$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: aNc3guha4TlYHG6Sioysl2fQFuaI3ZgS+HHwFNNKRhM= Subject key identifier: C8:D9:34:C8:7D:9C:AF:75:6C:63:7B:E3:25:E9:23:5E:5C:1C:EA:D3 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1F75 Signing time: Wed 20 May 2026 16:00:20 +0000 Manifest this update: Wed 20 May 2026 16:00:19 +0000 Manifest next update: Wed 27 May 2026 16:00:19 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: pZwEhNvEC+O4+AjEr6nGFP/3R65icPEGujCzvjaOuy8=) 2: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=) 3: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=) 4: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=) 5: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=) 6: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8111 (0x1faf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: May 20 16:00:19 2026 GMT Not After : May 27 16:00:19 2026 GMT Subject: CN=6a0dda94-e9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:b8:b5:22:b5:26:81:86:cf:c3:a9:3b:5c: 18:3c:78:3e:ba:52:6e:8c:bd:c6:c9:c3:e0:2f:8d: 7f:bd:e5:d6:1a:27:b0:fe:83:d2:44:6a:1f:e9:1b: 0f:c7:d7:f1:62:a6:16:54:b7:17:68:c6:2c:b6:d9: bd:c5:78:ce:1b:06:a6:eb:28:e4:a3:e4:77:df:59: d9:2e:ba:02:85:0a:00:19:5a:a9:1c:7e:a6:86:46: 88:ab:9e:5c:a8:9e:d2:d1:9a:95:86:58:eb:97:f4: ca:3a:b8:66:53:61:90:42:b1:bb:ff:21:13:1b:c9: 80:63:69:25:6c:a4:8f:ad:ad:aa:ca:f5:68:0d:cc: 38:69:58:06:8a:3f:fd:87:54:11:97:38:5e:cf:78: aa:82:cc:99:cf:80:9e:ae:69:6a:77:dd:27:52:96: 1a:d5:fe:f5:80:ba:82:8e:d5:02:e8:bd:5b:7e:07: f2:c2:c6:46:bc:2f:ea:bc:4a:5c:d7:ad:04:bb:10: b5:2a:ed:90:b3:7a:4d:8f:50:ab:12:ed:f2:a4:d5: fb:c0:f8:86:b9:5c:aa:98:94:9b:45:64:0e:36:89: 5a:2c:94:f5:84:6b:c5:46:d3:cd:92:d3:4b:08:7b: 3c:dd:6f:b0:42:90:68:b6:7a:1b:cf:d1:fa:14:3b: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D9:34:C8:7D:9C:AF:75:6C:63:7B:E3:25:E9:23:5E:5C:1C:EA:D3 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cf:37:c1:cb:da:73:e2:f7:73:70:d3:ac:ef:8e:cf:9d:70: 6d:6a:58:10:9c:b1:03:57:41:42:86:87:46:76:8b:30:00:94: 95:f4:d0:37:0b:6a:c6:93:3c:2a:f1:6c:42:54:56:1c:61:a5: 87:04:58:d7:a1:f5:76:61:f8:d3:c1:77:b6:7d:6a:4c:9e:9a: b0:19:0c:12:cf:a6:34:3c:40:34:b1:6a:6d:ee:98:fe:b1:79: cf:03:65:84:62:cc:a6:a0:6a:3c:8a:30:f6:46:32:d4:d6:b6: fd:54:01:e8:5d:52:a8:e8:65:74:f2:87:e3:99:ab:94:d7:f4: 27:b7:82:26:7b:a8:66:e7:08:db:44:a0:af:49:37:a8:bc:08: 65:80:e0:dc:8e:95:49:fe:53:16:53:97:9d:d9:b1:86:9f:01: f1:d2:bf:4f:af:dc:4b:b9:e0:1a:12:59:11:ce:8b:70:d2:c2: 2c:34:5d:4a:07:e1:02:37:61:94:0e:e5:be:45:ae:9e:36:ab: 82:21:f5:3e:c5:77:be:22:35:a2:ce:dd:1a:5b:26:0a:b7:b4: cd:91:48:1b:e5:13:38:5a:e9:49:64:b1:a3:fd:7b:2f:8f:b6: 0c:86:b9:ab:5a:17:b0:c2:f6:57:8a:30:b4:e3:17:5a:fa:c2: 97:b4:df:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjYwNTIwMTYwMDE5WhcNMjYwNTI3MTYwMDE5WjAYMRYwFAYD VQQDEw02YTBkZGE5NC1lOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O24tSK1JoGGz8OpO1wYPHg+ulJujL3GycPgL41/veXWGiew/oPSRGof6RsP x9fxYqYWVLcXaMYsttm9xXjOGwam6yjko+R331nZLroChQoAGVqpHH6mhkaIq55c qJ7S0ZqVhljrl/TKOrhmU2GQQrG7/yETG8mAY2klbKSPra2qyvVoDcw4aVgGij/9 h1QRlzhez3iqgsyZz4Cermlqd90nUpYa1f71gLqCjtUC6L1bfgfywsZGvC/qvEpc 160EuxC1Ku2Qs3pNj1CrEu3ypNX7wPiGuVyqmJSbRWQONolaLJT1hGvFRtPNktNL CHs83W+wQpBotnobz9H6FDtTcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjZNMh9 nK91bGN74yXpI15cHOrTMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEs83wcvac+L3c3DTrO+Oz51wbWpYEJyxA1dBQoaHRnaLMACUlfTQNwtqxpM8 KvFsQlRWHGGlhwRY16H1dmH408F3tn1qTJ6asBkMEs+mNDxANLFqbe6Y/rF5zwNl hGLMpqBqPIow9kYy1Na2/VQB6F1SqOhldPKH45mrlNf0J7eCJnuoZucI20Sgr0k3 qLwIZYDg3I6VSf5TFlOXndmxhp8B8dK/T6/cS7ngGhJZEc6LcNLCLDRdSgfhAjdh lA7lvkWunjargiH1PsV3viI1os7dGlsmCre0zZFIG+UTOFrpSWSxo/17L4+2DIa5 q1oXsML2V4owtOMXWvrCl7Tfpw== -----END CERTIFICATE-----Generated at Thu May 21 10:29:03 2026 by rpki-client