$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: vc4BJCJF2OSPwL6/NsWYi2CRDVXB/Yfsj4x7eJJD+xU= Subject key identifier: BF:6A:0F:F3:12:CB:A9:61:F3:6C:3C:97:7B:37:33:97:77:B3:45:7E Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 0868 Signing time: Tue 12 May 2026 20:48:29 +0000 Manifest this update: Tue 12 May 2026 20:48:28 +0000 Manifest next update: Tue 19 May 2026 20:48:28 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: wsKLgxqbOZQ7kkvTmx9dUTzlfltuEYsUL+/yE4i0mFk=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: May 12 20:48:28 2026 GMT Not After : May 19 20:48:28 2026 GMT Subject: CN=6a03921d-facc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:7a:29:1b:22:eb:b3:6e:72:a5:09:87:c1: ef:4e:39:a7:1e:56:64:9b:f9:8a:ab:72:b1:df:b4: 5a:fb:dc:c8:e5:97:9d:c6:a0:a7:2b:82:74:96:cf: 5e:b2:d5:c7:4e:2b:13:98:7d:42:87:13:7d:fd:24: eb:88:89:51:57:42:56:01:5b:8a:86:b1:aa:0b:81: d6:89:66:4b:21:37:a5:f4:04:57:40:a0:34:48:2c: f2:26:c4:9e:b7:16:18:97:35:76:6b:6d:65:f2:ee: 7a:e8:c2:67:30:52:a7:59:ee:cb:3e:5a:52:8e:4e: 83:5b:d5:6b:cf:12:9f:28:e7:ce:30:7d:c4:9d:60: 95:66:88:67:22:e9:e4:2c:40:f7:97:44:99:c5:73: 76:45:94:d4:c6:ae:e6:b5:30:c0:95:10:88:80:58: ed:12:e2:c4:1a:d3:bd:72:bd:33:d1:03:c6:1e:d3: 67:b4:32:12:98:7c:77:df:f2:66:be:d7:d7:30:ea: bd:26:df:a7:05:66:62:2c:37:f3:cb:c7:8f:46:35: 2c:1e:5a:05:f5:db:b0:31:4e:e2:49:0f:96:60:be: e1:14:a1:5d:59:95:ee:57:6c:25:46:d5:22:a2:b9: ed:00:84:c2:8b:66:52:d1:1a:0c:84:46:83:12:bc: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6A:0F:F3:12:CB:A9:61:F3:6C:3C:97:7B:37:33:97:77:B3:45:7E X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:46:3d:d1:96:4a:b9:59:df:83:59:72:1a:0e:63:50:12:a5: ea:ea:07:48:92:76:b6:ba:5d:2b:9d:46:a1:9b:bc:a8:58:1a: c2:da:25:ef:6b:a8:b0:39:92:0b:fd:9f:05:4e:8a:9f:17:9f: 3c:53:bc:6c:16:69:04:ce:e3:07:ed:e9:f1:cc:8e:56:25:b5: e8:42:66:04:ce:47:89:39:dd:64:db:5a:c4:3f:15:8a:18:d6: 3d:6e:87:6a:bb:a1:3e:3a:de:53:ba:9a:a5:6d:aa:d7:ef:55: 66:bd:22:18:21:41:ef:15:2d:c3:21:dd:2d:12:8b:0c:63:a7: 1d:f0:76:7b:cd:56:24:29:cf:a6:1e:ca:2b:eb:0e:51:68:6a: f2:ff:6d:88:d7:97:f2:78:b3:54:71:ee:34:63:a2:47:b9:7d: 81:fb:47:7a:ba:de:ae:c5:bb:02:9f:8b:33:eb:1d:5d:94:b0: 3c:dd:97:5d:1b:ae:20:12:f9:cf:c3:a4:43:b3:83:43:ad:2c: f1:9f:07:7e:ff:0f:40:e9:e6:29:a4:c2:7f:20:03:91:1d:7d: 9f:cf:41:80:5b:1b:c0:71:e5:98:86:b2:8d:59:7b:99:7d:63: dd:ea:1e:fe:22:9b:ae:37:67:ae:72:bd:32:75:2f:d7:70:45: 05:71:18:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjYwNTEyMjA0ODI4WhcNMjYwNTE5MjA0ODI4WjAYMRYwFAYD VQQDEw02YTAzOTIxZC1mYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkWx6KRsi67NucqUJh8HvTjmnHlZkm/mKq3Kx37Ra+9zI5ZedxqCnK4J0ls9e stXHTisTmH1ChxN9/STriIlRV0JWAVuKhrGqC4HWiWZLITel9ARXQKA0SCzyJsSe txYYlzV2a21l8u566MJnMFKnWe7LPlpSjk6DW9VrzxKfKOfOMH3EnWCVZohnIunk LED3l0SZxXN2RZTUxq7mtTDAlRCIgFjtEuLEGtO9cr0z0QPGHtNntDISmHx33/Jm vtfXMOq9Jt+nBWZiLDfzy8ePRjUsHloF9duwMU7iSQ+WYL7hFKFdWZXuV2wlRtUi orntAITCi2ZS0RoMhEaDErwvPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9qD/MS y6lh82w8l3s3M5d3s0V+MB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMkY90ZZKuVnfg1lyGg5jUBKl6uoHSJJ2trpdK51GoZu8qFgawtol72uosDmS C/2fBU6KnxefPFO8bBZpBM7jB+3p8cyOViW16EJmBM5HiTndZNtaxD8VihjWPW6H aruhPjreU7qapW2q1+9VZr0iGCFB7xUtwyHdLRKLDGOnHfB2e81WJCnPph7KK+sO UWhq8v9tiNeX8nizVHHuNGOiR7l9gftHerrersW7Ap+LM+sdXZSwPN2XXRuuIBL5 z8OkQ7ODQ60s8Z8Hfv8PQOnmKaTCfyADkR19n89BgFsbwHHlmIayjVl7mX1j3eoe /iKbrjdnrnK9MnUv13BFBXEYEw== -----END CERTIFICATE-----Generated at Wed May 13 15:42:41 2026 by rpki-client