$ rpki-client -vvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft File: -mtidXvK1FesoHClHEgItLfJM3A.mft (raw, json) Hash identifier: KErgv+Fe/v1NL7E5uQRsm4Gi7gNXQrcAcwSq8QgRhNU= Subject key identifier: 56:B7:F3:52:60:C8:FD:ED:AB:44:08:1A:E6:4C:D3:64:89:7B:42:05 Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70 Certificate issuer: /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft Manifest number: 29 Signing time: Tue 19 May 2026 08:38:55 +0000 Manifest this update: Tue 19 May 2026 08:38:55 +0000 Manifest next update: Tue 26 May 2026 08:38:55 +0000 Files and hashes: 1: -mtidXvK1FesoHClHEgItLfJM3A.crl (hash: m4jTxaTu/AlQ+AQ/V7j6CeQQlp9hgj8lOmYCbKWa7B8=) 2: 824F8AD0187711F1AF6111A7363D8C67.roa (hash: /rBFDP4ucRayd+6pogF2vcfXHdX6dh/y/lIPddm4CdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370 Validity Not Before: May 19 08:38:55 2026 GMT Not After : May 26 08:38:55 2026 GMT Subject: CN=6a0c219f-751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:4f:63:98:6d:ad:62:18:d0:60:3c:a9:dc: 7d:de:99:a4:d0:52:e6:66:5d:1a:92:9f:05:45:69: f3:cc:f0:c2:d7:ad:62:5e:10:18:85:5a:42:95:56: e9:1f:ef:d0:76:ee:64:ef:15:0f:f9:a0:57:73:73: ad:90:27:68:16:e0:56:4d:df:14:a2:64:cc:5c:7d: 3c:7d:16:45:e1:e0:a3:71:99:ae:8b:06:a3:a3:72: 2f:99:94:a4:77:68:bf:f7:41:a1:a1:93:08:3b:0c: e9:de:9f:e3:49:7b:12:26:8b:c2:d8:5d:d0:03:a2: f7:ba:5d:b2:ca:cb:da:11:e9:d7:c6:75:ea:09:ab: c1:8d:0b:3c:43:29:5b:a8:62:c3:66:72:a8:18:09: a4:28:25:1f:04:5a:6f:29:51:f9:c6:57:83:af:48: 6f:24:77:e4:58:49:30:6c:4e:ef:5a:7f:69:2a:ee: f6:58:2c:f9:01:22:bb:4a:5e:16:f5:8a:34:7a:16: bf:70:d6:3f:20:00:0d:8b:25:68:5d:5f:62:9a:1b: 0a:63:b6:24:94:bf:dc:11:35:ed:e3:6d:f9:ff:ba: db:61:e3:4d:c5:14:d5:51:37:b7:80:ab:d0:be:3e: c0:45:7a:3d:22:79:15:8f:54:b2:d7:01:8e:11:fb: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B7:F3:52:60:C8:FD:ED:AB:44:08:1A:E6:4C:D3:64:89:7B:42:05 X509v3 Authority Key Identifier: keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c1:38:47:56:59:a0:ad:55:11:a1:84:55:27:aa:84:34:d6: 6b:76:64:f8:45:a2:ac:78:a5:97:e7:8a:c4:91:41:c9:96:92: b6:11:32:49:95:da:13:70:8a:7d:df:93:3c:e2:c5:2c:79:84: fa:7d:3f:f0:b9:da:0f:53:ea:28:95:3a:54:b6:4f:29:34:6d: c5:18:1b:b4:45:04:b9:68:f2:20:bf:db:c0:51:fe:9d:3a:57: fe:bd:09:de:b7:18:07:7a:e2:a7:94:86:20:4c:33:8a:18:44: c7:46:47:88:11:13:6d:99:52:c8:6a:35:9b:d5:94:29:40:34: 0b:0f:0d:b0:3b:d0:e4:a1:77:f0:ff:04:d9:35:a5:d1:28:08: 85:2a:24:f5:72:be:7c:67:50:9e:81:5d:15:fa:26:17:b3:e2: 22:37:a1:1b:8b:5c:07:f4:eb:9c:84:8b:ef:23:b9:00:2c:f5: f1:10:97:5e:35:00:4c:49:0c:94:cf:63:2c:b9:8d:00:17:92: 79:18:dd:3d:f1:2b:a8:95:3f:db:a2:0c:13:ea:95:e9:37:26: db:1d:63:70:7f:2e:a9:d9:fd:eb:01:8e:aa:d2:66:35:ee:35: 3b:cd:fa:59:15:87:c8:fb:95:b8:80:52:39:f9:1b:a9:e7:80: 1e:a1:15:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTMyMjExMC8GA1UEBRMoRkE2QjYyNzU3QkNBRDQ1N0FDQTA3MEE1MUM0ODA4QjRC N0M5MzM3MDAeFw0yNjA1MTkwODM4NTVaFw0yNjA1MjYwODM4NTVaMBgxFjAUBgNV BAMTDTZhMGMyMTlmLTc1MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClSU9jmG2tYhjQYDyp3H3emaTQUuZmXRqSnwVFafPM8MLXrWJeEBiFWkKVVukf 79B27mTvFQ/5oFdzc62QJ2gW4FZN3xSiZMxcfTx9FkXh4KNxma6LBqOjci+ZlKR3 aL/3QaGhkwg7DOnen+NJexImi8LYXdADove6XbLKy9oR6dfGdeoJq8GNCzxDKVuo YsNmcqgYCaQoJR8EWm8pUfnGV4OvSG8kd+RYSTBsTu9af2kq7vZYLPkBIrtKXhb1 ijR6Fr9w1j8gAA2LJWhdX2KaGwpjtiSUv9wRNe3jbfn/utth403FFNVRN7eAq9C+ PsBFej0ieRWPVLLXAY4R+6kBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVrfzUmDI /e2rRAga5kzTZIl7QgUwHwYDVR0jBBgwFoAU+mtidXvK1FesoHClHEgItLfJM3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMzIyL0M5QzJBQUQ4MTg3 NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZlc29IQ2xIRWdJdExmSk0z QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW10aWRYdksxRmVzb0hDbEhFZ0l0TGZKTTNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MzIyL0M5QzJBQUQ4MTg3NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZl c29IQ2xIRWdJdExmSk0zQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBawThHVlmgrVURoYRVJ6qENNZrdmT4RaKseKWX54rEkUHJlpK2ETJJldoTcIp9 35M84sUseYT6fT/wudoPU+oolTpUtk8pNG3FGBu0RQS5aPIgv9vAUf6dOlf+vQne txgHeuKnlIYgTDOKGETHRkeIERNtmVLIajWb1ZQpQDQLDw2wO9DkoXfw/wTZNaXR KAiFKiT1cr58Z1CegV0V+iYXs+IiN6Ebi1wH9OuchIvvI7kALPXxEJdeNQBMSQyU z2MsuY0AF5J5GN098SuolT/bogwT6pXpNybbHWNwfy6p2f3rAY6q0mY17jU7zfpZ FYfI+5W4gFI5+Rup54AeoRXN -----END CERTIFICATE-----Generated at Thu May 21 10:16:18 2026 by rpki-client