$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: RIyl8zYo662YoBp0NDr3NMU66iU632PotOaz/InalGU= Subject key identifier: 68:47:2E:62:A9:EF:8F:DE:0E:0F:BF:73:03:F7:EF:1E:3E:C8:0E:D6 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0C19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0C10 Signing time: Tue 12 May 2026 18:51:29 +0000 Manifest this update: Tue 12 May 2026 18:51:29 +0000 Manifest next update: Tue 19 May 2026 18:51:29 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: izIthPr3x6+ScpI0IwXMhOF7xZWTQ4/MacfE9GOwXPw=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: TI2KVdmBR8c+EKodG88ZYvgfW8TmL2x0GR8/djTO5Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: May 12 18:51:29 2026 GMT Not After : May 19 18:51:29 2026 GMT Subject: CN=6a0376b1-625d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:d7:ef:fd:7c:02:15:85:73:6e:84:3a:c7: 5c:b6:dd:71:4c:d0:c4:e1:2c:aa:36:02:08:e7:ac: 49:89:22:43:fe:5f:27:84:48:0b:9b:48:46:b6:0b: 7a:d9:12:fd:ab:33:a1:2f:6e:79:20:3e:79:8c:96: b7:4e:aa:43:32:44:8a:86:5c:7c:e5:44:61:a8:d4: 55:11:5b:72:b3:70:2e:de:34:76:9f:66:48:f8:b0: f9:44:0e:96:34:0e:df:55:26:7c:d1:ce:b9:ef:ca: a0:c6:e3:91:cf:4c:cb:af:55:12:20:b6:ee:e8:09: 61:d4:37:62:70:15:7d:64:77:14:1f:b1:bc:81:d5: ef:c4:d9:05:a4:e8:8d:ff:09:62:d3:e8:f4:4b:73: 2d:67:6e:9e:af:a8:52:66:e1:29:6b:a2:93:b6:d0: 52:5d:da:4c:39:a0:44:03:7e:43:7d:50:e0:20:13: a8:f0:af:c5:29:32:22:20:f3:11:d1:bf:b9:9c:6b: 99:c2:b3:5a:4e:ef:ea:69:9f:0b:5c:6d:d5:3e:2c: 56:cc:37:66:47:bd:bc:e5:b0:2f:7c:4d:83:76:1a: 06:bd:f7:85:02:30:c3:45:49:07:29:a3:c2:5c:0c: 8a:f8:d9:2a:3f:63:e4:20:c6:19:c3:81:11:0f:e7: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:2E:62:A9:EF:8F:DE:0E:0F:BF:73:03:F7:EF:1E:3E:C8:0E:D6 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ee:f6:e8:ae:1f:89:86:eb:67:59:08:f6:4a:e6:3d:b0:05: 9c:c8:30:d5:f5:79:48:63:24:15:5f:73:ff:b2:5c:95:0c:1d: 85:d7:5b:a3:36:cc:df:78:d8:9e:b3:f2:c8:2d:6a:cc:80:68: f5:a5:16:52:a2:d6:33:0b:8e:8f:a7:c7:1f:bb:47:13:c7:7e: 29:42:a1:68:d2:92:fd:8f:22:1a:35:99:e8:5c:34:7e:ea:37: ab:5a:29:ee:dd:c8:58:af:98:be:24:55:68:ae:f9:33:59:86: 23:7e:4e:dd:d2:76:ee:14:09:ab:57:dc:79:fe:d2:2c:d1:29: 37:20:95:d2:97:23:61:75:91:aa:be:3c:1c:97:83:4e:c9:65: 80:4f:2a:77:f5:26:2c:03:55:ee:35:33:cd:21:0a:2a:04:be: 61:a0:4a:70:e5:71:2a:da:45:d2:d2:bd:a4:9e:cd:58:7d:d8: 5c:1c:07:ca:85:29:7f:6b:23:75:43:31:7a:2f:4a:72:97:2b: 6d:fa:21:2b:ba:63:b6:4b:76:40:12:51:4d:e9:dd:73:5a:10: c5:8a:4b:a7:4f:f4:43:bb:60:6d:f1:b8:cf:96:f8:d5:b6:6b: f0:7c:f5:44:38:94:12:c4:36:9a:1b:61:a0:24:be:89:d4:33: f5:60:34:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjYwNTEyMTg1MTI5WhcNMjYwNTE5MTg1MTI5WjAYMRYwFAYD VQQDEw02YTAzNzZiMS02MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUbX7/18AhWFc26EOsdctt1xTNDE4SyqNgII56xJiSJD/l8nhEgLm0hGtgt6 2RL9qzOhL255ID55jJa3TqpDMkSKhlx85URhqNRVEVtys3Au3jR2n2ZI+LD5RA6W NA7fVSZ80c6578qgxuORz0zLr1USILbu6Alh1DdicBV9ZHcUH7G8gdXvxNkFpOiN /wli0+j0S3MtZ26er6hSZuEpa6KTttBSXdpMOaBEA35DfVDgIBOo8K/FKTIiIPMR 0b+5nGuZwrNaTu/qaZ8LXG3VPixWzDdmR7285bAvfE2DdhoGvfeFAjDDRUkHKaPC XAyK+NkqP2PkIMYZw4ERD+cdTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhHLmKp 74/eDg+/cwP37x4+yA7WMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH+726K4fiYbrZ1kI9krmPbAFnMgw1fV5SGMkFV9z/7JclQwdhddbozbM33jY nrPyyC1qzIBo9aUWUqLWMwuOj6fHH7tHE8d+KUKhaNKS/Y8iGjWZ6Fw0fuo3q1op 7t3IWK+YviRVaK75M1mGI35O3dJ27hQJq1fcef7SLNEpNyCV0pcjYXWRqr48HJeD TsllgE8qd/UmLANV7jUzzSEKKgS+YaBKcOVxKtpF0tK9pJ7NWH3YXBwHyoUpf2sj dUMxei9KcpcrbfohK7pjtkt2QBJRTendc1oQxYpLp0/0Q7tgbfG4z5b41bZr8Hz1 RDiUEsQ2mhthoCS+idQz9WA0VQ== -----END CERTIFICATE-----Generated at Wed May 13 16:39:18 2026 by rpki-client