$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: JcFfGWjmT8+ljvutDVIC/pJyp4wBZnPKBdOP2cISOzU= Subject key identifier: 8E:6E:EB:50:6E:2E:43:8A:E0:5A:05:2B:D1:BC:A3:77:A7:15:7A:76 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0891 Signing time: Wed 20 May 2026 20:39:47 +0000 Manifest this update: Wed 20 May 2026 20:39:46 +0000 Manifest next update: Wed 27 May 2026 20:39:46 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: Q2cHWs+kFCTZAhloLgLQehynqZu+3POuUhEKeVVGULo=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: May 20 20:39:46 2026 GMT Not After : May 27 20:39:46 2026 GMT Subject: CN=6a0e1c12-18db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ac:11:00:15:78:a7:ae:7d:8e:a2:22:12:ee: 3a:79:d0:71:0a:f2:07:ba:83:db:41:4d:84:38:ed: 20:77:30:1f:40:04:c1:9a:12:a6:1a:95:d5:58:81: 7c:08:df:d7:e3:40:cf:90:32:ac:3c:55:4d:a1:a6: 9c:3e:b2:7a:cf:32:ce:63:2f:90:98:f1:c2:49:2c: 2d:e9:e9:ed:17:10:34:28:7d:4a:91:71:08:a7:2c: c6:10:d8:cc:a0:32:8c:3b:c0:e2:45:df:2a:1f:4d: 89:27:3b:f7:4b:45:32:c4:a2:78:df:0c:21:4c:aa: 37:3a:6a:91:0d:e2:35:29:6b:d3:5a:5c:2e:e1:bd: 06:af:f6:d0:e1:02:5e:e8:b9:41:e7:66:b6:be:3e: fd:ab:93:f9:94:c9:43:9e:0c:27:a7:ec:a2:0e:04: e7:93:f0:ba:89:f2:16:e4:f6:60:04:21:82:0c:2b: f1:95:01:f8:fc:91:01:5b:1b:5c:64:be:85:5e:c8: b6:2b:6d:a6:50:de:3a:5a:49:29:98:93:fc:e7:55: 4d:5a:62:5e:1c:de:38:f0:54:f1:5a:69:8d:3a:ee: f7:d3:9b:cf:8a:04:84:6e:6a:be:61:2f:44:b9:5f: 6a:c8:19:1c:95:90:1c:bc:8e:e5:be:55:fc:81:75: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:EB:50:6E:2E:43:8A:E0:5A:05:2B:D1:BC:A3:77:A7:15:7A:76 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1a:64:55:c9:1c:23:88:77:c1:13:92:48:b7:6b:ba:e6:06: c7:b8:f6:48:bc:d2:bb:a0:9d:5e:73:55:0c:1f:25:b7:46:3c: 07:7d:71:c2:4a:bd:96:3a:4c:b0:fd:e7:c6:80:23:cc:76:93: 5e:8e:ef:c4:2e:3a:26:01:97:f0:fe:d6:ba:31:6b:65:fb:df: 46:6d:b2:73:86:78:b3:2f:0d:c6:96:6c:d2:0e:3f:a5:33:a4: 3b:31:9a:5e:b6:54:5c:d6:1b:8f:d6:2e:4a:ba:ce:f5:b0:3b: eb:dc:6c:f2:1b:81:67:6d:09:19:5b:a6:ea:56:e0:74:cb:b3: ce:7b:48:f1:cd:33:89:c1:94:13:43:8e:a5:58:6d:4c:7e:05: e2:6a:c0:4a:c6:d5:bd:b9:e0:9b:9f:1f:b8:a0:92:2b:82:1a: 70:32:1e:bc:dd:bb:91:b6:83:6b:be:d3:b2:87:72:c2:61:aa: 2a:66:a5:d3:0b:be:f6:fb:4a:e7:30:a7:70:b2:44:32:ed:f8: cb:eb:b5:92:16:ee:b1:4b:e8:f6:0c:95:6c:ce:44:99:46:f8: 01:89:f4:c2:73:15:f5:89:51:65:6f:af:e8:2c:c7:fa:64:06: 31:a6:9b:89:70:4f:51:34:2f:72:d1:62:25:8a:22:42:5d:51: a9:6d:6e:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjYwNTIwMjAzOTQ2WhcNMjYwNTI3MjAzOTQ2WjAYMRYwFAYD VQQDEw02YTBlMWMxMi0xOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+awRABV4p659jqIiEu46edBxCvIHuoPbQU2EOO0gdzAfQATBmhKmGpXVWIF8 CN/X40DPkDKsPFVNoaacPrJ6zzLOYy+QmPHCSSwt6entFxA0KH1KkXEIpyzGENjM oDKMO8DiRd8qH02JJzv3S0UyxKJ43wwhTKo3OmqRDeI1KWvTWlwu4b0Gr/bQ4QJe 6LlB52a2vj79q5P5lMlDngwnp+yiDgTnk/C6ifIW5PZgBCGCDCvxlQH4/JEBWxtc ZL6FXsi2K22mUN46WkkpmJP851VNWmJeHN448FTxWmmNOu7305vPigSEbmq+YS9E uV9qyBkclZAcvI7lvlX8gXWTOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5u61Bu LkOK4FoFK9G8o3enFXp2MB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIRpkVckcI4h3wROSSLdruuYGx7j2SLzSu6CdXnNVDB8lt0Y8B31xwkq9ljpM sP3nxoAjzHaTXo7vxC46JgGX8P7WujFrZfvfRm2yc4Z4sy8NxpZs0g4/pTOkOzGa XrZUXNYbj9YuSrrO9bA769xs8huBZ20JGVum6lbgdMuzzntI8c0zicGUE0OOpVht TH4F4mrASsbVvbngm58fuKCSK4IacDIevN27kbaDa77TsodywmGqKmal0wu+9vtK 5zCncLJEMu34y+u1khbusUvo9gyVbM5EmUb4AYn0wnMV9YlRZW+v6CzH+mQGMaab iXBPUTQvctFiJYoiQl1RqW1uLw== -----END CERTIFICATE-----Generated at Thu May 21 10:20:18 2026 by rpki-client