$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft File: vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft (raw, json) Hash identifier: 8tGPHDxfY0pAn+a0uQUxU+k+IB8pbbNl3mFgTl6KVzo= Subject key identifier: 79:FE:12:E0:CC:25:5F:0B:7C:A2:99:E5:B6:15:58:8C:B1:DC:74:65 Authority key identifier: BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48 Certificate issuer: /CN=A917FFCC/serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft Manifest number: 29 Signing time: Tue 19 May 2026 08:37:13 +0000 Manifest this update: Tue 19 May 2026 08:37:12 +0000 Manifest next update: Tue 26 May 2026 08:37:12 +0000 Files and hashes: 1: vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl (hash: hAKzQW9NhgnvGJlMF8Np2cwls95rNxk5u5oEh5kib/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48 Validity Not Before: May 19 08:37:12 2026 GMT Not After : May 26 08:37:12 2026 GMT Subject: CN=6a0c2139-b65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:2d:f8:0e:b3:a9:3d:69:c4:5a:aa:a6:e6: 4e:d9:54:b5:ba:e9:e9:bb:2a:e9:14:f5:38:1f:b4: 15:ad:fd:2f:f0:fb:5a:db:53:b8:38:84:30:ef:73: ad:8c:5e:45:49:bd:e1:f8:40:12:29:78:20:13:fa: 01:c2:78:b6:d6:7a:3f:db:3b:59:e8:f8:91:fd:3e: 47:bd:c6:6c:90:99:5c:2b:cb:60:8e:1f:bf:0c:e4: 19:48:3e:a2:a4:42:be:43:db:da:26:94:d3:8d:2c: f8:05:6a:12:dc:3c:80:93:d5:c0:db:a9:b6:44:77: aa:0e:7f:a3:85:84:43:83:95:d1:56:43:ac:90:32: ff:a9:70:ba:17:23:38:6e:1b:c5:cd:b1:7f:2b:b3: b4:87:96:e5:bc:17:45:cd:fc:a6:01:45:86:17:72: 71:ef:5c:0e:27:00:2c:22:35:e0:08:87:48:6c:86: 87:12:4b:17:3c:79:69:30:4c:df:97:89:73:5d:8f: 65:d4:6f:19:1e:25:07:6a:e8:14:bf:7f:46:6e:38: be:af:99:7d:36:71:d7:92:f0:0f:9f:a2:7b:49:5e: 0c:66:5b:55:c7:72:fc:56:b2:87:98:93:5f:24:ea: 1c:c5:6c:47:ec:d6:e7:e6:a5:7d:92:b7:fb:ae:ff: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FE:12:E0:CC:25:5F:0B:7C:A2:99:E5:B6:15:58:8C:B1:DC:74:65 X509v3 Authority Key Identifier: keyid:BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8f:8f:d4:1d:b6:86:d3:f6:0c:47:54:f5:aa:d1:7a:86:76: 3f:4e:39:27:04:a8:3d:08:ef:ab:e8:36:54:44:1e:0d:24:69: cc:bc:ab:70:26:20:ee:cd:32:8f:f6:92:8a:0b:e7:53:43:bd: e4:9a:67:58:98:eb:11:ed:32:de:f6:96:07:fc:da:83:5d:12: 0d:97:9b:ff:bc:b9:d5:c4:80:6f:3b:78:a3:18:99:6c:e9:c7: bf:c1:44:3e:f7:e4:09:c8:40:bc:99:67:c3:98:e5:01:1a:b3: fc:5f:f3:69:d2:09:56:cb:c1:d4:72:ae:71:d9:9a:5f:cf:a2: 0d:75:56:36:dd:8e:46:84:66:ff:bf:8d:10:e2:b9:45:bd:b9: 14:61:1d:28:40:39:97:c1:f5:22:49:6f:bb:1f:f4:33:f4:f7: 30:b9:16:6f:0d:b0:73:be:14:13:dc:2d:60:b2:62:e7:f8:9b: 96:11:ec:14:9c:4e:e4:fa:73:11:1d:25:28:eb:8e:d2:39:6b: 08:ab:d3:c0:c3:cb:98:e1:a2:5c:8f:43:d8:d7:46:b8:1a:f7: 72:20:e8:71:da:7e:92:1e:be:5b:7b:eb:5c:91:4a:e9:ec:c6: 68:f4:59:79:f0:e7:c2:2e:8f:a8:39:b9:b0:2e:8c:69:2d:48: 77:61:f8:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkZDQzExMC8GA1UEBRMoQkU4NzRGOUU2Qzc2RkJDQjc4QjE0RkI3MEY0MTJBODc5 NzFGQ0U0ODAeFw0yNjA1MTkwODM3MTJaFw0yNjA1MjYwODM3MTJaMBgxFjAUBgNV BAMTDTZhMGMyMTM5LWI2NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChZy34DrOpPWnEWqqm5k7ZVLW66em7KukU9TgftBWt/S/w+1rbU7g4hDDvc62M XkVJveH4QBIpeCAT+gHCeLbWej/bO1no+JH9Pke9xmyQmVwry2COH78M5BlIPqKk Qr5D29omlNONLPgFahLcPICT1cDbqbZEd6oOf6OFhEODldFWQ6yQMv+pcLoXIzhu G8XNsX8rs7SHluW8F0XN/KYBRYYXcnHvXA4nACwiNeAIh0hshocSSxc8eWkwTN+X iXNdj2XUbxkeJQdq6BS/f0ZuOL6vmX02cdeS8A+fontJXgxmW1XHcvxWsoeYk18k 6hzFbEfs1ufmpX2St/uu/4DpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUef4S4Mwl Xwt8opnlthVYjLHcdGUwHwYDVR0jBBgwFoAUvodPnmx2+8t4sU+3D0Eqh5cfzkgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzExQzc2Mzc4MTZE MzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0NHNVLTNEMEVxaDVjZnpr Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm9kUG5teDItOHQ0c1UtM0QwRXFoNWNmemtnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RkNDLzExQzc2Mzc4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0 NHNVLTNEMEVxaDVjZnprZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCRj4/UHbaG0/YMR1T1qtF6hnY/TjknBKg9CO+r6DZURB4NJGnMvKtwJiDuzTKP 9pKKC+dTQ73kmmdYmOsR7TLe9pYH/NqDXRINl5v/vLnVxIBvO3ijGJls6ce/wUQ+ 9+QJyEC8mWfDmOUBGrP8X/Np0glWy8HUcq5x2Zpfz6INdVY23Y5GhGb/v40Q4rlF vbkUYR0oQDmXwfUiSW+7H/Qz9PcwuRZvDbBzvhQT3C1gsmLn+JuWEewUnE7k+nMR HSUo647SOWsIq9PAw8uY4aJcj0PY10a4GvdyIOhx2n6SHr5be+tckUrp7MZo9Fl5 8OfCLo+oObmwLoxpLUh3Yfjo -----END CERTIFICATE-----Generated at Thu May 21 09:39:23 2026 by rpki-client