$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: djtAoXitDNGUMbZy0Nho8hokWSad/9VL6vuye393Nc8= Subject key identifier: CF:B1:94:59:0D:BD:8B:99:6E:D3:5D:0E:41:97:8B:14:11:59:18:42 Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: 01A7 Signing time: Thu 21 May 2026 04:10:29 +0000 Manifest this update: Thu 21 May 2026 04:10:29 +0000 Manifest next update: Thu 28 May 2026 04:10:29 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: L7nWY8eAY4Jvqc6T51JcSNFSCxMpIWSpw6BhiEx2v7I=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: /7z7IB560Zyid1gAT+cg8GKzeif1WiKdRUALH0UbtFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: May 21 04:10:29 2026 GMT Not After : May 28 04:10:29 2026 GMT Subject: CN=6a0e85b5-6564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:97:8b:6c:96:c0:87:5f:48:04:05:31:1c: 8b:b3:78:c9:da:87:3a:3e:12:80:4f:2e:56:ff:9b: 16:2b:f0:db:2d:f5:16:69:f3:af:58:00:33:c3:45: 01:49:ea:19:91:9d:c2:7d:86:36:55:47:2c:38:8b: da:28:aa:2d:1c:93:9e:2e:63:62:c7:6a:3f:7f:8b: c4:b0:f7:30:71:d5:54:f2:1c:37:04:15:2e:1a:3f: 5a:d9:d1:f6:e5:61:9b:fa:e3:5c:28:07:b4:0a:23: 4e:a6:91:04:0a:bb:8b:48:b8:77:42:08:fb:10:78: 7e:3e:c0:de:63:90:38:34:8e:ae:65:90:0c:cf:8f: 6d:38:95:3e:59:ac:d8:80:5a:52:31:fc:a1:3f:4a: 57:c4:fe:f1:d5:67:09:58:5f:29:92:e5:5c:2a:64: ba:60:6a:94:51:c8:82:9d:ed:ef:52:d1:0c:cc:7e: 5e:44:e0:24:57:ee:02:4e:27:8b:45:e9:43:dc:50: 59:c8:d6:f2:b0:74:14:66:14:bd:21:a5:e1:d1:00: 84:1b:23:75:3b:9c:ea:a9:66:07:42:2b:9a:70:ee: aa:10:99:79:a4:69:38:4e:86:57:5f:4b:54:61:82: 26:9f:ee:e3:86:8c:71:de:50:e5:08:f3:8e:70:9a: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:94:59:0D:BD:8B:99:6E:D3:5D:0E:41:97:8B:14:11:59:18:42 X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a5:f8:30:d3:9e:02:a0:d6:4f:fb:1f:d8:25:98:aa:58:46: 13:d1:73:3c:8e:10:6c:d3:90:90:4c:c2:75:8b:10:77:db:16: 3b:5a:e6:95:9d:61:02:25:71:02:44:33:c8:4b:38:86:3d:2e: 9d:3f:0c:41:06:4c:01:31:f7:7c:cf:64:3e:fb:56:fd:ea:3f: 51:91:1f:75:be:7e:2b:6c:92:bc:84:aa:36:f9:fa:76:50:4b: bc:7f:78:37:ef:6c:1f:09:37:da:4f:39:ed:5a:c7:b0:cc:a7: b7:be:18:4d:c7:21:c6:09:d9:3d:00:a0:dd:8f:08:56:1c:35: a8:9e:c2:39:fb:43:db:9b:07:b6:af:1b:b1:ef:42:67:5a:ed: 18:3f:86:af:53:54:78:37:fd:0d:89:c0:27:6c:03:73:f9:6b: dc:e7:bb:26:e2:57:cb:99:4d:3b:7d:93:56:ba:8b:70:4f:6b: cb:00:68:c3:d2:76:d8:47:12:1b:20:b7:e3:a3:27:44:68:2c: fd:75:d2:ea:e9:a8:57:25:9e:c1:8e:12:ad:68:83:c9:3e:a2: ad:0b:9a:c1:9b:d6:19:fd:d8:9f:e0:0e:56:e9:35:a7:60:0c: a2:bf:f0:2a:ab:82:40:1e:8a:7e:13:fc:cf:2d:d1:32:c7:07: 1f:b7:a8:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjYwNTIxMDQxMDI5WhcNMjYwNTI4MDQxMDI5WjAYMRYwFAYD VQQDEw02YTBlODViNS02NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4yXi2yWwIdfSAQFMRyLs3jJ2oc6PhKATy5W/5sWK/DbLfUWafOvWAAzw0UB SeoZkZ3CfYY2VUcsOIvaKKotHJOeLmNix2o/f4vEsPcwcdVU8hw3BBUuGj9a2dH2 5WGb+uNcKAe0CiNOppEECruLSLh3Qgj7EHh+PsDeY5A4NI6uZZAMz49tOJU+WazY gFpSMfyhP0pXxP7x1WcJWF8pkuVcKmS6YGqUUciCne3vUtEMzH5eROAkV+4CTieL RelD3FBZyNbysHQUZhS9IaXh0QCEGyN1O5zqqWYHQiuacO6qEJl5pGk4ToZXX0tU YYImn+7jhoxx3lDlCPOOcJpFmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+xlFkN vYuZbtNdDkGXixQRWRhCMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKX4MNOeAqDWT/sf2CWYqlhGE9FzPI4QbNOQkEzCdYsQd9sWO1rmlZ1hAiVx AkQzyEs4hj0unT8MQQZMATH3fM9kPvtW/eo/UZEfdb5+K2ySvISqNvn6dlBLvH94 N+9sHwk32k857VrHsMynt74YTcchxgnZPQCg3Y8IVhw1qJ7COftD25sHtq8bse9C Z1rtGD+Gr1NUeDf9DYnAJ2wDc/lr3Oe7JuJXy5lNO32TVrqLcE9rywBow9J22EcS GyC346MnRGgs/XXS6umoVyWewY4SrWiDyT6irQuawZvWGf3Yn+AOVuk1p2AMor/w KquCQB6KfhP8zy3RMscHH7eosw== -----END CERTIFICATE-----Generated at Thu May 21 10:15:55 2026 by rpki-client