC:54:81:43:E7:CF:F9 Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09 Certificate issuer: /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft Manifest number: 2B Signing time: Tue 19 May 2026 08:41:19 +0000 Manifest this update: Tue 19 May 2026 08:41:18 +0000 Manifest next update: Tue 26 May 2026 08:41:18 +0000 Files and hashes: 1: oQCGP_euS0zjitmLfMw3suVvSQk.crl (hash: aT6ngHbY587zHo76Lv26Ig69Rva6LPeG+xyTQT8d03A=) 2: 68869A98493D11F1A62A19BFB5833773.roa (hash: G98XlGylGqD4IWLKPRkQ33JbE0HvP479vwIkVZry/iM=) 3: 9EE84698489A11F1AF98834FB4833773.roa (hash: HyVMau6tP4Gxadmevajmg0fDJUTUHCH9joRR5GgFIHM=) 4: D1960A28493D11F1A113D1E6B5833773.roa (hash: 3ZGbdg04NB+U1p4ArMrgy7RjHgfQTqsGhjizYBFQoP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909 Validity Not Before: May 19 08:41:18 2026 GMT Not After : May 26 08:41:18 2026 GMT Subject: CN=6a0c222e-d4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:d4:29:bc:a2:c5:0b:0e:3d:d0:2c:4e:75: 33:44:2f:0c:ce:5f:95:6e:2c:e3:34:b0:dc:1f:a2: 70:e1:f6:d0:e7:54:09:23:d4:31:62:5f:21:22:25: f4:fe:17:2b:f4:6d:17:76:14:a5:3a:9d:e2:99:6e: cd:e2:a8:55:97:92:a4:9e:b4:d0:ea:2e:35:28:43: 9f:72:58:6c:f3:24:e2:84:75:75:76:d2:84:e9:07: 4d:26:e7:f9:e1:fb:7a:6b:ad:db:76:0d:cf:c1:6f: 4c:c8:e9:e8:dd:21:6d:2d:a1:ae:4d:23:51:fe:f0: 61:8f:f4:26:e1:65:56:46:3d:a8:bc:c8:a5:6d:18: b3:61:c6:4a:c7:49:7f:5b:f3:d1:a1:52:73:bd:3c: ee:c8:90:99:9f:41:9e:a6:a3:d0:3c:0a:61:3f:20: a7:8c:9b:e0:a9:33:58:00:91:36:4c:65:37:93:b3: bd:0c:d2:77:ff:06:ef:45:3c:f8:bb:28:36:b2:c4: 3e:31:85:7c:2a:02:d2:a9:ad:7f:05:ff:cb:08:e6: 66:79:e3:6e:2b:52:b6:8d:ed:c8:b4:91:4b:ee:b2: 9b:5c:87:fd:c8:ac:0d:fc:07:87:14:bc:fc:f0:8f: af:5c:22:86:93:74:38:d3:fe:8b:0f:00:0b:63:d7: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:93:75:58:80:53:50:A5:99:E1:75:87:BC:54:81:43:E7:CF:F9 X509v3 Authority Key Identifier: keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b1:80:59:92:d6:a3:c1:1b:bc:07:e7:ec:38:49:8c:29:46: 89:91:23:cd:c9:8e:3c:02:1f:bb:e9:3d:33:27:7f:8b:be:96: 00:c4:d1:5e:74:5a:b8:4d:45:43:6b:0e:44:d3:51:f4:4d:cb: 9a:dd:5a:94:67:91:b7:ac:5b:80:19:c9:d8:ef:05:02:3a:01: 48:81:6f:6a:d8:2b:f8:d1:4a:ea:16:f4:52:53:63:e2:72:56: be:1a:d2:22:58:1b:bf:7e:43:e8:43:a9:bb:52:18:8f:59:2d: ca:19:78:b0:87:64:a5:28:03:05:4d:28:55:e9:79:b9:80:f9: a4:31:12:c5:02:bd:0d:c9:b1:d7:34:c3:0a:7d:be:6a:5a:40: a5:b6:7e:3f:fe:0d:79:de:5d:55:0d:c4:ff:c7:10:be:2b:ea: a6:17:4e:c7:1c:87:f6:c1:33:7b:40:df:32:12:d1:1e:03:fc: 8a:e3:38:e0:bb:37:ed:56:24:63:a2:d5:76:fa:1a:92:b1:b2: 1a:a1:6a:b0:00:5a:fc:02:e4:e2:4d:f7:c4:f6:b7:31:12:72: 93:a1:e7:7b:93:f4:c9:0d:08:23:24:be:9b:61:85:a2:1c:4c: 5e:73:6b:e4:f3:ac:db:11:22:47:7a:7e:8e:b7:a4:8d:6d:d8: c4:d2:a0:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Mjg0QTExMC8GA1UEBRMoQTEwMDg2M0ZGN0FFNEI0Q0UzOEFEOThCN0NDQzM3QjJF NTZGNDkwOTAeFw0yNjA1MTkwODQxMThaFw0yNjA1MjYwODQxMThaMBgxFjAUBgNV BAMTDTZhMGMyMjJlLWQ0ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTXtQpvKLFCw490CxOdTNELwzOX5VuLOM0sNwfonDh9tDnVAkj1DFiXyEiJfT+ Fyv0bRd2FKU6neKZbs3iqFWXkqSetNDqLjUoQ59yWGzzJOKEdXV20oTpB00m5/nh +3prrdt2Dc/Bb0zI6ejdIW0toa5NI1H+8GGP9CbhZVZGPai8yKVtGLNhxkrHSX9b 89GhUnO9PO7IkJmfQZ6mo9A8CmE/IKeMm+CpM1gAkTZMZTeTs70M0nf/Bu9FPPi7 KDayxD4xhXwqAtKprX8F/8sI5mZ5424rUraN7ci0kUvusptch/3IrA38B4cUvPzw j69cIoaTdDjT/osPAAtj1+MDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkKyTdViA U1ClmeF1h7xUgUPnz/kwHwYDVR0jBBgwFoAUoQCGP/euS0zjitmLfMw3suVvSQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyODRBLzg1NEMwRjVDMUQy QjExRjFCOTEyNjZCNTE1M0Q4QzY3L29RQ0dQX2V1UzB6aml0bUxmTXczc3VWdlNR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1FDR1BfZXVTMHpqaXRtTGZNdzNzdVZ2U1FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy ODRBLzg1NEMwRjVDMUQyQjExRjFCOTEyNjZCNTE1M0Q4QzY3L29RQ0dQX2V1UzB6 aml0bUxmTXczc3VWdlNRay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+sYBZktajwRu8B+fsOEmMKUaJkSPNyY48Ah+76T0zJ3+LvpYAxNFedFq4TUVD aw5E01H0Tcua3VqUZ5G3rFuAGcnY7wUCOgFIgW9q2Cv40UrqFvRSU2Picla+GtIi WBu/fkPoQ6m7UhiPWS3KGXiwh2SlKAMFTShV6Xm5gPmkMRLFAr0NybHXNMMKfb5q WkCltn4//g153l1VDcT/xxC+K+qmF07HHIf2wTN7QN8yEtEeA/yK4zjguzftViRj otV2+hqSsbIaoWqwAFr8AuTiTffE9rcxEnKToed7k/TJDQgjJL6bYYWiHExec2vk 86zbESJHen6Ot6SNbdjE0qAC -----END CERTIFICATE-----Generated at Thu May 21 09:36:56 2026 by rpki-client