$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: uufitjeSv/gzRsl201UMp1SewH4A80yN4+dX04mrCEA= Subject key identifier: D7:90:8C:5D:38:95:45:BF:EC:78:C7:8B:61:08:58:02:89:F5:BC:8C Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0DC1 Signing time: Tue 12 May 2026 17:56:42 +0000 Manifest this update: Tue 12 May 2026 17:56:42 +0000 Manifest next update: Tue 19 May 2026 17:56:42 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: ZGZkMcazx267erSlr3zVV4NsHehVdbZRJIZGW77jGFE=) 2: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 21I1lPOhCB6OoTCDKwmnVs4XWHIQNSrXN0TNGGcuqdQ=) 3: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: ygQB2y8hsTLzbf5SF7WCvYfKunhmdLdBTxW0WpljHeM=) 4: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: wI1y6ntLsUWaWyufcxzOljo2NrfksupJylZSnJ7IKS8=) 5: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: GtQoqjQUirpvjAYOKzxLFZEEug+qoArWCD33oXD/Vgw=) 6: 677F3316E02711E9AB669750C4F9AE02.roa (hash: ULb7MnuSpC+RNv8YH7wBDdLNbPZxB2oAuIx44Pnr+I8=) 7: AD727D903F8111F1AAE343DCAF833773.roa (hash: Iqc0IgAmJNB6VXjCORCRruuoNfj02aOsq9++fLh62zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: May 12 17:56:42 2026 GMT Not After : May 19 17:56:42 2026 GMT Subject: CN=6a0369da-c16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:36:be:26:64:a3:0a:b8:8e:59:7a:7f:76: 7e:da:65:56:3a:da:5a:f2:86:92:b0:8b:b1:e8:0f: 7c:9a:a2:9e:b7:00:b8:81:78:7b:44:8a:e9:aa:1e: d0:27:68:52:aa:cc:1e:c3:d0:da:99:dd:04:a0:55: 12:cd:fe:39:0b:7b:ab:b1:4e:d5:19:78:7b:e6:f0: 91:76:89:58:88:b9:77:62:2c:6e:7d:6f:d1:9e:2d: 27:3d:57:49:ae:24:59:72:66:e4:ad:fe:50:8b:e6: 3b:8c:c1:07:f1:d3:f2:74:77:82:94:bc:ed:13:3e: d7:99:66:d1:dd:de:d0:a0:aa:75:3f:11:41:13:5a: 75:4f:07:38:c9:47:b1:f0:5a:86:b1:98:ed:84:77: 40:c3:32:ad:28:f2:1e:3a:f4:a6:9b:97:70:af:a7: 60:a2:f8:90:ff:ca:5b:ca:d1:11:6e:aa:e4:4e:cf: e2:82:ed:9a:2f:2c:68:69:39:65:20:8f:6d:61:44: 91:b0:bf:87:a4:ca:76:17:56:11:f2:35:b4:31:b0: 7a:53:15:f2:8b:e8:67:e2:3a:90:77:c3:b0:b8:6a: 5a:75:b4:89:10:1a:60:30:a8:dc:e1:53:1d:c3:41: 73:df:77:09:21:78:9f:ce:df:21:e5:b8:32:64:7e: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:90:8C:5D:38:95:45:BF:EC:78:C7:8B:61:08:58:02:89:F5:BC:8C X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:23:b4:5b:4c:09:79:73:26:34:42:b5:6d:5d:39:a4:0e:dd: af:d9:ad:9a:ad:b6:6d:80:3d:9f:04:0a:f0:89:91:fb:1c:dc: 4a:77:55:84:99:87:18:4b:0e:eb:c5:3d:30:bd:8d:8e:8e:6f: 59:2b:84:20:3d:cf:5e:fc:1c:2e:12:74:d6:f3:53:0a:a1:dd: 2a:3b:96:4d:75:02:49:6c:7d:d2:24:0a:cb:a5:c2:79:7a:48: a0:87:8d:2b:27:b7:cd:dc:39:9b:38:b8:51:62:ad:83:2b:09: 12:e1:c0:71:ac:31:43:53:bb:af:6d:ab:0b:97:22:93:6d:ac: 7f:6a:81:b2:1b:a4:ee:ad:9b:24:e4:86:03:c5:61:cb:94:42: 0f:a4:ee:8c:a0:8a:e6:59:20:51:6b:b6:6e:da:43:28:a7:81: a4:8b:a3:da:1a:7a:79:1a:0e:68:72:5c:44:80:09:78:90:be: 3f:ec:f6:fb:87:28:b6:ca:18:4b:c5:af:06:95:62:e1:9a:52: e6:12:0f:91:e3:f4:c0:2e:b7:72:0a:12:37:96:c8:9a:1d:46: 6f:51:f3:a2:ae:82:1e:f4:b4:53:f5:8f:42:73:2d:98:04:7e: 38:f2:fc:62:7a:36:61:4d:a4:07:db:4b:1f:4a:b9:ac:1e:d3: 53:d8:28:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwNTEyMTc1NjQyWhcNMjYwNTE5MTc1NjQyWjAYMRYwFAYD VQQDEw02YTAzNjlkYS1jMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ao2viZkowq4jll6f3Z+2mVWOtpa8oaSsIux6A98mqKetwC4gXh7RIrpqh7Q J2hSqswew9Damd0EoFUSzf45C3ursU7VGXh75vCRdolYiLl3YixufW/Rni0nPVdJ riRZcmbkrf5Qi+Y7jMEH8dPydHeClLztEz7XmWbR3d7QoKp1PxFBE1p1Twc4yUex 8FqGsZjthHdAwzKtKPIeOvSmm5dwr6dgoviQ/8pbytERbqrkTs/igu2aLyxoaTll II9tYUSRsL+HpMp2F1YR8jW0MbB6UxXyi+hn4jqQd8OwuGpadbSJEBpgMKjc4VMd w0Fz33cJIXifzt8h5bgyZH58OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeQjF04 lUW/7HjHi2EIWAKJ9byMMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASyO0W0wJeXMmNEK1bV05pA7dr9mtmq22bYA9nwQK8ImR+xzcSndVhJmHGEsO 68U9ML2Njo5vWSuEID3PXvwcLhJ01vNTCqHdKjuWTXUCSWx90iQKy6XCeXpIoIeN Kye3zdw5mzi4UWKtgysJEuHAcawxQ1O7r22rC5cik22sf2qBshuk7q2bJOSGA8Vh y5RCD6TujKCK5lkgUWu2btpDKKeBpIuj2hp6eRoOaHJcRIAJeJC+P+z2+4cotsoY S8WvBpVi4ZpS5hIPkeP0wC63cgoSN5bImh1Gb1Hzoq6CHvS0U/WPQnMtmAR+OPL8 Yno2YU2kB9tLH0q5rB7TU9gokg== -----END CERTIFICATE-----Generated at Wed May 13 12:45:40 2026 by rpki-client