$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: tA6IbjBEZzF778hLtuFmb/ehF8loLNXIkz+/vKPY29I= Subject key identifier: 80:23:B5:1D:1C:8B:1B:D5:84:FB:0A:8D:7A:D4:4B:7B:DE:A8:30:F8 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0407 Signing time: Wed 13 May 2026 00:34:42 +0000 Manifest this update: Wed 13 May 2026 00:34:42 +0000 Manifest next update: Wed 20 May 2026 00:34:42 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: +OAv0cbIXG1iHvVoSWEXpQQDzvCdEA7xrbXBYMDWXGM=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: May 13 00:34:42 2026 GMT Not After : May 20 00:34:42 2026 GMT Subject: CN=6a03c722-e100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:da:7c:07:e3:74:98:29:62:2d:e3:d2:19: 0c:f8:68:76:ea:e6:73:c5:8e:76:04:fa:b3:e7:e7: 82:cd:ad:f1:43:f9:d0:30:79:b4:59:6d:9b:76:b6: b8:19:77:95:7f:6f:c6:45:2c:e7:94:1f:18:96:01: 64:45:49:0b:52:d4:06:d1:3b:60:cc:30:16:4c:3d: a6:69:6b:72:f8:cb:e9:00:ae:2c:d4:94:d6:9a:99: a1:3d:ff:ee:d4:98:48:1d:9b:35:f1:ff:6b:65:47: 13:c0:6a:5f:5f:07:57:82:93:d9:64:c3:ca:09:02: 35:0c:8f:1e:c7:08:bc:0c:e9:3c:70:71:9b:e1:0e: 8e:1e:74:86:c1:3a:33:b1:19:62:10:eb:21:b4:2e: d9:e6:89:4c:f1:07:6f:c5:25:d3:d6:9b:91:5f:ec: 6c:34:b0:51:6c:e4:cb:cd:04:01:fd:8e:ba:70:a6: 5d:a6:82:2d:9b:9f:23:7c:ed:67:35:38:d7:99:f6: 74:1b:bd:11:b1:90:bf:0b:ad:28:a9:6c:76:85:92: 8b:eb:be:a5:f7:84:25:4d:66:f7:63:30:8e:cd:00: 08:b1:ab:91:9b:73:01:27:cf:82:56:7f:b7:f8:92: 1c:81:a8:2d:bf:37:60:04:2d:9e:e9:d7:cc:67:c7: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:23:B5:1D:1C:8B:1B:D5:84:FB:0A:8D:7A:D4:4B:7B:DE:A8:30:F8 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:d9:0f:65:2e:fa:e8:40:cb:2c:9c:9b:fe:2c:f6:d7:22: e3:03:99:b5:1f:ed:88:b2:b5:c1:d3:49:f5:33:29:cf:98:55: fb:47:2d:be:6e:d6:dc:9e:d3:26:6b:28:4f:a1:17:1d:95:c3: 01:02:47:bd:92:fa:9d:c4:04:79:b7:4d:d6:a3:ba:f3:1b:c6: 6e:cc:14:08:90:da:3e:f3:64:c5:4a:c3:d1:30:83:38:20:70: f8:dd:a9:66:b4:b1:1e:4f:4e:f4:c6:27:d9:4a:da:13:52:c8: 19:dc:74:a5:c1:4f:cd:2b:30:13:27:a1:30:dd:96:60:65:43: 0c:34:64:39:52:81:99:a7:8a:5b:a7:4c:e1:af:40:14:23:a9: e3:5e:ae:bd:0c:df:9a:db:72:f0:27:44:97:2f:4b:4e:21:7e: dd:2c:2f:d5:60:da:f6:56:5f:b5:4e:cc:d5:67:63:64:fd:5a: 87:e1:b1:04:83:96:76:81:a3:ce:04:8c:f5:9a:b1:17:5f:9a: 19:00:d2:8d:c8:52:24:61:dd:43:9b:04:ab:c2:49:eb:44:bf: 7a:37:ae:10:0f:d3:a4:b6:a2:b0:03:e5:7e:cb:ed:56:ef:4a: bb:8f:5f:7f:29:9b:bb:30:51:84:e7:21:a4:5d:d1:35:78:65: 7e:c4:63:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNTEzMDAzNDQyWhcNMjYwNTIwMDAzNDQyWjAYMRYwFAYD VQQDEw02YTAzYzcyMi1lMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyLafAfjdJgpYi3j0hkM+Gh26uZzxY52BPqz5+eCza3xQ/nQMHm0WW2bdra4 GXeVf2/GRSznlB8YlgFkRUkLUtQG0TtgzDAWTD2maWty+MvpAK4s1JTWmpmhPf/u 1JhIHZs18f9rZUcTwGpfXwdXgpPZZMPKCQI1DI8exwi8DOk8cHGb4Q6OHnSGwToz sRliEOshtC7Z5olM8QdvxSXT1puRX+xsNLBRbOTLzQQB/Y66cKZdpoItm58jfO1n NTjXmfZ0G70RsZC/C60oqWx2hZKL676l94QlTWb3YzCOzQAIsauRm3MBJ8+CVn+3 +JIcgagtvzdgBC2e6dfMZ8ffswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAjtR0c ixvVhPsKjXrUS3veqDD4MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgArZD2Uu+uhAyyycm/4s9tci4wOZtR/tiLK1wdNJ9TMpz5hV+0ctvm7W3J7T JmsoT6EXHZXDAQJHvZL6ncQEebdN1qO68xvGbswUCJDaPvNkxUrD0TCDOCBw+N2p ZrSxHk9O9MYn2UraE1LIGdx0pcFPzSswEyehMN2WYGVDDDRkOVKBmaeKW6dM4a9A FCOp416uvQzfmtty8CdEly9LTiF+3Swv1WDa9lZftU7M1WdjZP1ah+GxBIOWdoGj zgSM9ZqxF1+aGQDSjchSJGHdQ5sEq8JJ60S/ejeuEA/TpLaisAPlfsvtVu9Ku49f fymbuzBRhOchpF3RNXhlfsRjvg== -----END CERTIFICATE-----Generated at Wed May 13 04:44:08 2026 by rpki-client