$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: kx7TBNjVfhAztwRxOJXECKI0pk9W/tlLSKj4k5Pyomc= Subject key identifier: 8C:28:C5:90:8A:94:C9:CF:FD:90:39:45:13:24:CF:69:73:6F:A3:09 Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0EC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0EB7 Signing time: Wed 20 May 2026 17:42:17 +0000 Manifest this update: Wed 20 May 2026 17:42:16 +0000 Manifest next update: Wed 27 May 2026 17:42:16 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: w76KcRvi1vcpdT0iOKpZA9SKDS1tZGWAFSGHcBe+Z3o=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: o9Abyi/MKdfpzHukIV0+6UFoiozAzGZP2RU3WmijfSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3780 (0xec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: May 20 17:42:16 2026 GMT Not After : May 27 17:42:16 2026 GMT Subject: CN=6a0df278-78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:52:17:d6:d1:bc:d0:ff:9b:ea:bc:b9:8c: 5e:1c:b1:67:0f:23:d6:1d:2f:ee:c9:df:cd:3e:bf: af:37:7b:05:50:62:f2:e6:09:9e:36:59:e0:d0:e8: 13:34:72:fd:2a:92:a1:17:e7:c7:b3:1a:7e:da:3d: 87:df:5c:7d:01:59:0d:f9:c0:30:c6:0a:fc:eb:bd: a8:02:08:8c:55:88:2c:4f:09:d6:4e:5f:b8:49:95: 74:01:64:c0:fb:01:da:db:e4:52:7f:84:df:59:86: 7e:a4:7b:10:96:cb:e9:e1:3b:96:8f:59:7a:b2:0b: 3d:86:77:f5:81:e8:94:c0:ed:89:fe:67:74:2d:02: dc:e6:69:e3:71:bf:ce:a4:f8:e5:55:f9:32:bd:92: 34:ec:80:f6:53:48:f3:71:14:b9:f9:ec:86:05:9a: 7e:a4:c6:6a:03:6e:91:51:76:40:a1:66:8a:36:b7: cf:19:45:cd:6d:92:c5:81:96:a4:a1:ee:00:2c:de: 4a:1b:67:33:10:8f:c0:11:05:b7:20:66:b0:a2:61: bb:d4:ee:71:e7:da:34:74:4c:e2:ae:61:78:c2:d9: 78:36:48:2a:3c:34:01:eb:16:b7:d5:83:9b:85:92: 1d:bc:af:90:fd:89:ad:bb:e7:cf:05:4c:1a:bc:42: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:28:C5:90:8A:94:C9:CF:FD:90:39:45:13:24:CF:69:73:6F:A3:09 X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9d:16:5f:75:f8:c8:72:29:34:5b:1c:c3:b4:1a:b3:e8:54: 8e:32:dd:01:14:0a:68:7e:dd:0c:8b:96:e5:f1:53:6d:89:c3: a4:d5:51:14:9b:1d:81:19:2e:03:54:9e:68:93:a8:2e:78:07: 25:b7:38:58:86:16:84:40:e7:2e:a3:0d:91:a2:f5:21:99:b7: 0a:f7:2a:0a:13:6c:10:2a:ee:c8:35:0b:7e:49:22:c4:f0:00: a8:f6:c7:b8:34:e0:13:5a:2d:59:d1:2b:99:3b:b8:26:70:fa: f1:0c:7a:f4:7c:41:7c:ec:ac:e3:4d:ff:99:4a:50:38:57:3f: c9:c1:68:0a:83:e6:3e:6d:54:ba:73:ff:4a:39:7c:e1:6a:a2: ff:69:30:40:28:f2:a7:e5:e9:77:48:b2:d2:17:a6:c8:04:ad: 35:0f:db:fe:aa:d5:d5:5e:fc:aa:b2:74:a1:23:d4:36:8a:fe: 35:24:7a:7b:02:7d:89:74:b0:87:f0:31:af:f9:43:ab:e7:75: 15:de:51:77:77:64:19:49:aa:95:29:ac:45:cc:eb:fb:9b:ea: 74:03:aa:6d:9c:d1:9f:c7:6c:35:08:7c:ed:0b:65:b5:d3:56: 7a:3f:0d:96:a3:a7:a0:e9:aa:8e:1c:05:5f:85:af:55:d4:66: d7:68:74:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjYwNTIwMTc0MjE2WhcNMjYwNTI3MTc0MjE2WjAYMRYwFAYD VQQDEw02YTBkZjI3OC03OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv1SF9bRvND/m+q8uYxeHLFnDyPWHS/uyd/NPr+vN3sFUGLy5gmeNlng0OgT NHL9KpKhF+fHsxp+2j2H31x9AVkN+cAwxgr8672oAgiMVYgsTwnWTl+4SZV0AWTA +wHa2+RSf4TfWYZ+pHsQlsvp4TuWj1l6sgs9hnf1geiUwO2J/md0LQLc5mnjcb/O pPjlVfkyvZI07ID2U0jzcRS5+eyGBZp+pMZqA26RUXZAoWaKNrfPGUXNbZLFgZak oe4ALN5KG2czEI/AEQW3IGawomG71O5x59o0dEzirmF4wtl4NkgqPDQB6xa31YOb hZIdvK+Q/Ymtu+fPBUwavEIV3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwoxZCK lMnP/ZA5RRMkz2lzb6MJMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ50WX3X4yHIpNFscw7Qas+hUjjLdARQKaH7dDIuW5fFTbYnDpNVRFJsdgRku A1SeaJOoLngHJbc4WIYWhEDnLqMNkaL1IZm3CvcqChNsECruyDULfkkixPAAqPbH uDTgE1otWdErmTu4JnD68Qx69HxBfOys403/mUpQOFc/ycFoCoPmPm1UunP/Sjl8 4Wqi/2kwQCjyp+Xpd0iy0hemyAStNQ/b/qrV1V78qrJ0oSPUNor+NSR6ewJ9iXSw h/Axr/lDq+d1Fd5Rd3dkGUmqlSmsRczr+5vqdAOqbZzRn8dsNQh87QtltdNWej8N lqOnoOmqjhwFX4WvVdRm12h0pg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:04 2026 by rpki-client