$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: c9KpSnuswaF8R/NNM1zE/k9u7AIMnXUD0nOGM5E0xaY= Subject key identifier: 82:0C:3C:5B:E8:E3:A1:5C:44:54:FC:08:D5:21:A7:DE:EB:BA:F9:48 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0848 Signing time: Wed 20 May 2026 20:58:31 +0000 Manifest this update: Wed 20 May 2026 20:58:30 +0000 Manifest next update: Wed 27 May 2026 20:58:30 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: 77RKAmIKOkDcFi9y9NzSyDrQnhi1V9Weu4j4VnJ1vYY=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) 3: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: May 20 20:58:30 2026 GMT Not After : May 27 20:58:30 2026 GMT Subject: CN=6a0e2077-a753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:b1:b4:7f:85:b3:42:6d:95:12:51:db:64: b2:f8:d5:af:56:0b:aa:7a:6a:25:42:d9:d2:a5:52: 04:95:34:36:65:f4:cc:7d:fd:43:fd:d0:56:9a:19: d1:ac:81:f3:60:a9:c7:bc:29:b3:a9:6b:b5:98:17: 0f:74:2c:20:2f:5d:35:0a:93:82:62:7e:6c:ca:b3: a1:e6:3f:a4:da:39:9d:0a:24:27:19:d2:db:30:66: 6a:e8:64:fb:c0:c7:0b:91:9a:07:e3:3e:0b:ad:39: 89:23:39:e6:2d:8c:6a:2a:e6:1c:c0:cc:7c:cc:39: ab:0b:c9:8c:b2:26:67:0f:42:e7:47:31:1d:89:4e: a0:45:74:1b:00:14:f5:0b:1f:84:1b:b8:b5:eb:a1: 13:31:0d:a2:f0:7b:e3:56:a9:c6:04:77:f7:22:ec: 5b:e9:b9:c8:62:c8:8c:f0:b1:a4:7f:8e:28:f2:4d: b6:c2:0f:ef:d5:0f:e6:92:30:f7:f7:43:bb:8c:65: 07:fe:b7:7d:6f:81:e1:e8:02:aa:b8:ba:06:58:a3: 9b:db:1b:d9:eb:ff:5d:22:c1:db:a3:ec:c9:e5:5a: 78:c2:8d:36:da:83:4c:c9:a5:6c:47:a5:b6:6c:18: 9e:92:09:c0:08:1e:8e:91:d6:49:5c:86:3e:2e:f3: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:3C:5B:E8:E3:A1:5C:44:54:FC:08:D5:21:A7:DE:EB:BA:F9:48 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ea:1c:81:50:d1:4b:12:b3:0b:de:8a:2b:55:57:86:2d:f1: 9e:89:0d:13:9a:74:08:07:88:29:ed:1a:a5:9e:5f:87:93:07: 5b:46:e4:a1:f0:49:36:27:8d:47:6b:1e:ff:6a:28:d7:c2:6e: 2c:c4:c6:7f:9f:01:bd:9b:41:6a:6b:36:69:c5:fd:4f:f0:4b: 47:44:34:16:72:ba:f8:16:b5:5e:77:c8:b5:3c:c8:b6:64:08: 2d:4a:c4:ee:68:7c:49:5c:78:e7:d5:00:a1:97:8a:1c:85:59: 5b:9c:3b:8a:25:c0:a6:ac:dc:21:a9:0e:e5:55:12:98:85:f4: 22:d7:f8:7e:16:76:33:0a:fa:1f:5b:51:f5:a2:7a:d1:cf:ff: 7a:36:8e:24:75:88:98:d9:1f:84:db:70:2e:57:48:b7:35:d7: a0:c9:1a:ee:ea:da:53:ff:06:a1:af:d8:38:31:28:c1:ae:34: 11:b0:c8:ce:c8:ca:00:81:01:d5:0f:2a:1b:61:0a:d6:16:9e: 37:94:ee:77:08:c8:88:37:41:0b:d4:bf:67:5b:03:b5:a7:0e: ed:43:57:ac:7c:27:a4:e1:ed:ac:ff:6b:e0:b0:34:58:9c:1f: ca:b5:22:f6:ba:a7:1d:2b:cb:be:d1:fa:08:1d:66:83:fc:70: ae:e2:59:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwNTIwMjA1ODMwWhcNMjYwNTI3MjA1ODMwWjAYMRYwFAYD VQQDEw02YTBlMjA3Ny1hNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8SxtH+Fs0JtlRJR22Sy+NWvVguqemolQtnSpVIElTQ2ZfTMff1D/dBWmhnR rIHzYKnHvCmzqWu1mBcPdCwgL101CpOCYn5syrOh5j+k2jmdCiQnGdLbMGZq6GT7 wMcLkZoH4z4LrTmJIznmLYxqKuYcwMx8zDmrC8mMsiZnD0LnRzEdiU6gRXQbABT1 Cx+EG7i166ETMQ2i8HvjVqnGBHf3Iuxb6bnIYsiM8LGkf44o8k22wg/v1Q/mkjD3 90O7jGUH/rd9b4Hh6AKquLoGWKOb2xvZ6/9dIsHbo+zJ5Vp4wo022oNMyaVsR6W2 bBiekgnACB6OkdZJXIY+LvNiOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIMPFvo 46FcRFT8CNUhp97ruvlIMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuuocgVDRSxKzC96KK1VXhi3xnokNE5p0CAeIKe0apZ5fh5MHW0bkofBJNieN R2se/2oo18JuLMTGf58BvZtBams2acX9T/BLR0Q0FnK6+Ba1XnfItTzItmQILUrE 7mh8SVx459UAoZeKHIVZW5w7iiXApqzcIakO5VUSmIX0Itf4fhZ2Mwr6H1tR9aJ6 0c//ejaOJHWImNkfhNtwLldItzXXoMka7uraU/8Goa/YODEowa40EbDIzsjKAIEB 1Q8qG2EK1haeN5TudwjIiDdBC9S/Z1sDtacO7UNXrHwnpOHtrP9r4LA0WJwfyrUi 9rqnHSvLvtH6CB1mg/xwruJZTw== -----END CERTIFICATE-----Generated at Thu May 21 10:19:31 2026 by rpki-client