$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: akGSFNp37VmZcsr1/D+Yb2cwOmKNw8Ae6vOj4y+yqoU= Subject key identifier: 64:A6:69:B1:BA:CE:07:7B:61:33:B5:FE:BE:44:76:A4:D5:6F:85:31 Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 087F Signing time: Tue 12 May 2026 20:46:04 +0000 Manifest this update: Tue 12 May 2026 20:46:03 +0000 Manifest next update: Tue 19 May 2026 20:46:03 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: /iltAku4ltV/6ogA74z1x90XbbieG9nLbElOIe5VilY=) 2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=) 4: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: May 12 20:46:03 2026 GMT Not After : May 19 20:46:03 2026 GMT Subject: CN=6a03918b-8b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:68:b3:b4:14:48:16:a4:fd:ad:c5:05:42:b0: a2:8e:a2:73:de:7d:2d:c7:08:ea:1f:b3:d6:fd:65: 75:bc:2f:25:a3:ab:51:09:c4:de:a3:98:e7:95:8e: 46:5e:b1:e3:20:32:41:e6:b4:a4:b9:71:b9:b0:c1: 61:6a:ec:7f:8d:de:6f:88:f8:70:99:69:cc:39:47: 35:21:38:1b:d3:34:a5:6e:d4:98:4d:e4:5f:6d:38: 93:4a:5a:92:ae:9b:76:86:3c:61:8f:ea:48:e2:e4: 9b:e1:d1:08:99:92:02:c8:d2:a2:b1:a6:72:de:e5: 3a:24:62:db:4e:11:a9:19:19:bd:96:71:48:7a:c5: 37:3a:07:e9:ee:c0:b2:97:2a:96:89:19:1c:59:b6: fb:5f:be:86:64:e8:61:88:63:05:b3:35:95:45:f8: 43:49:ef:e6:12:91:64:b0:79:7f:23:80:9f:c3:5b: 36:b6:fe:29:cc:e5:7c:17:bc:8f:8f:f4:82:60:b3: 95:16:41:05:9f:8f:76:3f:d4:60:46:b3:11:64:6c: c0:60:1d:c6:17:03:92:0a:6b:0f:d4:61:10:c8:96: 09:52:39:7d:96:f0:76:6e:05:4c:c4:79:60:d7:47: b7:32:4f:b1:b6:a9:15:bb:8f:3e:19:cc:c8:02:85: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A6:69:B1:BA:CE:07:7B:61:33:B5:FE:BE:44:76:A4:D5:6F:85:31 X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bb:c4:68:51:33:f9:fb:8b:eb:3b:0e:2f:f2:4e:36:50:d7: 56:ea:57:9c:72:ac:ce:f7:9e:03:2c:a5:1a:4b:7d:d0:1d:5f: 95:79:9e:ca:74:03:b8:ee:e9:ca:08:0f:17:cc:af:2a:5a:51: d0:0c:71:00:16:f4:81:bf:77:be:bd:8f:cc:48:7f:14:c8:67: 45:f0:36:c0:29:7d:93:c2:54:49:f3:fa:c9:58:7e:39:65:65: 17:9e:f0:81:c2:05:3b:e8:07:97:3e:36:76:0e:72:ab:6b:83: 3a:e8:cf:b8:44:7e:ef:b1:03:17:4d:ec:e6:cc:5f:5c:50:93: 6b:79:b8:50:88:a2:6e:91:ae:ea:1b:9a:af:7d:6f:8d:4a:71: a6:df:8b:2e:86:39:f7:dc:89:da:02:35:07:51:3c:54:c9:b4: 3a:33:83:6a:3a:8f:e3:54:3c:ba:25:e7:5a:0e:f6:24:ab:2a: b8:95:05:ce:d2:ce:63:e9:ee:ef:e0:c4:02:4a:f2:93:aa:75: d1:ac:f6:ee:5e:be:ce:34:b3:d8:75:c3:55:6b:36:e5:e7:b8: 5f:3c:9e:95:79:2a:dd:1d:41:cc:b9:10:f5:03:6d:42:a6:8d: 91:81:7d:74:ba:3f:99:bd:b5:d4:58:3b:e1:8c:93:28:c2:cd: 7d:e0:4b:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjYwNTEyMjA0NjAzWhcNMjYwNTE5MjA0NjAzWjAYMRYwFAYD VQQDEw02YTAzOTE4Yi04YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWiztBRIFqT9rcUFQrCijqJz3n0txwjqH7PW/WV1vC8lo6tRCcTeo5jnlY5G XrHjIDJB5rSkuXG5sMFhaux/jd5viPhwmWnMOUc1ITgb0zSlbtSYTeRfbTiTSlqS rpt2hjxhj+pI4uSb4dEImZICyNKisaZy3uU6JGLbThGpGRm9lnFIesU3Ogfp7sCy lyqWiRkcWbb7X76GZOhhiGMFszWVRfhDSe/mEpFksHl/I4Cfw1s2tv4pzOV8F7yP j/SCYLOVFkEFn492P9RgRrMRZGzAYB3GFwOSCmsP1GEQyJYJUjl9lvB2bgVMxHlg 10e3Mk+xtqkVu48+GczIAoWCEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSmabG6 zgd7YTO1/r5EdqTVb4UxMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATbvEaFEz+fuL6zsOL/JONlDXVupXnHKszveeAyylGkt90B1flXmeynQDuO7p yggPF8yvKlpR0AxxABb0gb93vr2PzEh/FMhnRfA2wCl9k8JUSfP6yVh+OWVlF57w gcIFO+gHlz42dg5yq2uDOujPuER+77EDF03s5sxfXFCTa3m4UIiibpGu6huar31v jUpxpt+LLoY599yJ2gI1B1E8VMm0OjODajqP41Q8uiXnWg72JKsquJUFztLOY+nu 7+DEAkryk6p10az27l6+zjSz2HXDVWs25ee4XzyelXkq3R1BzLkQ9QNtQqaNkYF9 dLo/mb211Fg74YyTKMLNfeBLrg== -----END CERTIFICATE-----Generated at Wed May 13 05:28:58 2026 by rpki-client