$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: BBaHXb4jidAiS+iMuKrGxpyjqewhnxpQ8HfplJxaW34= Subject key identifier: FE:F3:2C:F5:A2:79:E4:F3:D9:1A:83:1F:1F:00:31:CF:E2:E7:DF:FF Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: A4 Signing time: Mon 11 May 2026 07:26:13 +0000 Manifest this update: Mon 11 May 2026 07:26:12 +0000 Manifest next update: Mon 18 May 2026 07:26:12 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: u5Q2UH5zS3OfOJ/3t1UqLg971XHTHDlsS5Q4iUwKiSM=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: May 11 07:26:12 2026 GMT Not After : May 18 07:26:12 2026 GMT Subject: CN=6a018494-cef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:c8:04:62:27:4f:43:6a:d0:ca:66:fb:48: 42:1c:b4:1f:a0:4f:48:e4:2b:7d:2f:92:9b:ad:cb: 9e:fd:a4:bc:a4:d5:08:2c:b7:f4:e1:6d:a6:8e:af: 2a:a9:7c:93:c8:9e:12:ed:db:c1:3f:3e:12:c1:ff: d7:16:f9:e6:e1:9c:ba:87:16:77:4b:15:1f:e9:f1: 9f:4f:5f:85:12:30:2f:78:33:17:9b:4a:6d:9d:83: 35:5b:fb:04:4f:f9:0b:57:2a:7c:17:5c:d1:05:bf: 99:ad:8c:62:dc:33:93:42:d6:a4:12:10:8c:4e:06: fe:0b:f9:aa:95:37:86:c1:84:c3:ca:c4:95:3c:28: 43:5b:89:d4:0f:15:3f:1d:1d:e4:a6:0b:aa:1b:a4: 9b:cc:f6:06:54:c9:10:a0:33:5f:da:e2:46:58:18: 64:54:18:e7:b0:51:88:87:66:f2:8c:dc:eb:e1:0e: 14:c3:d6:e3:dd:5e:25:8e:53:45:52:82:3e:f8:f8: 7e:d4:39:5f:5c:a5:08:8e:1e:c2:cd:5c:d8:13:94: 37:83:c2:e8:64:96:f4:b4:18:00:6e:cd:d4:8c:17: 26:5d:0e:b1:f7:92:57:31:61:e5:37:5a:8f:71:d9: a2:dd:cd:5c:72:45:80:58:a7:82:07:8a:bd:1a:10: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F3:2C:F5:A2:79:E4:F3:D9:1A:83:1F:1F:00:31:CF:E2:E7:DF:FF X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:80:34:38:98:e9:7b:af:b9:f1:b1:8c:bd:40:7a:99:d9:6f: 3a:c3:bc:9c:8e:d2:fb:df:c9:af:e2:e6:e5:82:6d:07:ce:f9: 01:7f:34:d1:05:24:33:d9:2f:18:98:d2:4b:5a:43:ef:d0:c7: 3d:dd:a4:d6:f5:cb:ae:b6:53:a9:62:3f:8d:57:94:99:62:3e: cb:55:0f:52:2d:6f:11:ff:7b:ac:ad:9a:aa:ae:d2:1c:2e:2b: 48:fb:fa:d1:58:25:e6:99:e9:42:81:b4:87:10:7d:1c:78:0e: 45:b4:8b:5b:0d:3d:41:9a:c4:01:d8:71:5a:4a:a3:38:72:3f: 09:65:bb:8d:9f:c5:f1:56:55:58:14:2d:4f:f5:fd:a5:db:83: 3c:e2:83:68:80:ff:f6:7a:a5:75:06:8d:2e:73:6a:d9:68:8b: 1b:b6:6d:c4:e6:8a:88:40:00:6c:40:c7:ed:90:cd:20:1a:f2: 66:89:6e:7d:19:f6:96:8d:8a:db:3b:9c:46:62:3f:85:ff:98: 53:6a:86:98:2c:7a:b3:f2:da:a4:81:21:79:cd:a6:5d:4e:b4: 1b:55:59:13:27:49:d8:0a:13:75:b7:32:51:bb:35:df:0c:2e: 55:52:95:89:cf:5c:b3:7a:b3:bc:b7:84:48:f2:df:65:80:13: ac:10:cd:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4 RUMyQTMyODkwHhcNMjYwNTExMDcyNjEyWhcNMjYwNTE4MDcyNjEyWjAYMRYwFAYD VQQDEw02YTAxODQ5NC1jZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34HIBGInT0Nq0Mpm+0hCHLQfoE9I5Ct9L5Kbrcue/aS8pNUILLf04W2mjq8q qXyTyJ4S7dvBPz4Swf/XFvnm4Zy6hxZ3SxUf6fGfT1+FEjAveDMXm0ptnYM1W/sE T/kLVyp8F1zRBb+ZrYxi3DOTQtakEhCMTgb+C/mqlTeGwYTDysSVPChDW4nUDxU/ HR3kpguqG6SbzPYGVMkQoDNf2uJGWBhkVBjnsFGIh2byjNzr4Q4Uw9bj3V4ljlNF UoI++Ph+1DlfXKUIjh7CzVzYE5Q3g8LoZJb0tBgAbs3UjBcmXQ6x95JXMWHlN1qP cdmi3c1cckWAWKeCB4q9GhBjwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7zLPWi eeTz2RqDHx8AMc/i59//MB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4 REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF4A0OJjpe6+58bGMvUB6mdlvOsO8nI7S+9/Jr+Lm5YJtB875AX800QUkM9kv GJjSS1pD79DHPd2k1vXLrrZTqWI/jVeUmWI+y1UPUi1vEf97rK2aqq7SHC4rSPv6 0Vgl5pnpQoG0hxB9HHgORbSLWw09QZrEAdhxWkqjOHI/CWW7jZ/F8VZVWBQtT/X9 pduDPOKDaID/9nqldQaNLnNq2WiLG7ZtxOaKiEAAbEDH7ZDNIBryZolufRn2lo2K 2zucRmI/hf+YU2qGmCx6s/LapIEhec2mXU60G1VZEydJ2AoTdbcyUbs13wwuVVKV ic9cs3qzvLeESPLfZYATrBDNkQ== -----END CERTIFICATE-----Generated at Wed May 13 03:10:35 2026 by rpki-client