$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: fRjsie+FHRNE5UeGkKSUfRdfoJ66BuhsU+SQiXkXzh0= Subject key identifier: 67:0C:E6:B2:12:3F:82:C6:99:CC:10:40:00:9A:27:FD:EB:2E:D4:A2 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 01B4 Signing time: Mon 11 May 2026 04:00:23 +0000 Manifest this update: Mon 11 May 2026 04:00:22 +0000 Manifest next update: Mon 18 May 2026 04:00:22 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: cMwMwaG1Zz4PhmvCMi1PTgxBuPv153oobUCZBz+Xyq8=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: 2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: May 11 04:00:22 2026 GMT Not After : May 18 04:00:22 2026 GMT Subject: CN=6a015457-cf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b8:7f:98:d8:dd:06:55:71:dc:e0:ad:71:1c: 74:56:27:e4:c9:db:65:60:b0:8a:97:49:56:6e:ac: c6:42:a7:08:4f:5a:56:d7:5e:0e:a2:d9:0a:2f:b7: 26:5c:7c:fa:67:67:db:85:ec:02:97:eb:aa:ff:2a: ed:8b:28:16:ac:31:f7:8d:98:71:db:cf:d9:bc:f0: 3b:27:bb:44:3e:c3:f3:d5:8f:0b:c6:fb:f3:2f:94: 00:5e:36:72:ca:54:00:bf:1b:a1:ae:79:47:4d:e2: 17:7e:f8:88:b1:81:60:af:f4:4d:41:28:1f:89:b1: cb:9b:53:cb:e1:81:1d:15:a7:ab:f4:e6:d0:c8:b1: 27:4a:1c:d5:0c:c6:ee:9a:c6:5a:3d:44:02:21:d9: 52:39:c3:e1:90:6c:ce:93:3f:fd:12:b3:2a:cd:9d: 0e:a0:75:35:ee:b6:4e:f5:2a:8a:1c:7d:e3:6c:f6: 0f:53:e2:ec:95:41:ae:16:26:02:0f:28:5f:3b:c7: f7:50:c2:bc:92:37:86:8e:72:0e:d9:ce:b7:ec:c2: 34:df:bf:3d:69:24:3d:57:6f:b4:88:3e:0f:9a:71: 6b:7e:e9:3b:c0:59:ce:e1:4b:73:92:e9:15:25:cf: d4:aa:b9:f5:6a:24:ea:3b:69:fe:ea:ff:44:bc:64: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:E6:B2:12:3F:82:C6:99:CC:10:40:00:9A:27:FD:EB:2E:D4:A2 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7f:34:ed:d2:4f:5d:8f:25:40:3f:84:dd:ed:05:80:4e:c0: 15:27:35:93:26:dc:96:46:2d:17:aa:bf:9e:d4:a3:28:38:0f: 87:9f:b4:dd:fa:10:dd:10:47:b2:a2:a9:69:61:20:d2:7f:1e: ad:81:3b:84:8e:92:1b:2d:37:9b:cf:bc:a7:2c:00:de:95:13: 0d:32:a8:56:88:10:cb:f4:2d:8a:ae:18:78:df:eb:60:c2:5e: ca:d2:6f:e2:5f:e2:bf:75:8e:55:59:88:0d:b1:46:4d:98:ea: d1:13:58:a2:85:24:9c:62:2d:66:90:65:46:9a:27:1b:f0:6b: b5:51:1b:6e:65:bd:40:6e:b4:ff:dc:26:80:23:ac:7a:69:ea: 9f:f2:ed:20:1e:7e:de:55:8f:52:dd:68:90:bc:3e:d2:c9:ad: 2e:96:72:4a:e1:a9:fd:9d:8c:b4:13:27:f9:13:13:4d:05:5a: ad:80:1a:fc:43:42:e8:52:02:31:5b:94:57:2f:46:c7:67:40: e7:2d:9e:cc:eb:1c:c9:10:87:89:77:bc:46:10:bf:d9:11:6b: 57:fb:b2:ad:66:52:55:4a:49:99:37:71:8b:b1:6d:c7:11:2d: 02:8f:e1:df:f9:aa:84:74:09:f3:f2:6a:9a:a7:0b:b1:25:f6: f0:ff:14:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjYwNTExMDQwMDIyWhcNMjYwNTE4MDQwMDIyWjAYMRYwFAYD VQQDEw02YTAxNTQ1Ny1jZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rh/mNjdBlVx3OCtcRx0VifkydtlYLCKl0lWbqzGQqcIT1pW114OotkKL7cm XHz6Z2fbhewCl+uq/yrtiygWrDH3jZhx28/ZvPA7J7tEPsPz1Y8LxvvzL5QAXjZy ylQAvxuhrnlHTeIXfviIsYFgr/RNQSgfibHLm1PL4YEdFaer9ObQyLEnShzVDMbu msZaPUQCIdlSOcPhkGzOkz/9ErMqzZ0OoHU17rZO9SqKHH3jbPYPU+LslUGuFiYC DyhfO8f3UMK8kjeGjnIO2c637MI03789aSQ9V2+0iD4PmnFrfuk7wFnO4UtzkukV Jc/Uqrn1aiTqO2n+6v9EvGTsBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcM5rIS P4LGmcwQQACaJ/3rLtSiMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKX807dJPXY8lQD+E3e0FgE7AFSc1kybclkYtF6q/ntSjKDgPh5+03foQ3RBH sqKpaWEg0n8erYE7hI6SGy03m8+8pywA3pUTDTKoVogQy/Qtiq4YeN/rYMJeytJv 4l/iv3WOVVmIDbFGTZjq0RNYooUknGItZpBlRponG/BrtVEbbmW9QG60/9wmgCOs emnqn/LtIB5+3lWPUt1okLw+0smtLpZySuGp/Z2MtBMn+RMTTQVarYAa/ENC6FIC MVuUVy9Gx2dA5y2ezOscyRCHiXe8RhC/2RFrV/uyrWZSVUpJmTdxi7FtxxEtAo/h 3/mqhHQJ8/JqmqcLsSX28P8U0Q== -----END CERTIFICATE-----Generated at Wed May 13 04:17:43 2026 by rpki-client