$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: jS2yryY/GdUESUQZcRbX8ohxn3Fthh4iK+pmC+ZRBFM= Subject key identifier: 70:6B:1E:47:9B:ED:C1:E4:00:31:93:97:FF:FA:A4:69:60:A9:59:D0 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 08E3 Signing time: Tue 12 May 2026 20:25:52 +0000 Manifest this update: Tue 12 May 2026 20:25:52 +0000 Manifest next update: Tue 19 May 2026 20:25:52 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: blHQ2V39mYfe+3MYyVN+pZc+R+xr2QQRnTLSEOSIy5c=) 2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=) 3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: May 12 20:25:52 2026 GMT Not After : May 19 20:25:52 2026 GMT Subject: CN=6a038cd0-e461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:1d:1a:5d:30:12:e0:9c:66:37:19:bb:36: c4:1b:15:e3:b2:15:96:d3:3d:d2:66:33:56:0f:23: d9:6d:4c:65:07:89:26:5e:5e:67:be:68:67:6f:4a: ea:60:60:b2:f7:38:bd:86:53:a1:0e:d8:4a:4a:40: c7:12:80:e9:5b:e7:ee:07:0b:7d:de:f5:1b:01:a5: 44:6b:6f:36:76:00:94:a6:2e:d5:6a:45:85:aa:cc: d8:01:fa:31:50:ba:e8:04:80:2a:33:0f:96:e3:80: 56:23:49:fb:39:cb:55:62:df:78:f9:9b:9e:3a:f3: 50:52:e4:96:68:22:8c:7b:92:50:3f:b5:04:b2:c1: 06:cc:9b:5d:54:df:2f:35:c1:46:73:08:61:55:0f: a5:10:6c:29:e5:d4:50:32:6f:f2:e0:38:27:87:9a: a3:ef:e0:81:37:5a:37:dd:df:ae:b8:69:bd:0b:d6: 9e:54:96:f3:4d:a4:df:54:64:3a:8d:c2:0e:a5:6d: e0:19:cf:9e:c5:3c:63:75:bd:f1:ff:a4:53:c7:5f: 1e:37:0d:a5:31:06:2c:0b:e3:5f:5d:37:81:00:85: 77:b6:db:85:6c:c1:f8:e8:ea:9c:06:8b:15:a3:2d: 71:41:30:50:2a:8c:96:a0:f6:82:d9:07:82:e2:7c: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:1E:47:9B:ED:C1:E4:00:31:93:97:FF:FA:A4:69:60:A9:59:D0 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4a:19:fc:7d:68:59:8d:b1:43:aa:02:c8:17:cc:a1:25:32: 89:9c:9e:47:45:48:f7:45:35:7c:b0:96:6c:89:c4:a2:3d:be: cc:07:95:a6:59:8b:33:e1:58:08:94:de:91:e7:a4:77:1a:de: f1:c3:7f:2a:04:ca:ef:5f:4d:23:16:f0:2f:97:2c:d6:3d:f0: 7c:bb:5c:0e:82:22:13:23:2b:94:7a:fc:54:08:e4:54:43:d6: 90:e3:0a:cd:5f:34:a7:c6:20:8e:7b:02:81:cf:01:71:23:b6: 18:3f:7e:a7:9f:a5:ae:1f:4e:3d:09:3c:85:eb:ad:db:0b:82: 92:58:77:85:94:a3:7a:b5:86:01:28:56:c3:06:a5:0d:a3:62: bf:ca:13:34:e8:ed:d0:43:be:96:23:a5:5c:80:24:81:08:ec: 13:9e:37:a0:44:d2:05:03:59:e6:e4:78:f5:87:48:4c:35:4a: e6:93:c4:c5:19:ce:f6:08:15:9b:09:0f:85:10:84:30:9c:f0: af:9c:9d:cf:80:0c:b5:99:56:f0:98:35:7c:e9:7d:1a:fb:94: e7:41:4b:9a:d9:1a:ef:be:40:1e:1f:07:66:41:74:53:33:2f: 17:6d:a9:1c:70:ad:a3:5b:c1:ed:f2:df:f4:f0:97:f7:d7:ea: d7:ac:15:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjYwNTEyMjAyNTUyWhcNMjYwNTE5MjAyNTUyWjAYMRYwFAYD VQQDEw02YTAzOGNkMC1lNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGsdGl0wEuCcZjcZuzbEGxXjshWW0z3SZjNWDyPZbUxlB4kmXl5nvmhnb0rq YGCy9zi9hlOhDthKSkDHEoDpW+fuBwt93vUbAaVEa282dgCUpi7VakWFqszYAfox ULroBIAqMw+W44BWI0n7OctVYt94+ZueOvNQUuSWaCKMe5JQP7UEssEGzJtdVN8v NcFGcwhhVQ+lEGwp5dRQMm/y4Dgnh5qj7+CBN1o33d+uuGm9C9aeVJbzTaTfVGQ6 jcIOpW3gGc+exTxjdb3x/6RTx18eNw2lMQYsC+NfXTeBAIV3ttuFbMH46OqcBosV oy1xQTBQKoyWoPaC2QeC4nzTWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBrHkeb 7cHkADGTl//6pGlgqVnQMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXkoZ/H1oWY2xQ6oCyBfMoSUyiZyeR0VI90U1fLCWbInEoj2+zAeVplmLM+FY CJTekeekdxre8cN/KgTK719NIxbwL5cs1j3wfLtcDoIiEyMrlHr8VAjkVEPWkOMK zV80p8YgjnsCgc8BcSO2GD9+p5+lrh9OPQk8heut2wuCklh3hZSjerWGAShWwwal DaNiv8oTNOjt0EO+liOlXIAkgQjsE543oETSBQNZ5uR49YdITDVK5pPExRnO9ggV mwkPhRCEMJzwr5ydz4AMtZlW8Jg1fOl9GvuU50FLmtka775AHh8HZkF0UzMvF22p HHCto1vB7fLf9PCX99fq16wVkg== -----END CERTIFICATE-----Generated at Wed May 13 02:56:35 2026 by rpki-client