$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft File: f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json) Hash identifier: 3qTHgutEluOsjx2B4Ny4cQkdLnRc+xoKJ3j5LJCWr88= Subject key identifier: C0:83:67:02:10:20:F8:06:F5:79:43:50:14:07:53:70:C6:B8:85:59 Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft Manifest number: 0C87 Signing time: Wed 20 May 2026 18:36:25 +0000 Manifest this update: Wed 20 May 2026 18:36:24 +0000 Manifest next update: Wed 27 May 2026 18:36:24 +0000 Files and hashes: 1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: kl7v+KCYv7k9DbeWJJYCQFsd1jl1Q7ZxAK7sSSHRGo0=) 2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: ca3rCU+xITln6FgR3wUziPrzx8A5i4ANvYXJUthQ0/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: May 20 18:36:24 2026 GMT Not After : May 27 18:36:24 2026 GMT Subject: CN=6a0dff29-890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:86:30:43:e2:4f:94:50:b9:21:f3:02:2b: f9:fa:95:57:bf:2d:7d:aa:06:13:87:dd:d8:80:04: 03:27:14:6d:50:4d:41:44:63:6b:6b:3c:33:03:17: b1:dd:0b:c2:d4:f2:9a:32:0d:ee:fb:73:4e:9c:b2: 2c:bd:65:c0:0b:19:bb:23:9a:41:d7:92:f5:e5:76: 0a:04:cc:75:03:6c:d9:b0:9d:08:59:2b:06:54:4a: 3a:a9:14:c5:eb:84:1a:d6:b5:01:de:8e:9d:66:54: 23:df:19:74:2d:14:95:84:c5:dc:d9:bc:3f:8f:ba: 32:1d:7d:08:53:ee:ef:47:77:ab:7a:8c:d0:3c:5c: 4b:23:24:a3:da:34:c3:34:47:16:47:72:54:0c:ac: 0c:ef:0a:c7:34:72:5b:4b:8b:f6:6f:b6:32:70:de: db:6d:ec:44:35:72:7e:f6:94:ac:6f:26:8c:96:6a: 0b:90:4e:e4:84:31:1b:4a:20:fa:cc:0b:02:64:6f: d3:82:3a:75:7f:9a:19:90:dd:4c:a1:85:7a:9c:ff: a8:8b:df:6f:cf:d8:c6:5c:46:fb:a6:f6:e7:38:3d: 03:48:bd:f3:5f:25:bf:76:e4:98:e2:87:06:67:7c: 23:b7:e9:54:45:41:45:45:f4:94:e4:2b:65:43:39: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:67:02:10:20:F8:06:F5:79:43:50:14:07:53:70:C6:B8:85:59 X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:5a:95:72:43:ee:4f:a5:e3:d2:77:f8:46:7f:29:15:7b: 17:2a:ee:70:46:18:29:7c:89:c2:0c:9f:f4:a7:46:ce:94:60: 64:9d:db:ed:23:1a:24:c0:54:cd:57:b6:33:8e:db:6b:c0:23: fc:52:f9:fd:74:38:9a:b1:b1:fc:7d:4b:ce:bd:c3:e1:d7:d1: 93:cc:71:5e:ba:30:8f:63:dd:a7:a2:ae:30:44:1e:52:37:33: 47:6f:9d:41:01:c8:c1:e7:1e:40:3d:75:b3:bd:9d:f9:a6:4e: ec:33:90:21:ad:7b:1d:b4:7e:2a:d8:d0:40:73:e2:9e:d8:89: 63:98:24:03:24:9f:68:5d:c2:1d:27:ca:05:c7:86:39:e1:80: a6:9b:be:ad:b4:81:bb:d4:92:9a:23:e3:9a:0a:65:cc:93:bc: e9:62:62:ac:ff:20:4c:09:4d:fa:c9:17:da:49:81:ba:1b:a4: 1a:d9:2b:44:78:fb:e5:b3:ce:cf:2c:4a:80:3d:c3:74:7c:a8: b4:c7:02:b0:fe:3a:84:6b:32:76:32:fe:ef:3f:7f:8a:04:e3: 67:be:fe:0e:b1:af:24:d0:9e:e6:06:ac:6e:60:d1:bb:d3:10: af:f3:00:e7:53:5f:73:01:82:37:dd:5d:65:a3:ac:7a:0c:42: e7:5a:0c:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjYwNTIwMTgzNjI0WhcNMjYwNTI3MTgzNjI0WjAYMRYwFAYD VQQDEw02YTBkZmYyOS04OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mKGMEPiT5RQuSHzAiv5+pVXvy19qgYTh93YgAQDJxRtUE1BRGNrazwzAxex 3QvC1PKaMg3u+3NOnLIsvWXACxm7I5pB15L15XYKBMx1A2zZsJ0IWSsGVEo6qRTF 64Qa1rUB3o6dZlQj3xl0LRSVhMXc2bw/j7oyHX0IU+7vR3ereozQPFxLIySj2jTD NEcWR3JUDKwM7wrHNHJbS4v2b7YycN7bbexENXJ+9pSsbyaMlmoLkE7khDEbSiD6 zAsCZG/Tgjp1f5oZkN1MoYV6nP+oi99vz9jGXEb7pvbnOD0DSL3zXyW/duSY4ocG Z3wjt+lURUFFRfSU5CtlQzlzQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCDZwIQ IPgG9XlDUBQHU3DGuIVZMB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE UGR2ZjRvVl9YVEdUVkZGN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATqdalXJD7k+l49J3+EZ/KRV7FyrucEYYKXyJwgyf9KdGzpRgZJ3b7SMaJMBU zVe2M47ba8Aj/FL5/XQ4mrGx/H1Lzr3D4dfRk8xxXrowj2Pdp6KuMEQeUjczR2+d QQHIweceQD11s72d+aZO7DOQIa17HbR+KtjQQHPintiJY5gkAySfaF3CHSfKBceG OeGAppu+rbSBu9SSmiPjmgplzJO86WJirP8gTAlN+skX2kmBuhukGtkrRHj75bPO zyxKgD3DdHyotMcCsP46hGsydjL+7z9/igTjZ77+DrGvJNCe5gasbmDRu9MQr/MA 51NfcwGCN91dZaOsegxC51oMwA== -----END CERTIFICATE-----Generated at Thu May 21 10:54:43 2026 by rpki-client