$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: F38N2uCyxh1g7ySHfllHyjNga70ypMDC8TOXcT1PxaY= Subject key identifier: 71:97:B0:D8:2B:1B:09:22:96:7C:01:1D:A8:9E:7A:D1:86:A5:CD:4E Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0EC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0EB1 Signing time: Wed 20 May 2026 17:42:37 +0000 Manifest this update: Wed 20 May 2026 17:42:37 +0000 Manifest next update: Wed 27 May 2026 17:42:37 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: BDP/SYI6pthCXhLUg1oDRuhb1hu102+YcpdyGA0d5NI=) 2: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: 0i79WpYlAZ9LIzXBaRHXpaEMFnxhq4fNWyYI1M5ojU4=) 3: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: 6kYz/jIqF4bH5D+CFSov74IZW+HxnNg38aTmon4kT+g=) 4: 22BEE7823E6511F1B20B4B5BCD833773.roa (hash: xa3z/ia41GT5N2AZECsdieRJXA6FM8GWCOKn0/5pr3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: May 20 17:42:37 2026 GMT Not After : May 27 17:42:37 2026 GMT Subject: CN=6a0df28d-de43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:87:5f:9b:a1:ad:0a:ea:9c:b5:0e:f2:ec: b1:0a:b6:09:19:13:86:bd:07:a2:45:bb:d1:71:9b: f6:0a:f0:9a:e0:86:f7:70:d1:b0:12:72:75:48:69: df:3b:8e:79:33:f7:94:37:d3:b2:c3:ed:84:17:ff: a5:ba:d4:8e:96:8c:e5:70:e1:8b:ee:a5:b9:e1:8b: f8:a9:65:eb:17:01:f4:e9:55:1b:1f:b0:ab:4f:39: 7d:5e:76:32:a9:1a:77:62:45:e8:16:f2:56:8d:b2: 33:10:1a:e0:08:46:8f:32:be:14:31:ba:5b:e4:60: 39:fa:d1:a0:6f:a0:47:13:2d:9f:32:ec:1b:bb:d6: 0d:80:b3:e1:7f:ba:ea:73:95:54:8f:05:6f:06:ca: 49:8b:db:bf:0f:de:0b:a5:73:11:84:91:f4:32:49: 97:95:15:91:cf:2d:9a:8e:c3:6f:c1:13:84:ba:6e: 75:f5:74:27:3b:2d:14:2c:d7:9a:83:e1:e1:38:14: 00:59:4f:b1:e9:db:3e:f4:d5:a9:a3:25:a1:d1:c6: 40:95:5d:ef:56:26:e9:6c:16:cc:c9:b1:39:bb:41: f4:ae:93:cb:10:a9:56:7b:68:0a:ae:56:5c:31:b5: a4:d4:2f:52:12:5f:68:3c:dd:5c:50:2d:8b:b1:16: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:97:B0:D8:2B:1B:09:22:96:7C:01:1D:A8:9E:7A:D1:86:A5:CD:4E X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:14:2b:8b:28:74:ef:c8:75:ac:13:b3:07:e6:94:21:ea:f8: bd:2e:81:9d:aa:fb:2f:09:fa:1e:0d:cb:32:c9:95:62:0a:80: 20:91:ae:73:74:c2:17:8b:c8:9f:d4:21:82:a9:d6:82:e8:84: 62:b3:8a:16:25:1b:ac:6c:04:91:5e:f2:09:d6:d6:78:44:6a: ba:16:70:f8:5b:30:97:c1:92:92:e7:11:f1:f3:e5:8f:a8:69: 7b:47:86:5c:65:8e:b2:d2:bc:f5:25:ef:cc:04:ce:06:95:82: ca:ae:fa:ce:f4:c7:12:0e:d1:95:8e:13:b0:ff:ab:0d:e2:aa: 42:c8:f4:58:05:c2:14:d7:62:18:4c:ce:5a:8c:a9:c8:93:bc: a4:f7:42:43:cf:1a:aa:1b:ea:c9:02:9e:09:ad:41:45:cd:42: 25:b2:2c:86:f3:44:2b:05:62:80:a3:aa:72:f2:e4:90:b1:f7: 76:f5:03:a4:1e:7f:28:79:6f:33:43:00:08:b7:7a:94:f9:38: d2:fb:d8:83:c0:a4:81:f5:11:a1:6c:45:f2:65:dc:ff:b8:e8: 53:f5:7d:2f:bd:95:1e:09:47:ab:88:77:2c:dc:ca:89:69:57: 8a:72:4a:67:53:e1:a1:95:45:38:92:1d:6e:7c:11:7a:31:eb: 07:0d:75:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjYwNTIwMTc0MjM3WhcNMjYwNTI3MTc0MjM3WjAYMRYwFAYD VQQDEw02YTBkZjI4ZC1kZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCOHX5uhrQrqnLUO8uyxCrYJGROGvQeiRbvRcZv2CvCa4Ib3cNGwEnJ1SGnf O455M/eUN9Oyw+2EF/+lutSOlozlcOGL7qW54Yv4qWXrFwH06VUbH7CrTzl9XnYy qRp3YkXoFvJWjbIzEBrgCEaPMr4UMbpb5GA5+tGgb6BHEy2fMuwbu9YNgLPhf7rq c5VUjwVvBspJi9u/D94LpXMRhJH0MkmXlRWRzy2ajsNvwROEum519XQnOy0ULNea g+HhOBQAWU+x6ds+9NWpoyWh0cZAlV3vVibpbBbMybE5u0H0rpPLEKlWe2gKrlZc MbWk1C9SEl9oPN1cUC2LsRanQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGXsNgr GwkilnwBHaieetGGpc1OMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJhQriyh078h1rBOzB+aUIer4vS6Bnar7Lwn6Hg3LMsmVYgqAIJGuc3TCF4vI n9QhgqnWguiEYrOKFiUbrGwEkV7yCdbWeERquhZw+Fswl8GSkucR8fPlj6hpe0eG XGWOstK89SXvzATOBpWCyq76zvTHEg7RlY4TsP+rDeKqQsj0WAXCFNdiGEzOWoyp yJO8pPdCQ88aqhvqyQKeCa1BRc1CJbIshvNEKwVigKOqcvLkkLH3dvUDpB5/KHlv M0MACLd6lPk40vvYg8CkgfURoWxF8mXc/7joU/V9L72VHglHq4h3LNzKiWlXinJK Z1PhoZVFOJIdbnwRejHrBw11oQ== -----END CERTIFICATE-----Generated at Thu May 21 10:23:31 2026 by rpki-client