$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: ipIAhQaN5lDGEo86urgU9Hww8GPTWbi8Wss4bvfEwxA= Subject key identifier: 78:3B:B1:C5:87:17:39:5D:79:26:D3:21:AC:C0:F2:70:C0:BF:F9:FD Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 4B Signing time: Tue 19 May 2026 08:13:09 +0000 Manifest this update: Tue 19 May 2026 08:13:08 +0000 Manifest next update: Tue 26 May 2026 08:13:08 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: /G+El/NKFH2/Jn/izOLSXWnekeACaELOKiovutAkK6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: May 19 08:13:08 2026 GMT Not After : May 26 08:13:08 2026 GMT Subject: CN=6a0c1b95-8b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:35:4c:62:26:4b:16:db:b1:b1:e5:06:79: b2:e1:e0:00:3c:2a:f6:35:6f:d6:2f:aa:59:0b:e2: 74:fa:71:5e:80:19:28:9f:4b:b8:02:b4:d8:c1:8e: ba:ac:ed:af:6f:97:ba:50:b1:5b:32:c4:a6:61:bb: 0b:65:b2:78:1c:84:a8:0a:7d:e5:51:ea:ff:b7:6e: a6:ee:04:b5:ef:48:a4:dd:d7:1c:90:d9:c4:8f:a7: 49:75:4f:2f:db:d8:b6:03:9c:9b:a3:95:c0:e7:a8: f9:44:5b:c8:1d:ab:9c:ac:7a:1e:4f:2a:88:96:48: c5:f0:46:6d:9f:54:3e:6c:35:b2:6d:19:fb:a0:b4: 11:d5:13:b4:52:e0:01:30:b8:df:fe:ca:81:a7:ea: 47:a5:5b:10:24:b6:8a:83:7e:8c:93:8e:6e:29:1c: c9:c6:fa:b5:03:9c:f1:33:8a:81:b5:eb:21:bb:21: a6:14:ea:db:72:8a:07:b8:29:b6:66:a2:8b:7b:9a: 7c:ac:1f:5b:0e:c6:aa:3a:7d:0f:ed:cb:fe:32:4c: d0:18:96:75:f6:36:cf:78:e2:1f:cc:f6:62:f6:dc: f5:75:13:43:7a:d3:c3:54:94:bd:3e:00:bf:b5:69: 82:08:e3:88:d8:fe:6b:f4:75:42:b7:17:6d:9f:f4: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3B:B1:C5:87:17:39:5D:79:26:D3:21:AC:C0:F2:70:C0:BF:F9:FD X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:86:fb:f8:da:7f:3c:dd:e0:a1:f6:f0:e6:2e:06:6e:2d:8c: bf:7f:76:22:26:99:1f:74:5d:81:a3:d3:51:9d:89:eb:65:e0: fd:b6:65:88:ed:13:38:70:c5:b3:b9:10:32:31:d3:b6:b8:53: 88:22:35:6b:e4:f7:b8:db:61:ef:0d:86:33:ee:31:d9:9d:e4: 77:82:63:57:d8:8c:c2:16:d6:89:f4:97:ff:c0:a8:85:6b:4e: b2:2e:c0:e6:aa:84:58:7a:36:40:5c:ac:5c:3f:b6:c1:3c:6a: 72:c6:a0:a0:80:65:af:bc:2d:87:d3:b5:5d:56:21:40:15:2c: d2:57:00:e1:d5:35:e1:f7:d1:d1:1c:7e:b1:32:93:59:c3:b5: a1:d6:74:b6:19:6e:c4:b8:ba:4b:6d:33:d5:24:8a:a9:08:6d: c4:05:d2:c6:bc:27:52:19:bd:7a:38:f4:89:58:4c:a0:e0:c9: a1:2b:ff:59:a7:11:32:75:0c:48:d4:88:c8:d6:af:9a:ca:27: d4:d9:a5:79:42:6f:ff:2c:0b:63:22:15:fa:78:5e:11:bd:8f: 01:f3:a0:ac:59:5e:75:58:09:0a:2c:7b:c9:35:c7:2d:8e:d1: 71:a0:45:a0:01:ae:ed:86:0b:63:58:5d:47:75:e6:53:40:fd: 92:eb:e3:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjA1MTkwODEzMDhaFw0yNjA1MjYwODEzMDhaMBgxFjAUBgNV BAMTDTZhMGMxYjk1LThiM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX4DVMYiZLFtuxseUGebLh4AA8KvY1b9YvqlkL4nT6cV6AGSifS7gCtNjBjrqs 7a9vl7pQsVsyxKZhuwtlsngchKgKfeVR6v+3bqbuBLXvSKTd1xyQ2cSPp0l1Ty/b 2LYDnJujlcDnqPlEW8gdq5yseh5PKoiWSMXwRm2fVD5sNbJtGfugtBHVE7RS4AEw uN/+yoGn6kelWxAktoqDfoyTjm4pHMnG+rUDnPEzioG16yG7IaYU6ttyige4KbZm oot7mnysH1sOxqo6fQ/ty/4yTNAYlnX2Ns944h/M9mL23PV1E0N608NUlL0+AL+1 aYII44jY/mv0dUK3F22f9PfJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeDuxxYcX OV15JtMhrMDycMC/+f0wHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5hvv42n883eCh9vDmLgZuLYy/f3YiJpkfdF2Bo9NRnYnrZeD9tmWI7RM4cMWz uRAyMdO2uFOIIjVr5Pe422HvDYYz7jHZneR3gmNX2IzCFtaJ9Jf/wKiFa06yLsDm qoRYejZAXKxcP7bBPGpyxqCggGWvvC2H07VdViFAFSzSVwDh1TXh99HRHH6xMpNZ w7Wh1nS2GW7EuLpLbTPVJIqpCG3EBdLGvCdSGb16OPSJWEyg4MmhK/9ZpxEydQxI 1IjI1q+ayifU2aV5Qm//LAtjIhX6eF4RvY8B86CsWV51WAkKLHvJNcctjtFxoEWg Aa7thgtjWF1HdeZTQP2S6+MP -----END CERTIFICATE-----Generated at Thu May 21 09:38:45 2026 by rpki-client