$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: ca6jsoJprFxRAK2HC9FpL1wsHuI3JN5ulu6mTSvMpUU= Subject key identifier: 5B:AF:34:A9:3F:83:2E:D1:27:7E:31:53:00:FA:FE:99:70:69:0D:07 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0B2D Signing time: Wed 20 May 2026 19:18:36 +0000 Manifest this update: Wed 20 May 2026 19:18:35 +0000 Manifest next update: Wed 27 May 2026 19:18:35 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: qpjNPsP8j0HzBs9V1VyOEEbvlXVlPpMuOJHfjRcLYtM=) 2: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=) 3: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: May 20 19:18:35 2026 GMT Not After : May 27 19:18:35 2026 GMT Subject: CN=6a0e090b-31df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:ef:4e:11:24:60:fa:69:7c:35:68:4d:eb: 36:28:06:20:92:2b:45:42:4c:97:16:df:1e:98:a6: 8c:a3:13:99:c8:bd:d2:a0:84:80:ce:e0:72:a3:0e: c4:3b:8a:45:10:35:7d:1c:f0:63:75:8b:69:81:50: 4e:b4:04:b7:ce:84:48:00:ae:85:19:90:7f:d0:72: 64:4a:dd:66:53:3b:a0:f4:16:2e:c9:e3:d8:55:a8: f6:15:1c:04:73:bc:5d:c5:0a:2d:77:74:d1:30:7d: 60:72:66:09:38:ef:31:91:c0:5e:30:10:03:ad:2f: c9:fa:bf:8c:e0:01:fd:1a:12:07:34:1d:8e:f1:c9: 2e:5d:29:97:10:a2:80:ed:1e:55:e4:95:8b:58:39: bf:c8:b3:b9:12:c0:45:0d:63:90:e9:2b:53:70:b1: 24:6e:58:70:21:24:e2:51:66:34:b7:73:7d:f5:21: c5:0c:97:3e:08:2d:52:d5:33:8a:a9:75:78:5d:02: e8:87:5c:9b:86:a2:ff:49:f3:8d:f1:17:c1:7e:be: 59:5c:c0:c0:6b:7f:38:da:35:08:8e:4e:8d:4f:51: 05:32:62:dd:11:29:b1:9a:66:cb:b8:7c:f2:19:df: 01:9b:99:5a:37:59:3c:42:79:f0:a4:61:04:59:bb: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AF:34:A9:3F:83:2E:D1:27:7E:31:53:00:FA:FE:99:70:69:0D:07 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7d:e4:98:ea:46:68:6b:2b:bf:a7:54:46:6e:bd:6b:07:86: 61:8e:01:ea:bf:0a:a3:34:48:8d:8d:eb:93:0e:b1:05:b6:bb: 9b:8a:61:e4:60:e5:85:a9:6c:68:5d:0c:02:b3:6e:da:c8:99: ca:7b:51:ef:7f:0b:21:37:b5:1b:76:c1:82:9b:fb:83:06:13: 87:d8:74:4f:9f:26:08:ec:2e:de:dd:40:26:75:47:e0:cc:ac: 0f:bb:e1:47:0d:80:96:de:c8:44:7e:6d:f4:8a:2a:09:0a:e3: 8e:56:7f:14:6e:da:e8:40:8c:ea:65:10:bf:18:c3:37:ac:00: 16:5d:6c:82:75:07:fb:01:38:11:33:6f:29:9b:2f:e3:81:84: 34:2e:c4:a9:71:4f:20:86:7f:0b:74:8f:10:de:82:ca:29:44: 8d:e8:ad:5a:49:a5:de:1b:94:44:d3:ef:da:ea:cd:30:6e:fc: 3f:9c:b5:cc:89:3f:01:b1:ea:70:27:40:c7:8e:bf:c3:4f:d4: ad:e6:9f:84:20:a0:1f:3b:3f:58:e4:31:02:2a:02:c6:a7:91: 2b:0d:e5:1b:f5:58:74:69:c1:1d:01:a7:a6:3f:0a:8e:1c:52: 2a:bb:28:56:98:3f:81:d1:63:22:f0:fc:82:6f:d0:69:ab:6c: b4:3f:a2:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwNTIwMTkxODM1WhcNMjYwNTI3MTkxODM1WjAYMRYwFAYD VQQDEw02YTBlMDkwYi0zMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+7vThEkYPppfDVoTes2KAYgkitFQkyXFt8emKaMoxOZyL3SoISAzuByow7E O4pFEDV9HPBjdYtpgVBOtAS3zoRIAK6FGZB/0HJkSt1mUzug9BYuyePYVaj2FRwE c7xdxQotd3TRMH1gcmYJOO8xkcBeMBADrS/J+r+M4AH9GhIHNB2O8ckuXSmXEKKA 7R5V5JWLWDm/yLO5EsBFDWOQ6StTcLEkblhwISTiUWY0t3N99SHFDJc+CC1S1TOK qXV4XQLoh1ybhqL/SfON8RfBfr5ZXMDAa3842jUIjk6NT1EFMmLdESmxmmbLuHzy Gd8Bm5laN1k8QnnwpGEEWbuQawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuvNKk/ gy7RJ34xUwD6/plwaQ0HMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiX3kmOpGaGsrv6dURm69aweGYY4B6r8KozRIjY3rkw6xBba7m4ph5GDlhals aF0MArNu2siZyntR738LITe1G3bBgpv7gwYTh9h0T58mCOwu3t1AJnVH4MysD7vh Rw2Alt7IRH5t9IoqCQrjjlZ/FG7a6ECM6mUQvxjDN6wAFl1sgnUH+wE4ETNvKZsv 44GENC7EqXFPIIZ/C3SPEN6CyilEjeitWkml3huURNPv2urNMG78P5y1zIk/AbHq cCdAx46/w0/UreafhCCgHzs/WOQxAioCxqeRKw3lG/VYdGnBHQGnpj8KjhxSKrso Vpg/gdFjIvD8gm/QaatstD+iQA== -----END CERTIFICATE-----Generated at Thu May 21 10:53:41 2026 by rpki-client