$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json) Hash identifier: hLik/LGaHRqzQ3T2VADKG2LHqxH++/7QXWhUGmV+5BU= Subject key identifier: CB:0C:31:77:E5:0A:AB:E4:D9:79:6D:30:99:C0:7A:2A:8C:B2:1C:0A Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 Certificate issuer: /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft Manifest number: 011E Signing time: Thu 21 May 2026 05:57:40 +0000 Manifest this update: Thu 21 May 2026 05:57:39 +0000 Manifest next update: Thu 28 May 2026 05:57:39 +0000 Files and hashes: 1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: oyAneQ0C40Y3lUPnrLWcQuq8H9ks7piqSjo4jCbFAxg=) 2: 30BF0192D5B411F0BA49041CC4F9AE02.roa (hash: 7Xq/xrlaF1i6pCbhVMnZT3OZ5U9fhM3Ebdid2BeEwH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Validity Not Before: May 21 05:57:39 2026 GMT Not After : May 28 05:57:39 2026 GMT Subject: CN=6a0e9ed4-71c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:b6:c3:a4:11:d1:83:7f:bf:13:51:96:75: d0:f1:78:b3:0b:1e:c2:8b:0f:06:84:d6:1a:22:7d: e1:81:f3:1f:36:ba:4a:25:3a:58:bf:e8:ee:45:0f: ae:2d:c1:6b:54:ab:0e:dc:dd:86:16:fc:87:ce:47: 97:e7:8b:c1:fd:af:43:0d:a1:ae:8c:6e:2a:12:8e: 6b:92:f7:7c:fe:6d:59:86:8c:05:52:17:5e:46:d6: fd:7b:83:36:f6:13:f0:52:4a:18:76:8d:a1:dd:61: 82:cb:d2:7d:5b:2d:98:c7:d4:1f:ca:3a:37:8b:18: eb:f1:c2:fd:8f:de:9f:8d:0e:aa:57:fc:1f:1a:1d: cc:48:d7:c0:60:6d:88:df:9e:50:ec:bb:d5:73:1a: 98:f4:a3:3c:93:19:52:22:11:a0:76:f2:31:a2:b6: 40:ee:57:3b:25:b1:f5:45:4d:2f:95:b5:d3:a3:41: 5b:ed:11:d5:fa:0c:75:02:22:a1:1f:9a:28:c0:44: 61:ac:a6:ec:cb:65:92:35:39:f6:74:d7:71:6f:fd: 8e:72:df:73:a0:d1:10:06:da:04:8c:a3:a5:eb:9a: 93:68:58:c3:22:19:63:cd:c6:4e:9f:6a:e4:e5:90: 23:df:9f:0d:d4:29:49:2e:1b:63:c1:31:8d:f2:6e: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:31:77:E5:0A:AB:E4:D9:79:6D:30:99:C0:7A:2A:8C:B2:1C:0A X509v3 Authority Key Identifier: keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:92:c8:30:7a:8c:22:80:95:51:a3:61:2a:90:16:a5:45:8f: 94:e7:ad:cb:85:32:ae:62:ad:da:47:fe:86:9e:5b:2b:96:3a: 95:16:fb:17:51:0e:e1:ce:a1:b0:8f:c4:59:2f:70:e8:e3:86: 6c:98:59:5b:5d:6a:be:4f:ad:8c:75:8b:67:9e:8d:f0:33:3f: fb:13:0c:3b:3f:b5:0c:db:5c:02:a3:63:43:cf:3d:f1:48:41: 87:b3:7b:e6:c8:7f:e1:23:f4:aa:e8:fe:e4:5c:b5:d5:c4:cb: 63:ab:c8:a7:48:df:2c:d6:12:af:f4:ed:c2:f1:df:ea:4c:35: 3b:2c:7f:68:6f:7b:aa:fa:13:23:38:7a:08:37:be:2d:c9:32: d5:bc:c0:52:af:4a:6c:0f:c1:d2:87:95:6d:0d:16:14:86:9d: 0e:a0:ab:ff:65:4e:61:fa:1f:e8:05:e5:af:49:22:56:90:c0: 47:0c:27:df:94:66:47:e7:30:05:83:a7:9e:80:a0:dc:c6:9a: cd:b0:d7:c9:b0:97:e1:21:08:23:25:fb:94:0d:a2:31:2d:04: ad:f9:2f:e3:d9:c9:f4:fd:e0:32:1a:64:42:10:f9:1d:f0:06: e1:4a:9f:80:52:6a:b0:b2:64:a4:ef:2e:33:48:a1:a4:ce:df: f4:c5:88:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMjUxMTAvBgNVBAUTKDUzQzA4QkRBMDRCQzA1MzIyMUVCMjczQUEyMTVDQ0Q5 NUMwMEMzOTIwHhcNMjYwNTIxMDU1NzM5WhcNMjYwNTI4MDU1NzM5WjAYMRYwFAYD VQQDEw02YTBlOWVkNC03MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOC2w6QR0YN/vxNRlnXQ8XizCx7Ciw8GhNYaIn3hgfMfNrpKJTpYv+juRQ+u LcFrVKsO3N2GFvyHzkeX54vB/a9DDaGujG4qEo5rkvd8/m1ZhowFUhdeRtb9e4M2 9hPwUkoYdo2h3WGCy9J9Wy2Yx9Qfyjo3ixjr8cL9j96fjQ6qV/wfGh3MSNfAYG2I 355Q7LvVcxqY9KM8kxlSIhGgdvIxorZA7lc7JbH1RU0vlbXTo0Fb7RHV+gx1AiKh H5oowERhrKbsy2WSNTn2dNdxb/2Oct9zoNEQBtoEjKOl65qTaFjDIhljzcZOn2rk 5ZAj358N1ClJLhtjwTGN8m4G7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMsMMXfl Cqvk2XltMJnAeiqMshwKMB8GA1UdIwQYMBaAFFPAi9oEvAUyIesnOqIVzNlcAMOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMyNS84MzM4QzRENkFB RTkxMUVGQjcyMUMyNURDNEY5QUUwMi9VOENMMmdTOEJUSWg2eWM2b2hYTTJWd0F3 NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4Q0wyZ1M4QlRJaDZ5YzZvaFhNMlZ3QXc1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMyNS84MzM4QzRENkFBRTkxMUVGQjcyMUMyNURDNEY5QUUwMi9VOENMMmdTOEJU SWg2eWM2b2hYTTJWd0F3NUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALJLIMHqMIoCVUaNhKpAWpUWPlOety4UyrmKt2kf+hp5bK5Y6lRb7F1EO4c6h sI/EWS9w6OOGbJhZW11qvk+tjHWLZ56N8DM/+xMMOz+1DNtcAqNjQ8898UhBh7N7 5sh/4SP0quj+5Fy11cTLY6vIp0jfLNYSr/TtwvHf6kw1Oyx/aG97qvoTIzh6CDe+ Lcky1bzAUq9KbA/B0oeVbQ0WFIadDqCr/2VOYfof6AXlr0kiVpDARwwn35RmR+cw BYOnnoCg3MaazbDXybCX4SEIIyX7lA2iMS0Erfkv49nJ9P3gMhpkQhD5HfAG4Uqf gFJqsLJkpO8uM0ihpM7f9MWIfA== -----END CERTIFICATE-----Generated at Thu May 21 09:31:09 2026 by rpki-client