$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: Fg+zzvjd+T888SBKGiHF5F+UudGBEdGWrJc/1OIiRSU= Subject key identifier: 4A:36:49:6E:E2:8D:0F:F9:D4:B1:5F:CB:36:07:4E:20:45:4F:86:66 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 01FA Signing time: Wed 13 May 2026 03:18:52 +0000 Manifest this update: Wed 13 May 2026 03:18:52 +0000 Manifest next update: Wed 20 May 2026 03:18:52 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: 1rjms81GHH7m/niZobvmw9GGeki9WH7puZjGq2ZmLek=) 2: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: May 13 03:18:52 2026 GMT Not After : May 20 03:18:52 2026 GMT Subject: CN=6a03ed9c-522b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:ff:91:ce:12:ed:a5:fb:f4:ca:e0:09:32: e0:b5:04:5a:af:0d:00:87:d1:53:21:d3:99:05:a1: b0:05:41:01:d1:e4:36:b8:d3:e0:d1:04:4b:7f:ff: 57:8a:01:e2:04:c7:d4:02:60:f5:5f:00:05:52:be: 6c:f0:0f:48:a6:f7:5f:5b:b0:2a:af:46:9a:0f:3e: f5:72:a7:9a:98:ea:7c:f9:4d:26:73:9a:8a:ac:a2: 89:e3:31:ef:be:67:c8:ef:57:9b:41:67:7c:95:b7: bb:f0:f3:95:24:5a:55:34:f8:32:38:c2:a3:85:13: 0e:dc:7e:c3:3a:69:dc:f9:4f:ae:93:e2:24:c6:7f: 9a:6c:f4:f6:80:3e:f0:1f:8f:e0:e4:11:0d:9c:1d: 87:f9:32:b9:1f:25:5d:98:74:84:43:2b:0b:c5:78: 9d:5e:a1:18:ed:2d:32:fd:8a:2b:49:e1:e8:b4:41: 74:cf:ba:07:49:5a:c6:89:d7:ff:f9:9e:c5:69:f0: f1:5f:35:99:5b:30:07:86:8c:b9:18:fa:2f:69:94: f8:37:56:af:1b:8a:5f:7e:25:c1:a0:70:41:28:30: eb:40:ae:d3:f4:f4:9a:19:16:8d:0c:03:46:62:a3: 05:68:3e:d8:22:19:c9:d6:12:85:94:09:a0:ab:f4: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:36:49:6E:E2:8D:0F:F9:D4:B1:5F:CB:36:07:4E:20:45:4F:86:66 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:41:e5:aa:59:fb:15:e7:eb:27:b4:92:f8:35:c3:d7:03:87: 87:2c:e2:55:e6:83:f7:ef:f7:7a:8c:ef:45:ce:ec:60:51:4f: 15:0f:e0:82:63:3e:c6:61:b8:2f:ea:d8:b9:f9:f2:a0:65:ef: 09:c2:ff:50:2a:96:32:ce:18:ba:6e:e9:2a:95:32:51:9d:45: f0:7a:e8:e8:14:e9:e0:77:8c:1d:4f:0d:41:e0:7d:3d:80:da: 31:d5:17:e8:3e:11:5f:bc:22:cb:a1:78:73:9f:15:1a:19:e4: 61:0c:a8:06:e4:b6:aa:35:3d:cd:f1:08:ad:09:a4:4c:d1:b7: f2:84:40:29:c2:f0:15:ad:69:a9:ec:89:5c:a6:f5:fa:52:c8: 83:09:44:83:b9:a2:16:64:85:30:37:c2:ad:57:90:61:27:5a: 88:b5:e2:34:55:d7:50:3a:c5:19:6c:9d:c4:b8:22:6a:07:2c: 1e:c2:65:da:d0:e0:ae:cd:7f:d0:51:6c:e9:70:37:92:cc:d6: 92:f3:71:3d:bd:c0:9e:3f:da:32:4c:1d:ff:31:ec:10:dd:14: 07:29:e2:fa:74:94:36:ea:8e:b0:3b:70:24:69:56:2f:86:c8: 2c:f6:ca:47:0b:a7:44:6b:02:24:3c:41:63:75:3f:4c:58:07: d5:6b:2c:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwNTEzMDMxODUyWhcNMjYwNTIwMDMxODUyWjAYMRYwFAYD VQQDEw02YTAzZWQ5Yy01MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8P/kc4S7aX79MrgCTLgtQRarw0Ah9FTIdOZBaGwBUEB0eQ2uNPg0QRLf/9X igHiBMfUAmD1XwAFUr5s8A9IpvdfW7Aqr0aaDz71cqeamOp8+U0mc5qKrKKJ4zHv vmfI71ebQWd8lbe78POVJFpVNPgyOMKjhRMO3H7DOmnc+U+uk+Ikxn+abPT2gD7w H4/g5BENnB2H+TK5HyVdmHSEQysLxXidXqEY7S0y/YorSeHotEF0z7oHSVrGidf/ +Z7FafDxXzWZWzAHhoy5GPovaZT4N1avG4pffiXBoHBBKDDrQK7T9PSaGRaNDANG YqMFaD7YIhnJ1hKFlAmgq/SzQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEo2SW7i jQ/51LFfyzYHTiBFT4ZmMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe0Hlqln7FefrJ7SS+DXD1wOHhyziVeaD9+/3eozvRc7sYFFPFQ/ggmM+xmG4 L+rYufnyoGXvCcL/UCqWMs4Yum7pKpUyUZ1F8Hro6BTp4HeMHU8NQeB9PYDaMdUX 6D4RX7wiy6F4c58VGhnkYQyoBuS2qjU9zfEIrQmkTNG38oRAKcLwFa1pqeyJXKb1 +lLIgwlEg7miFmSFMDfCrVeQYSdaiLXiNFXXUDrFGWydxLgiagcsHsJl2tDgrs1/ 0FFs6XA3kszWkvNxPb3Anj/aMkwd/zHsEN0UByni+nSUNuqOsDtwJGlWL4bILPbK RwunRGsCJDxBY3U/TFgH1Wss7w== -----END CERTIFICATE-----Generated at Wed May 13 09:22:49 2026 by rpki-client