$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: qJVj9K8hnxhdAHvq0jhe8pTEHwE1oUBWf3t21fR9njc= Subject key identifier: 14:1A:7B:00:89:DB:A6:3F:AD:22:95:19:C2:B6:7D:5C:02:3D:A2:AF Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 0989 Signing time: Tue 12 May 2026 20:07:33 +0000 Manifest this update: Tue 12 May 2026 20:07:32 +0000 Manifest next update: Tue 19 May 2026 20:07:32 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: +QshLiVlxKeTe2KvNPDaJQQj4zizMiRhFa6qnQiyVr0=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: May 12 20:07:32 2026 GMT Not After : May 19 20:07:32 2026 GMT Subject: CN=6a038885-c369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:e2:35:ad:b0:40:61:ca:76:56:ef:f0:2e: a6:b9:ef:57:21:0d:20:39:6f:82:99:13:a3:e2:5b: 4d:a2:6d:8b:96:57:55:f2:20:2e:fc:41:d2:8f:9a: 02:2a:86:41:0a:ad:01:09:5b:15:d3:70:99:95:05: 30:69:3f:94:4a:0f:76:96:20:d6:71:cc:07:a4:aa: 2c:7e:5e:83:4d:b2:1a:f3:24:67:18:34:a5:e8:ba: 4c:e6:24:67:0c:0b:c0:bf:76:55:f6:3c:fb:3f:2e: d0:a5:8c:3e:95:f9:f3:da:2a:f5:91:ea:7b:ab:15: f8:e3:44:25:99:92:5d:9b:af:58:b6:3c:1b:07:86: a7:42:20:7d:e0:35:d2:03:1b:ad:cf:9b:dd:06:05: 71:57:98:5f:13:33:b1:12:bb:04:95:ab:26:23:8e: 29:95:30:57:ae:4f:6e:2c:d9:9c:81:b2:55:50:54: ce:ab:7a:e6:53:d4:80:7a:16:66:e2:b0:09:be:7e: 9a:d8:f0:3c:50:cd:21:dc:a1:87:04:33:05:7e:bf: 31:05:45:3d:8c:13:a8:e2:80:cc:7b:bc:7b:57:09: ba:4f:c6:27:06:d6:32:f9:47:c6:5d:cb:4b:4d:0c: e8:03:cc:03:ea:c0:07:fc:93:b4:9d:a4:42:b7:20: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1A:7B:00:89:DB:A6:3F:AD:22:95:19:C2:B6:7D:5C:02:3D:A2:AF X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:0d:c9:18:ef:66:73:09:39:eb:17:1d:49:d7:79:30:5f:4b: 93:47:93:c6:52:ae:ec:ec:e1:a1:6e:84:8f:6d:18:ff:77:94: 9d:e9:3c:37:d4:2d:f3:9e:e8:61:ff:06:a7:ff:42:dd:e6:05: 91:a1:e6:2b:a8:cd:24:57:8c:1a:aa:39:2f:22:a1:8c:26:1e: 36:90:cd:c5:d7:4c:10:be:af:15:85:04:74:fe:b1:d4:05:ef: a9:0d:a9:d4:5d:ea:8d:c2:3f:41:ce:64:87:1f:b2:ba:45:d9: b9:42:05:dc:20:b1:e7:46:16:14:cc:c0:c2:04:19:13:4f:20: 0f:7a:bd:72:46:ec:71:73:b0:c2:6b:dd:c6:48:94:af:37:b9: 17:6c:a1:ff:ed:ae:48:05:57:d3:aa:3e:96:55:4a:a7:2b:d0: 49:6f:96:b1:4c:7e:69:ae:52:6b:ae:a5:ff:14:69:a8:43:8b: 58:7a:56:42:b0:42:72:41:5c:13:d8:10:83:4f:ac:6a:20:04: ce:f7:f3:ee:be:c5:d3:44:36:9f:ff:af:c2:2b:f1:fb:3c:4d: 31:67:c6:18:c5:4b:47:af:c8:43:4d:d0:e9:c4:f9:18:70:9f: 87:77:15:91:2e:15:00:06:c2:9b:4d:d0:ce:d7:e1:b2:e4:77: 60:c4:56:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYwNTEyMjAwNzMyWhcNMjYwNTE5MjAwNzMyWjAYMRYwFAYD VQQDEw02YTAzODg4NS1jMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNviNa2wQGHKdlbv8C6mue9XIQ0gOW+CmROj4ltNom2LlldV8iAu/EHSj5oC KoZBCq0BCVsV03CZlQUwaT+USg92liDWccwHpKosfl6DTbIa8yRnGDSl6LpM5iRn DAvAv3ZV9jz7Py7QpYw+lfnz2ir1kep7qxX440QlmZJdm69YtjwbB4anQiB94DXS Axutz5vdBgVxV5hfEzOxErsElasmI44plTBXrk9uLNmcgbJVUFTOq3rmU9SAehZm 4rAJvn6a2PA8UM0h3KGHBDMFfr8xBUU9jBOo4oDMe7x7Vwm6T8YnBtYy+UfGXctL TQzoA8wD6sAH/JO0naRCtyChqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQaewCJ 26Y/rSKVGcK2fVwCPaKvMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEA3JGO9mcwk56xcdSdd5MF9Lk0eTxlKu7OzhoW6Ej20Y/3eUnek8N9Qt857o Yf8Gp/9C3eYFkaHmK6jNJFeMGqo5LyKhjCYeNpDNxddMEL6vFYUEdP6x1AXvqQ2p 1F3qjcI/Qc5khx+yukXZuUIF3CCx50YWFMzAwgQZE08gD3q9ckbscXOwwmvdxkiU rze5F2yh/+2uSAVX06o+llVKpyvQSW+WsUx+aa5Sa66l/xRpqEOLWHpWQrBCckFc E9gQg0+saiAEzvfz7r7F00Q2n/+vwivx+zxNMWfGGMVLR6/IQ03Q6cT5GHCfh3cV kS4VAAbCm03QztfhsuR3YMRW3g== -----END CERTIFICATE-----Generated at Wed May 13 20:16:11 2026 by rpki-client