$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: qENDphxSBdwD9CylhqepzX61E0XqFXnycD95tvNBiRw= Subject key identifier: EF:2E:D3:4A:D5:E0:E7:EC:0F:57:CD:FF:92:38:90:93:BA:CE:BD:DD Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0CCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0CC4 Signing time: Wed 20 May 2026 18:28:00 +0000 Manifest this update: Wed 20 May 2026 18:27:59 +0000 Manifest next update: Wed 27 May 2026 18:27:59 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: ukMcV9QEViEc7E2igBhopcuzZhVG5cuuwCGgG0yachE=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: May 20 18:27:59 2026 GMT Not After : May 27 18:27:59 2026 GMT Subject: CN=6a0dfd30-a74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:71:f1:42:c0:29:3b:30:56:d8:d3:61:85:57: 43:ba:0d:c9:45:06:f2:24:61:ee:10:c7:80:b4:74: 64:db:4f:39:01:7a:6b:7e:58:19:67:44:9c:b2:4f: 6c:61:fe:8c:e9:f1:0e:7b:29:dd:46:d1:ae:3b:9f: 36:2e:cf:4a:4d:56:e7:de:02:ab:d7:51:86:99:2f: 29:88:b4:7a:5b:69:a9:dd:32:15:ba:e9:ac:2b:48: a1:7a:88:ef:09:e7:de:ba:4f:92:14:c6:e6:9e:e6: a6:12:c8:30:cd:8c:ff:ee:2a:cf:f8:c7:6b:32:af: d9:3a:a3:31:95:a6:ea:5d:e3:ed:12:d1:93:1c:fc: ab:7f:35:18:f8:e2:1f:63:76:b7:01:73:e5:a7:ad: eb:1b:37:94:65:b3:75:d3:9f:56:10:c4:a9:22:00: 23:3f:4b:f6:04:40:4d:98:f2:48:2b:95:ba:5c:c2: 00:4a:a2:81:bf:3f:35:d8:84:ce:1e:d4:e5:6e:2e: 0b:a6:ca:f5:91:1e:aa:59:ce:5f:d1:bc:c3:8b:ae: 9a:97:21:10:0a:d7:7d:02:03:a0:d2:f5:2b:dc:5d: ba:14:cf:e3:02:27:65:88:48:6a:0a:93:81:c5:55: d2:73:41:4f:c8:12:07:00:80:40:47:26:3a:16:18: b5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2E:D3:4A:D5:E0:E7:EC:0F:57:CD:FF:92:38:90:93:BA:CE:BD:DD X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e9:ce:65:46:6e:09:e9:01:e6:e7:b5:ff:39:70:41:15:a7: 54:cd:b9:0b:62:bb:64:07:33:a4:61:9f:c0:a2:42:56:f6:cd: 72:3d:6a:06:af:98:c3:ac:eb:41:c1:9a:ab:b7:b7:2c:fc:6a: eb:c0:ba:bb:0e:bb:3e:5e:75:52:cc:43:59:48:f4:67:73:7b: e0:7f:da:be:8c:ac:1f:b0:42:9c:94:3e:83:16:d8:8e:50:56: 0d:8a:b6:9a:68:11:2e:97:e5:1e:78:0e:4e:83:a4:74:14:cb: f9:e0:8e:7a:6e:44:38:ef:42:7b:e6:cb:3b:e3:06:5f:e2:39: 27:64:53:a9:a0:8b:c9:49:9b:c8:27:45:39:c8:32:99:07:bb: fc:9f:b6:ab:ab:26:ab:fb:38:5a:a4:77:99:8d:46:a1:2b:5c: 87:5f:6e:b0:a5:6a:6e:61:39:a1:69:d1:84:38:93:8b:e9:59: e5:1e:90:cc:49:4a:66:77:3b:22:1f:b8:3b:24:ec:59:d8:61: ec:f3:dd:e5:f1:92:a8:4d:df:bc:96:fd:7f:36:1c:c1:37:45: 5b:91:b9:97:79:da:54:9c:dd:0f:f5:00:40:71:43:85:58:fb: 9e:a6:dd:76:a9:d5:7f:01:a9:52:b5:fd:f7:c5:c7:30:dc:03: a2:59:78:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjYwNTIwMTgyNzU5WhcNMjYwNTI3MTgyNzU5WjAYMRYwFAYD VQQDEw02YTBkZmQzMC1hNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XHxQsApOzBW2NNhhVdDug3JRQbyJGHuEMeAtHRk2085AXprflgZZ0Scsk9s Yf6M6fEOeyndRtGuO582Ls9KTVbn3gKr11GGmS8piLR6W2mp3TIVuumsK0iheojv Cefeuk+SFMbmnuamEsgwzYz/7irP+MdrMq/ZOqMxlabqXePtEtGTHPyrfzUY+OIf Y3a3AXPlp63rGzeUZbN1059WEMSpIgAjP0v2BEBNmPJIK5W6XMIASqKBvz812ITO HtTlbi4Lpsr1kR6qWc5f0bzDi66alyEQCtd9AgOg0vUr3F26FM/jAidliEhqCpOB xVXSc0FPyBIHAIBARyY6Fhi1sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8u00rV 4OfsD1fN/5I4kJO6zr3dMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB+nOZUZuCekB5ue1/zlwQRWnVM25C2K7ZAczpGGfwKJCVvbNcj1qBq+Yw6zr QcGaq7e3LPxq68C6uw67Pl51UsxDWUj0Z3N74H/avoysH7BCnJQ+gxbYjlBWDYq2 mmgRLpflHngOToOkdBTL+eCOem5EOO9Ce+bLO+MGX+I5J2RTqaCLyUmbyCdFOcgy mQe7/J+2q6smq/s4WqR3mY1GoStch19usKVqbmE5oWnRhDiTi+lZ5R6QzElKZnc7 Ih+4OyTsWdhh7PPd5fGSqE3fvJb9fzYcwTdFW5G5l3naVJzdD/UAQHFDhVj7nqbd dqnVfwGpUrX998XHMNwDoll4RQ== -----END CERTIFICATE-----Generated at Thu May 21 10:16:06 2026 by rpki-client