$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json) Hash identifier: P4XXN59gcTVQkpYrWoWYSYR2L6NQ2vZie5HW0DE4hhk= Subject key identifier: 12:48:61:FB:4F:57:C8:DB:13:B4:7D:1B:AB:AD:5D:5D:1B:FF:4B:0F Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft Manifest number: 05 Signing time: Mon 11 May 2026 09:25:17 +0000 Manifest this update: Mon 11 May 2026 09:25:17 +0000 Manifest next update: Mon 18 May 2026 09:25:17 +0000 Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: xt9vqOFXYM623KpYB+yRrlrospW4oHLBPlzF/6nNy8g=) 2: A66886B4491F11F193C776FB9E833773.roa (hash: AM5l48c14FagzjhiVljacWktMvN3ORmA7Ru/n9zKl8c=) 3: A6F2C5C2491F11F193C776FB9E833773.roa (hash: n5FzFzWq7oMTynehpaBLyN7oo00BnAIyk+aOZacDhN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: May 11 09:25:17 2026 GMT Not After : May 18 09:25:17 2026 GMT Subject: CN=6a01a07d-5a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:ef:e8:41:bb:43:e6:0b:ff:32:aa:35:93: fc:53:5b:61:6f:ff:c2:48:18:44:3e:50:9c:b3:b4: 82:99:6f:7a:7d:bc:bb:ad:fe:1c:22:f8:60:de:b4: 5e:8b:eb:56:16:9d:ff:62:01:93:2a:bc:49:8f:bc: a3:b1:9b:59:e6:b1:ad:11:9a:8c:cf:aa:2e:71:75: 09:08:85:99:3b:3e:f7:ec:d0:5c:a3:10:8f:2b:1c: 36:8d:41:16:49:76:25:c7:6b:4b:4f:f0:17:ff:3b: 34:2f:93:4b:70:9a:fd:85:e1:02:7d:92:eb:dd:79: 32:f3:5f:d7:09:97:e3:47:e3:fe:f4:5c:24:c2:eb: 45:2b:b8:1f:a2:1b:4f:dd:13:e1:b1:01:8b:d6:37: 6e:22:7a:ff:95:63:57:04:21:b9:6a:0f:f9:89:de: 03:8e:5a:8b:e7:4c:96:d1:58:5f:d6:c5:14:e0:b6: b4:be:c8:2c:19:2b:75:d3:12:51:f3:72:c1:fc:57: d0:e4:6f:61:b2:80:e2:99:de:ed:a2:12:e9:9b:08: 7e:db:83:87:b4:f2:21:aa:3c:c0:13:41:4d:5b:f7: 17:af:fd:e9:c7:d7:b0:d7:6a:81:06:d3:f6:ea:8b: 85:9c:88:90:80:a6:ee:be:3f:cc:33:6b:5b:82:f7: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:61:FB:4F:57:C8:DB:13:B4:7D:1B:AB:AD:5D:5D:1B:FF:4B:0F X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ea:e8:a9:a0:96:59:a0:18:b7:89:8b:fc:d6:0c:ff:7d:3d: dd:14:0e:b4:ce:94:8a:a9:14:54:db:80:6a:95:83:38:99:19: 1b:73:da:6f:08:eb:6d:c0:a2:70:27:2f:45:c4:ee:fc:cb:e4: 11:18:c2:2c:34:c1:9e:a3:98:be:dc:6a:cc:74:0a:12:c5:79: ac:31:53:cb:cc:e0:ee:0d:9b:e4:c3:09:3a:64:fe:a5:f5:e3: 76:06:29:18:a4:e7:e5:fb:23:cb:ce:f7:bf:51:7e:26:ac:48: 8e:62:14:fa:75:7d:9b:f9:9a:64:da:27:01:29:58:fd:60:d1: 61:02:76:df:66:87:28:23:8f:21:7a:56:2f:93:d9:8b:7f:e0: 68:af:d0:a1:73:97:81:18:96:c0:3a:51:dd:5f:b8:9a:e6:43: 14:8a:1e:9d:f9:29:7a:78:85:38:69:9f:00:79:0a:ea:70:e0: 79:db:41:98:cc:a3:af:2b:4f:6c:b4:a8:e6:24:33:68:2f:52: 3c:03:c6:f8:0e:97:a9:9f:f0:a3:d3:f5:38:10:c7:f5:dc:3b: 99:b1:d9:03:d8:91:f4:b3:14:62:9e:d3:a9:3d:91:9f:6a:39: 1c:48:98:37:c9:c5:e7:f8:a2:24:2b:a8:92:54:bf:f7:64:fb: 45:9d:5a:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjA1MTEwOTI1MTdaFw0yNjA1MTgwOTI1MTdaMBgxFjAUBgNV BAMTDTZhMDFhMDdkLTVhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBCu/oQbtD5gv/Mqo1k/xTW2Fv/8JIGEQ+UJyztIKZb3p9vLut/hwi+GDetF6L 61YWnf9iAZMqvEmPvKOxm1nmsa0RmozPqi5xdQkIhZk7Pvfs0FyjEI8rHDaNQRZJ diXHa0tP8Bf/OzQvk0twmv2F4QJ9kuvdeTLzX9cJl+NH4/70XCTC60UruB+iG0/d E+GxAYvWN24iev+VY1cEIblqD/mJ3gOOWovnTJbRWF/WxRTgtrS+yCwZK3XTElHz csH8V9Dkb2GygOKZ3u2iEumbCH7bg4e08iGqPMATQU1b9xev/enH17DXaoEG0/bq i4WciJCApu6+P8wza1uC91NPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEkhh+09X yNsTtH0bq61dXRv/Sw8wHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE RTA2LzY2OURCNTcyNDkxRjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhU WHZmT2s1NWs4Q1lFcnJQdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBh6uipoJZZoBi3iYv81gz/fT3dFA60zpSKqRRU24BqlYM4mRkbc9pvCOttwKJw Jy9FxO78y+QRGMIsNMGeo5i+3GrMdAoSxXmsMVPLzODuDZvkwwk6ZP6l9eN2BikY pOfl+yPLzve/UX4mrEiOYhT6dX2b+Zpk2icBKVj9YNFhAnbfZocoI48helYvk9mL f+Bor9Chc5eBGJbAOlHdX7ia5kMUih6d+Sl6eIU4aZ8AeQrqcOB520GYzKOvK09s tKjmJDNoL1I8A8b4Dpepn/Cj0/U4EMf13DuZsdkD2JH0sxRintOpPZGfajkcSJg3 ycXn+KIkK6iSVL/3ZPtFnVrQ -----END CERTIFICATE-----Generated at Wed May 13 03:48:41 2026 by rpki-client