$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: qv86V6nBwrqP68OeaiDFhn5MUY7I+CZ07XsJnqyg9uc= Subject key identifier: 0B:A6:4B:B4:1F:F9:0D:1D:C9:CD:92:DC:D3:B4:F0:92:CB:B8:27:C8 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 0187 Signing time: Thu 21 May 2026 04:36:28 +0000 Manifest this update: Thu 21 May 2026 04:36:28 +0000 Manifest next update: Thu 28 May 2026 04:36:28 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: VTh3L0IQNWUcdnp54DcH7w1e7FiSMA7hArLWnS7jaXA=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: 6+bY61LdDlam0PC7GuKMwEXRvre/3cSdh3l+aLkv2pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: May 21 04:36:28 2026 GMT Not After : May 28 04:36:28 2026 GMT Subject: CN=6a0e8bcc-6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:7a:21:2d:cb:bc:63:77:29:28:2f:21:32: 4e:5b:21:df:2e:db:98:4f:d5:ae:76:e0:30:46:68: aa:6d:89:fa:c2:24:24:da:f0:92:37:df:a4:76:38: f3:2e:a4:5f:34:8b:eb:f4:0e:90:3e:d8:d3:a4:ec: ce:79:a6:c2:48:ab:88:db:07:8e:4c:e9:55:9c:07: 1c:81:f6:a1:6e:88:77:b8:10:b8:4d:31:4b:e5:14: 1c:78:63:1a:c5:59:a0:41:08:1a:20:bd:34:3d:35: 78:49:66:08:10:f9:f0:22:b2:21:7f:7c:ea:e2:b6: 94:72:f4:76:6a:11:8a:41:34:7f:fa:7f:5e:d6:9f: eb:73:f9:6c:38:50:32:ea:bb:2a:fe:a3:c9:aa:ac: c9:9f:35:99:29:9c:45:51:1e:52:63:c9:d1:5f:ad: 27:de:70:8e:39:e9:25:cd:ec:19:99:e3:45:25:b3: 22:9f:09:b7:da:a4:95:84:c5:4b:ac:4c:f4:ac:62: ee:99:44:49:c6:8b:79:78:1c:b0:8f:64:43:17:d6: ca:fa:19:3b:12:39:f8:49:e1:af:c4:35:95:09:39: f0:06:29:f2:dc:f0:f3:b6:e9:dc:4e:e9:bb:94:84: 57:c4:c0:07:ba:19:33:48:fe:7e:25:9a:79:a5:6c: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A6:4B:B4:1F:F9:0D:1D:C9:CD:92:DC:D3:B4:F0:92:CB:B8:27:C8 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:fc:53:d7:ef:b3:cd:8a:b9:9c:1f:12:44:78:46:c7:6c: 97:17:cf:9b:19:c7:27:c5:ab:0d:07:59:d4:70:06:94:c5:03: 48:aa:7a:52:d7:07:73:e3:f1:10:af:1e:cc:4f:18:46:c7:d5: 40:46:ff:56:bd:c9:4a:c0:19:60:31:2e:46:43:b8:25:0a:f4: 9a:97:fe:d4:a6:f3:7f:69:a4:a4:df:f0:b7:22:0f:5e:5f:eb: 03:7f:52:d9:47:a8:28:21:11:d1:23:31:58:e4:28:2e:bf:cd: 03:31:24:4d:52:81:74:73:a3:c4:ce:44:a8:18:ce:84:82:03: 69:e9:6e:4c:f0:96:3b:24:b2:29:f1:00:47:b5:75:ee:8a:d2: ea:1f:4c:a2:93:f2:b5:ac:2e:18:23:4e:4b:31:7e:fe:56:16: 28:59:4e:67:b4:ff:ff:39:d0:94:12:f5:3c:b6:60:c7:ea:37: 7c:d8:5c:7d:82:52:10:76:8a:89:9a:69:1a:30:6e:ca:a4:77: 48:be:a1:47:b4:73:23:26:e6:86:ef:4e:82:16:22:ce:0f:a9: 4a:a8:0f:53:af:e4:6f:16:7a:26:ac:22:2c:26:f4:31:70:6c: 7f:34:9b:34:96:d9:1c:6c:72:94:8b:49:7b:f5:31:0d:58:9c: 0e:ea:5e:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYwNTIxMDQzNjI4WhcNMjYwNTI4MDQzNjI4WjAYMRYwFAYD VQQDEw02YTBlOGJjYy02YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrN6IS3LvGN3KSgvITJOWyHfLtuYT9WuduAwRmiqbYn6wiQk2vCSN9+kdjjz LqRfNIvr9A6QPtjTpOzOeabCSKuI2weOTOlVnAccgfahboh3uBC4TTFL5RQceGMa xVmgQQgaIL00PTV4SWYIEPnwIrIhf3zq4raUcvR2ahGKQTR/+n9e1p/rc/lsOFAy 6rsq/qPJqqzJnzWZKZxFUR5SY8nRX60n3nCOOeklzewZmeNFJbMinwm32qSVhMVL rEz0rGLumURJxot5eBywj2RDF9bK+hk7Ejn4SeGvxDWVCTnwBiny3PDztuncTum7 lIRXxMAHuhkzSP5+JZp5pWxkLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAumS7Qf +Q0dyc2S3NO08JLLuCfIMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATAH8U9fvs82KuZwfEkR4RsdslxfPmxnHJ8WrDQdZ1HAGlMUDSKp6UtcHc+Px EK8ezE8YRsfVQEb/Vr3JSsAZYDEuRkO4JQr0mpf+1Kbzf2mkpN/wtyIPXl/rA39S 2UeoKCER0SMxWOQoLr/NAzEkTVKBdHOjxM5EqBjOhIIDaeluTPCWOySyKfEAR7V1 7orS6h9MopPytawuGCNOSzF+/lYWKFlOZ7T//znQlBL1PLZgx+o3fNhcfYJSEHaK iZppGjBuyqR3SL6hR7RzIybmhu9OghYizg+pSqgPU6/kbxZ6JqwiLCb0MXBsfzSb NJbZHGxylItJe/UxDVicDupeFQ== -----END CERTIFICATE-----Generated at Thu May 21 10:24:53 2026 by rpki-client