$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: ps17YR0J9FTTZSsvd+9KnPQeSHcVm3HAaqeC/O2Hpys= Subject key identifier: A0:B2:3C:31:E9:CB:FD:BF:02:13:4A:9F:B2:F6:44:99:C8:05:8B:B3 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 049C Signing time: Thu 21 May 2026 00:00:42 +0000 Manifest this update: Thu 21 May 2026 00:00:41 +0000 Manifest next update: Thu 28 May 2026 00:00:41 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: Y3JVZoQgezw8QpIXsSaT53AnoKQVe24hSGIVoOYV/wI=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: N+WDRVK1GCgpC7/SSOzfsvjQlOUQfUPMZGxcGp5tWsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: May 21 00:00:41 2026 GMT Not After : May 28 00:00:41 2026 GMT Subject: CN=6a0e4b29-81c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:f9:2a:ee:c2:79:18:9e:0b:e6:54:b4:99: 48:32:f3:6f:3c:38:23:85:0d:88:1e:76:3f:85:f6: 5a:47:31:19:2e:56:49:59:76:fd:6b:07:f7:c8:2f: 7e:49:59:ae:92:93:89:25:a2:99:5e:36:a7:e8:e7: 61:37:0b:3e:1f:96:3e:de:a3:d6:ce:33:27:ad:8e: 7e:f7:fd:43:0a:ed:57:53:9d:2f:7a:60:fe:b5:12: ad:04:8e:60:09:b4:83:78:3a:06:d5:ee:3b:0a:9c: 90:1f:71:e9:e3:e4:21:b5:6c:cf:7f:7b:87:b0:32: fc:cc:65:6f:ca:1e:df:e0:14:ae:64:03:9c:4b:e8: ed:fd:e4:a6:1f:58:f7:01:67:a0:d3:79:ce:5a:27: 42:b0:6b:15:3d:5a:40:65:41:6f:e7:00:60:77:3f: 14:40:60:fb:04:c3:31:c8:24:b3:9e:db:e5:15:3d: ef:a9:a5:97:c8:ab:41:df:34:be:75:43:31:92:00: 48:5e:5d:f5:c3:df:12:3a:d8:7a:6e:a9:b3:66:13: 10:75:e6:5f:b5:16:cc:0a:b8:70:36:c1:43:f8:c1: c1:bf:cf:b4:a7:75:f9:54:9e:51:fd:a9:57:e2:9a: b5:94:da:fe:3c:dc:f5:fb:dd:5d:d0:96:ca:c1:dc: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:3C:31:E9:CB:FD:BF:02:13:4A:9F:B2:F6:44:99:C8:05:8B:B3 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:50:b7:dc:58:69:82:f9:35:99:cc:93:f5:96:13:d5:5e:1d: 3e:84:2d:4e:78:b7:50:c6:d1:fb:21:1f:d8:80:18:84:35:2a: 6a:b6:38:81:3e:f3:0f:88:19:4a:07:de:8c:f2:f9:3e:b4:56: 55:f4:d1:21:7b:d5:62:75:a5:0b:e7:85:4b:4d:03:7e:d4:47: a3:5a:b1:7b:20:0c:a0:6c:15:98:e3:6c:ee:85:cf:7c:84:99: 04:e2:9a:3e:bf:c2:0a:7e:aa:23:6f:f1:43:7d:91:6e:17:63: c3:98:9c:b6:e9:4f:72:4a:76:6f:d0:de:b7:6b:b2:6b:3d:bd: e2:eb:d3:c9:97:53:b0:4c:f6:1e:ea:06:7e:8f:9b:d4:b3:e8: fc:b5:85:b0:a6:c7:71:28:b9:15:cf:57:24:6e:26:a1:0f:6b: 66:e7:6e:e9:08:c4:f6:b7:ef:1e:4f:e1:a6:98:1e:5d:3f:cb: ab:8e:63:0c:fd:74:83:63:b6:18:a4:32:00:68:3a:22:39:48: ae:8d:8f:75:2a:a8:67:bc:5f:c7:2c:54:5c:af:1d:d0:4d:7a: 0d:f3:43:3a:20:74:65:d3:93:d1:a9:dd:33:db:f5:8d:0d:3a: 28:01:7a:71:a6:97:52:a0:bc:59:0a:d0:9a:6a:17:fc:48:ca: 3e:12:e1:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjYwNTIxMDAwMDQxWhcNMjYwNTI4MDAwMDQxWjAYMRYwFAYD VQQDEw02YTBlNGIyOS04MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKX5Ku7CeRieC+ZUtJlIMvNvPDgjhQ2IHnY/hfZaRzEZLlZJWXb9awf3yC9+ SVmukpOJJaKZXjan6OdhNws+H5Y+3qPWzjMnrY5+9/1DCu1XU50vemD+tRKtBI5g CbSDeDoG1e47CpyQH3Hp4+QhtWzPf3uHsDL8zGVvyh7f4BSuZAOcS+jt/eSmH1j3 AWeg03nOWidCsGsVPVpAZUFv5wBgdz8UQGD7BMMxyCSzntvlFT3vqaWXyKtB3zS+ dUMxkgBIXl31w98SOth6bqmzZhMQdeZftRbMCrhwNsFD+MHBv8+0p3X5VJ5R/alX 4pq1lNr+PNz1+91d0JbKwdzRmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCyPDHp y/2/AhNKn7L2RJnIBYuzMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1C33Fhpgvk1mcyT9ZYT1V4dPoQtTni3UMbR+yEf2IAYhDUqarY4gT7zD4gZ SgfejPL5PrRWVfTRIXvVYnWlC+eFS00DftRHo1qxeyAMoGwVmONs7oXPfISZBOKa Pr/CCn6qI2/xQ32Rbhdjw5ictulPckp2b9Det2uyaz294uvTyZdTsEz2HuoGfo+b 1LPo/LWFsKbHcSi5Fc9XJG4moQ9rZudu6QjE9rfvHk/hppgeXT/Lq45jDP10g2O2 GKQyAGg6IjlIro2PdSqoZ7xfxyxUXK8d0E16DfNDOiB0ZdOT0andM9v1jQ06KAF6 caaXUqC8WQrQmmoX/EjKPhLhwQ== -----END CERTIFICATE-----Generated at Thu May 21 10:14:54 2026 by rpki-client