$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: 6ZG+pxv1kEfEhDYi5FV2AYfMcxgFmzFSJIXv1uZ+Klw= Subject key identifier: DC:4B:95:63:C9:FE:AA:52:A3:07:C3:C0:43:63:2E:7A:A2:3E:31:25 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0EEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0EBA Signing time: Tue 12 May 2026 17:43:38 +0000 Manifest this update: Tue 12 May 2026 17:43:37 +0000 Manifest next update: Tue 19 May 2026 17:43:37 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: RJIQ1+OfDsZ1vozYWnZ6en3HweuqRcz45unh5HQHDP0=) 2: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 3: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) 5: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 7: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3822 (0xeee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: May 12 17:43:37 2026 GMT Not After : May 19 17:43:37 2026 GMT Subject: CN=6a0366c9-e900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:72:60:69:11:11:d4:bd:06:5e:83:82:00: 11:c7:df:b9:5a:56:a8:9a:b0:36:a8:2f:e4:3c:50: 03:cb:e7:2f:4c:37:74:d2:8b:98:82:29:8f:29:5f: ff:60:fe:c7:0d:70:a6:8e:68:37:36:81:1a:66:57: 7a:7c:cc:4f:17:7b:0f:bf:75:b1:8c:50:60:f0:04: 3f:dd:80:a9:c9:ab:cc:55:a1:52:22:45:98:24:71: ff:08:db:e9:e6:b0:7c:7e:d9:69:f2:f7:df:1c:3c: fd:b6:18:0f:e5:75:e1:09:f7:68:cf:c0:48:c5:78: f5:1c:15:7c:85:95:d0:90:de:b0:07:75:3e:8e:61: d0:e1:18:d1:22:81:db:3e:90:01:35:21:e0:00:47: b2:c7:f1:d0:bb:84:5c:c2:34:b2:93:98:20:9c:33: 8e:e1:d4:c3:f2:d4:97:46:47:83:b1:ee:65:e6:30: 7c:6f:1a:b3:de:c0:9f:22:27:1b:7b:d6:89:fd:c9: d3:f2:77:db:a4:30:ce:07:8a:47:6d:09:e1:87:88: ce:e4:98:9a:83:64:eb:ef:be:5c:2e:6a:ea:0f:8f: e9:40:07:a1:2e:d2:da:12:ca:6e:7e:f5:fb:c1:77: a6:3f:2e:16:bd:c3:7a:6c:94:a3:38:9b:07:cb:03: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:95:63:C9:FE:AA:52:A3:07:C3:C0:43:63:2E:7A:A2:3E:31:25 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:99:b7:99:21:bf:fd:53:97:bf:55:b1:b5:9b:6f:c0:d4:38: f2:20:09:38:b7:c4:d2:93:58:83:9d:ae:70:a5:97:1d:4e:54: 71:cf:d3:df:6b:08:be:13:32:0b:2f:1d:62:bc:22:3b:cf:81: 0f:e4:df:f3:e6:e5:a4:86:3a:4c:1c:0a:16:09:2c:bf:8a:97: 46:e2:fc:6d:32:27:68:a0:54:a3:20:18:d5:f9:52:7f:86:1c: ab:81:89:aa:05:1d:d5:c5:25:30:51:30:0f:4d:45:ad:16:41: 44:8d:35:54:b5:dd:e1:e3:8c:25:84:1b:51:46:19:5c:62:89: 2f:d2:bd:3e:0f:95:31:ef:bf:5d:ed:f4:90:5e:d5:b4:1a:85: 51:bb:60:ab:7b:f9:27:77:ff:a9:03:3c:85:99:e1:5b:17:54: 36:95:b8:2a:d1:43:c9:1f:ad:c8:44:92:3b:ac:79:f5:ee:d4: ac:d2:3b:aa:06:ce:bc:90:be:8d:6f:3e:b5:ab:ea:30:e3:22: 77:cb:e8:b5:00:41:67:01:5e:ed:53:f5:e6:82:3e:f3:c4:88: 20:36:d1:6a:5d:e7:40:ae:5a:d6:27:ea:24:f8:13:78:52:3a: a8:f3:54:1b:40:98:8f:bf:25:89:db:af:0c:72:2b:9f:36:5a: 0e:cc:37:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwNTEyMTc0MzM3WhcNMjYwNTE5MTc0MzM3WjAYMRYwFAYD VQQDEw02YTAzNjZjOS1lOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NRyYGkREdS9Bl6DggARx9+5WlaomrA2qC/kPFADy+cvTDd00ouYgimPKV// YP7HDXCmjmg3NoEaZld6fMxPF3sPv3WxjFBg8AQ/3YCpyavMVaFSIkWYJHH/CNvp 5rB8ftlp8vffHDz9thgP5XXhCfdoz8BIxXj1HBV8hZXQkN6wB3U+jmHQ4RjRIoHb PpABNSHgAEeyx/HQu4RcwjSyk5ggnDOO4dTD8tSXRkeDse5l5jB8bxqz3sCfIicb e9aJ/cnT8nfbpDDOB4pHbQnhh4jO5Jiag2Tr775cLmrqD4/pQAehLtLaEspufvX7 wXemPy4WvcN6bJSjOJsHywPucQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxLlWPJ /qpSowfDwENjLnqiPjElMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqpm3mSG//VOXv1WxtZtvwNQ48iAJOLfE0pNYg52ucKWXHU5Ucc/T32sIvhMy Cy8dYrwiO8+BD+Tf8+blpIY6TBwKFgksv4qXRuL8bTInaKBUoyAY1flSf4Ycq4GJ qgUd1cUlMFEwD01FrRZBRI01VLXd4eOMJYQbUUYZXGKJL9K9Pg+VMe+/Xe30kF7V tBqFUbtgq3v5J3f/qQM8hZnhWxdUNpW4KtFDyR+tyESSO6x59e7UrNI7qgbOvJC+ jW8+tavqMOMid8votQBBZwFe7VP15oI+88SIIDbRal3nQK5a1ifqJPgTeFI6qPNU G0CYj78liduvDHIrnzZaDsw3BA== -----END CERTIFICATE-----Generated at Wed May 13 05:13:53 2026 by rpki-client