$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: lUPOUHq/QFFCVGAZItPW6FM+AyIq60E9m3n+v3fdEAQ= Subject key identifier: F7:8D:0A:3B:4C:4D:F5:E9:67:8C:44:97:F1:90:30:BB:32:A6:DF:D6 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 0989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 0977 Signing time: Wed 20 May 2026 20:05:43 +0000 Manifest this update: Wed 20 May 2026 20:05:43 +0000 Manifest next update: Wed 27 May 2026 20:05:43 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: b4AhJzErteY4R89LOr+kiWUIozaCXAUZwRnm7R0Gbsc=) 2: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=) 3: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: May 20 20:05:43 2026 GMT Not After : May 27 20:05:43 2026 GMT Subject: CN=6a0e1417-0eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:0e:e4:5c:df:5c:d9:6c:ce:e1:15:fe:c3: 29:69:96:51:09:3d:9e:d4:76:45:3b:d3:83:2b:3d: b5:4d:d3:39:32:f7:90:6e:a8:af:66:da:b4:ac:4a: 01:2b:b5:50:6f:78:7d:3f:5d:cf:f4:2b:30:2b:68: 20:64:b7:b4:ee:a1:20:04:06:fd:c7:ea:c3:08:3a: 60:d8:14:af:91:d0:47:f1:09:18:01:36:81:35:96: 13:07:6c:2f:66:17:09:3e:c8:21:53:3d:b0:98:5e: 33:f1:e7:ce:c9:ca:bb:6c:79:53:c0:ff:40:40:88: e6:47:67:cc:34:f3:9b:65:8c:35:47:d2:e2:00:73: 4d:11:22:07:f0:4e:a2:3d:0d:dd:d6:56:ea:92:4d: a9:cf:32:86:5f:fa:1d:c5:b7:2f:ab:c5:c8:3f:2a: 7d:d8:7b:aa:3a:d6:47:1a:b3:c1:5b:9d:80:da:d2: 51:83:99:c2:4b:34:8a:fa:0d:ad:4b:8c:1d:81:c7: 30:fb:ac:45:19:d6:41:86:71:df:24:b8:f5:53:87: 50:a4:67:cf:52:e3:08:d5:5c:6a:44:49:82:87:6a: 2b:9e:b1:dc:9c:8f:4a:3a:d7:9a:90:41:58:3a:68: db:ba:55:8f:b2:4a:f1:4e:80:7c:02:ba:d7:c2:54: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8D:0A:3B:4C:4D:F5:E9:67:8C:44:97:F1:90:30:BB:32:A6:DF:D6 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:26:5f:1b:10:16:f2:a3:7f:60:72:8b:7c:99:77:a7:19:f9: 91:c2:c9:b4:e0:d1:d7:29:cc:97:a6:b0:33:32:a6:06:34:1f: 27:10:88:08:a2:7a:72:98:46:dd:1e:d1:25:26:67:f3:45:a4: eb:8b:e7:44:a3:3f:5d:a3:09:32:6c:b0:84:9b:17:d8:25:7c: 78:e2:fd:7c:4e:38:ee:74:d9:d0:1a:0b:79:12:43:cc:3c:6f: 6d:b9:84:d7:b0:86:85:1a:8e:21:d9:bd:e3:7e:03:a9:8a:71: 77:e4:92:93:55:e7:14:a1:9b:27:a9:09:e9:88:4a:49:3f:0a: 5d:05:b9:4e:d8:c8:d6:b3:7c:53:e7:60:9e:cb:84:d5:0d:69: 54:69:5f:c7:65:2c:f6:79:ad:ea:64:b3:eb:c4:d3:d0:ed:74: 78:22:a5:fb:ee:77:af:c7:61:96:35:00:23:17:82:0b:0c:31: 82:e5:fb:c2:60:bd:e1:95:90:1b:19:00:8e:59:85:13:c8:7e: f4:43:8a:2e:60:76:88:b1:08:9b:a7:fe:5c:b4:77:76:e7:4b: cc:02:3b:2d:db:c2:ea:c2:32:a0:51:d0:9c:15:2b:af:6e:77: 9c:1c:4a:16:d7:45:b2:21:8b:19:81:f4:c3:2c:a5:2f:19:a7: fd:fc:89:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjYwNTIwMjAwNTQzWhcNMjYwNTI3MjAwNTQzWjAYMRYwFAYD VQQDEw02YTBlMTQxNy0wZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmK8O5FzfXNlszuEV/sMpaZZRCT2e1HZFO9ODKz21TdM5MveQbqivZtq0rEoB K7VQb3h9P13P9CswK2ggZLe07qEgBAb9x+rDCDpg2BSvkdBH8QkYATaBNZYTB2wv ZhcJPsghUz2wmF4z8efOycq7bHlTwP9AQIjmR2fMNPObZYw1R9LiAHNNESIH8E6i PQ3d1lbqkk2pzzKGX/odxbcvq8XIPyp92HuqOtZHGrPBW52A2tJRg5nCSzSK+g2t S4wdgccw+6xFGdZBhnHfJLj1U4dQpGfPUuMI1VxqREmCh2ornrHcnI9KOteakEFY OmjbulWPskrxToB8ArrXwlTAsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeNCjtM TfXpZ4xEl/GQMLsypt/WMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdCZfGxAW8qN/YHKLfJl3pxn5kcLJtODR1ynMl6awMzKmBjQfJxCICKJ6cphG 3R7RJSZn80Wk64vnRKM/XaMJMmywhJsX2CV8eOL9fE447nTZ0BoLeRJDzDxvbbmE 17CGhRqOIdm9434DqYpxd+SSk1XnFKGbJ6kJ6YhKST8KXQW5TtjI1rN8U+dgnsuE 1Q1pVGlfx2Us9nmt6mSz68TT0O10eCKl++53r8dhljUAIxeCCwwxguX7wmC94ZWQ GxkAjlmFE8h+9EOKLmB2iLEIm6f+XLR3dudLzAI7LdvC6sIyoFHQnBUrr253nBxK FtdFsiGLGYH0wyylLxmn/fyJlQ== -----END CERTIFICATE-----Generated at Fri May 22 15:18:54 2026 by rpki-client