$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: KIa03cKRkG+HdXbhnAUHhwWjh/lXsolnwQManax3RJ4= Subject key identifier: 03:7E:D0:D4:21:42:48:DE:AB:7E:AA:3D:64:BF:CA:05:50:C6:FD:5D Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 0956 Signing time: Wed 20 May 2026 20:09:26 +0000 Manifest this update: Wed 20 May 2026 20:09:26 +0000 Manifest next update: Wed 27 May 2026 20:09:26 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: 7bljCyMp7+JOt0pm62aVz7Mky9lej5PujsOVybmhW1M=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: May 20 20:09:26 2026 GMT Not After : May 27 20:09:26 2026 GMT Subject: CN=6a0e14f6-c4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:9e:79:ca:dd:ab:0e:ba:16:37:5f:41:bc: 57:fd:d0:0b:72:9a:36:97:b7:dc:a0:05:f3:7e:49: 92:22:30:c2:09:83:e0:43:60:69:95:e1:6d:5e:e0: d9:b0:c9:52:54:96:01:a3:78:89:14:87:55:9b:71: 70:fa:56:2a:cd:69:d9:0e:17:d8:c3:ac:5f:03:19: 91:4e:86:7a:9c:9d:d6:80:82:1c:ae:3f:67:b6:47: e9:6d:5c:55:2b:b2:5a:57:22:e8:80:4b:da:73:b0: 5b:ac:3b:91:67:ac:dc:ae:9a:ff:3f:88:01:53:62: 45:51:10:14:37:93:1b:30:4f:b7:7b:5f:fe:6c:09: e4:08:d5:53:b5:a9:d6:7f:24:08:4e:87:c8:b1:12: 20:09:7f:75:89:42:ca:f9:b7:00:de:eb:b3:00:90: a1:dc:4e:84:c0:ec:d3:f9:25:f3:3e:fd:2a:2e:78: 49:bc:27:d1:11:94:c5:40:d5:d1:23:17:ea:ed:f6: b6:7f:54:00:e5:23:77:e4:a8:23:2d:8d:47:4a:1b: 2f:c2:6d:04:4b:af:b2:43:dd:4a:ec:93:22:3b:9f: dc:cc:e6:5f:54:b0:74:19:ba:ea:99:eb:dc:60:a3: d3:04:db:fc:78:ef:0b:25:a2:c6:4b:4c:1d:26:ea: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:D0:D4:21:42:48:DE:AB:7E:AA:3D:64:BF:CA:05:50:C6:FD:5D X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:c4:59:a1:40:a7:26:ec:f7:60:3a:07:b0:66:7f:b3:12: 95:27:f7:90:b8:72:fb:01:08:a4:fe:dd:27:62:c0:a5:5f:b1: 84:cd:6c:4e:b5:5d:f3:ea:00:30:0a:cc:26:92:b4:9d:08:72: 9d:9d:5c:ab:59:b8:34:5d:34:9b:fb:8e:b4:36:14:67:e0:87: c7:09:be:0b:d7:22:95:18:d1:6a:a2:51:37:c3:db:be:65:f6: 12:50:07:a8:ee:ed:1f:ff:32:ca:16:63:12:b7:82:39:92:96: fb:07:4f:35:54:c9:bf:ea:db:09:34:b1:4f:81:0b:ab:8b:66: e9:3f:8c:19:06:79:db:0f:ab:50:65:e6:78:7e:17:7c:e8:05: d6:87:d0:d7:54:dc:16:87:31:a1:f1:63:a5:f9:5f:24:4f:ff: 34:d4:b2:fb:93:bd:69:2e:cf:5f:cd:9e:93:26:99:08:39:c8: 90:4d:70:c3:4b:b3:f2:b6:d3:59:3a:24:82:d3:c9:d7:72:e0: 7f:87:56:3c:f0:58:fc:1d:81:f6:e5:69:fd:5d:15:e0:3e:6d: 56:3d:00:40:7a:59:9d:43:0c:4f:61:16:63:23:91:ae:85:79: 9c:96:9f:78:6c:f1:26:67:3a:94:53:87:0c:58:d5:95:28:b7: de:68:93:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjYwNTIwMjAwOTI2WhcNMjYwNTI3MjAwOTI2WjAYMRYwFAYD VQQDEw02YTBlMTRmNi1jNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYyeecrdqw66FjdfQbxX/dALcpo2l7fcoAXzfkmSIjDCCYPgQ2BpleFtXuDZ sMlSVJYBo3iJFIdVm3Fw+lYqzWnZDhfYw6xfAxmRToZ6nJ3WgIIcrj9ntkfpbVxV K7JaVyLogEvac7BbrDuRZ6zcrpr/P4gBU2JFURAUN5MbME+3e1/+bAnkCNVTtanW fyQITofIsRIgCX91iULK+bcA3uuzAJCh3E6EwOzT+SXzPv0qLnhJvCfREZTFQNXR Ixfq7fa2f1QA5SN35KgjLY1HShsvwm0ES6+yQ91K7JMiO5/czOZfVLB0Gbrqmevc YKPTBNv8eO8LJaLGS0wdJuooLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAN+0NQh Qkjeq36qPWS/ygVQxv1dMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhubEWaFApybs92A6B7Bmf7MSlSf3kLhy+wEIpP7dJ2LApV+xhM1sTrVd8+oA MArMJpK0nQhynZ1cq1m4NF00m/uOtDYUZ+CHxwm+C9cilRjRaqJRN8PbvmX2ElAH qO7tH/8yyhZjEreCOZKW+wdPNVTJv+rbCTSxT4ELq4tm6T+MGQZ52w+rUGXmeH4X fOgF1ofQ11TcFocxofFjpflfJE//NNSy+5O9aS7PX82ekyaZCDnIkE1ww0uz8rbT WTokgtPJ13Lgf4dWPPBY/B2B9uVp/V0V4D5tVj0AQHpZnUMMT2EWYyORroV5nJaf eGzxJmc6lFOHDFjVlSi33miTMw== -----END CERTIFICATE-----Generated at Thu May 21 12:45:18 2026 by rpki-client