$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft File: rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json) Hash identifier: DGdn5qbCD7uXu0aOIGuGcvOrORtmvnawVTGQoof1A2U= Subject key identifier: 27:71:AE:62:AB:D3:A9:B2:7E:BC:9D:4A:2E:D0:87:D8:B5:85:80:9D Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 Certificate issuer: /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft Manifest number: 027A Signing time: Wed 13 May 2026 02:03:02 +0000 Manifest this update: Wed 13 May 2026 02:03:02 +0000 Manifest next update: Wed 20 May 2026 02:03:02 +0000 Files and hashes: 1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: pnxt3HzP+om6p1KszUtXjGGpOrwAyLc1px5RNTlw5F4=) 2: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: N1EuDA/H1b+aKfv07j358tw2r8s6Ntwxnui6Zw/IAWc=) 3: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: Fb1xzXA0N8kLKjAHbkG0rnvKJoUR3GKUs1zEAFSrTAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Validity Not Before: May 13 02:03:02 2026 GMT Not After : May 20 02:03:02 2026 GMT Subject: CN=6a03dbd6-dbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:66:e1:1c:3b:e2:0f:d6:68:1b:13:f8:8a: 09:65:a6:52:bf:cf:9f:89:cc:07:ee:9d:7b:8e:d9: e6:46:f8:9d:6c:c3:a2:9f:67:e7:16:2c:8f:55:89: 0d:26:35:85:cf:dc:83:09:6d:7e:27:29:93:c7:28: 38:ee:8f:ea:28:88:ef:12:32:0d:f4:be:d5:42:00: 01:82:73:66:79:62:05:3d:87:de:58:37:e9:6b:88: 84:6b:f4:d3:79:2b:64:57:b2:62:b0:c1:26:a6:77: da:0d:f7:ca:e9:5f:5a:b7:12:ac:63:4d:e3:18:91: 9e:ab:af:92:5c:aa:2d:68:d0:6f:30:be:d8:31:86: 17:09:2b:48:3b:05:cd:d9:95:06:37:38:c4:8e:03: e2:28:46:02:df:c8:ff:9a:a7:b8:a8:60:73:d1:6a: eb:59:75:81:2e:89:3f:6e:cf:44:12:68:01:04:e1: 4b:b1:50:2a:e3:f7:41:79:10:0e:08:b5:ce:c6:0f: 13:46:d3:7e:53:02:9f:a0:3a:97:5d:77:80:b2:a8: 1e:f0:ea:55:52:2d:46:22:1e:c4:28:74:8f:6b:78: 11:f2:bb:a5:88:5a:0b:93:33:cc:10:8f:c3:eb:21: ae:ca:17:1e:07:23:0b:0e:6e:93:d1:03:70:cb:61: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:71:AE:62:AB:D3:A9:B2:7E:BC:9D:4A:2E:D0:87:D8:B5:85:80:9D X509v3 Authority Key Identifier: keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2a:82:9f:37:eb:45:c6:79:e9:9c:c5:11:d1:fe:ca:38:c3: 4f:a0:ca:86:7f:6a:20:80:87:31:ac:90:47:48:28:55:90:69: 1b:48:c8:0f:e1:ae:02:8c:b1:ac:48:f7:a3:bb:53:ee:34:f4: 7f:5e:45:f8:1d:41:13:93:3a:d0:97:dc:db:32:21:09:31:f1: 28:2a:e4:9d:68:0e:57:a9:e4:f8:d3:d8:fa:69:63:f0:78:6a: ab:51:e3:86:83:3a:29:64:85:d1:4e:d5:7c:13:5b:4d:cd:72: f3:f5:b1:9c:5f:55:c5:08:5f:8a:a3:b8:e6:a2:9c:63:97:f4: ab:bf:2b:6e:8e:93:ee:a8:aa:e2:2e:67:59:3c:ad:7d:ae:71: 60:a7:53:78:30:84:c7:e8:f4:7b:3e:9c:ea:ae:2b:e5:ad:c9: 51:74:4f:b0:95:db:4e:0d:85:39:5c:83:27:ae:c0:21:0b:7f: e3:09:b3:ba:d7:86:dc:0d:4a:1c:1a:9b:f1:ce:b2:49:f3:e7: 3a:f8:73:c3:b6:8d:8c:03:aa:d5:37:65:2f:8e:4d:c9:68:35: ff:c2:59:7c:f1:9c:d7:bd:f3:66:00:16:1a:0d:39:06:59:eb: 5e:9b:74:ae:23:9a:51:09:cd:d5:6f:d3:8d:c5:69:07:7f:4d: e5:19:70:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OEUxMTAvBgNVBAUTKEFFQjg5QzAyNkZFOTU1MkExNTBCMDNDMzBBQTBDREM0 NzlEMUUyQTEwHhcNMjYwNTEzMDIwMzAyWhcNMjYwNTIwMDIwMzAyWjAYMRYwFAYD VQQDEw02YTAzZGJkNi1kYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Jm4Rw74g/WaBsT+IoJZaZSv8+ficwH7p17jtnmRvidbMOin2fnFiyPVYkN JjWFz9yDCW1+JymTxyg47o/qKIjvEjIN9L7VQgABgnNmeWIFPYfeWDfpa4iEa/TT eStkV7JisMEmpnfaDffK6V9atxKsY03jGJGeq6+SXKotaNBvML7YMYYXCStIOwXN 2ZUGNzjEjgPiKEYC38j/mqe4qGBz0WrrWXWBLok/bs9EEmgBBOFLsVAq4/dBeRAO CLXOxg8TRtN+UwKfoDqXXXeAsqge8OpVUi1GIh7EKHSPa3gR8ruliFoLkzPMEI/D 6yGuyhceByMLDm6T0QNwy2HeuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdxrmKr 06myfrydSi7Qh9i1hYCdMB8GA1UdIwQYMBaAFK64nAJv6VUqFQsDwwqgzcR50eKh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY4RS8xNDNEMDI1NDhD MjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZTb1ZDd1BEQ3FETnhIblI0 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyaWNBbV9wVlNvVkN3UERDcUROeEhuUjRxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY4RS8xNDNEMDI1NDhDMjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZT b1ZDd1BEQ3FETnhIblI0cUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEyqCnzfrRcZ56ZzFEdH+yjjDT6DKhn9qIICHMayQR0goVZBpG0jID+GuAoyx rEj3o7tT7jT0f15F+B1BE5M60Jfc2zIhCTHxKCrknWgOV6nk+NPY+mlj8Hhqq1Hj hoM6KWSF0U7VfBNbTc1y8/WxnF9VxQhfiqO45qKcY5f0q78rbo6T7qiq4i5nWTyt fa5xYKdTeDCEx+j0ez6c6q4r5a3JUXRPsJXbTg2FOVyDJ67AIQt/4wmzuteG3A1K HBqb8c6ySfPnOvhzw7aNjAOq1TdlL45NyWg1/8JZfPGc173zZgAWGg05BlnrXpt0 riOaUQnN1W/TjcVpB39N5Rlw8g== -----END CERTIFICATE-----Generated at Wed May 13 08:01:46 2026 by rpki-client