$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json) Hash identifier: 5YrLtSqbgX+EjYoa+ngpRK2AN/pdrqxbMYq7G6yb9KU= Subject key identifier: CE:71:C3:89:CA:D7:FF:44:C3:6F:3E:AA:8E:FA:B1:CD:B9:8B:0A:31 Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft Manifest number: 06C1 Signing time: Tue 12 May 2026 22:25:39 +0000 Manifest this update: Tue 12 May 2026 22:25:39 +0000 Manifest next update: Tue 19 May 2026 22:25:39 +0000 Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: y61fKXYNNfNUouinOyHbYKiNnhave/BVRwwfyRJmHgs=) 2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: +i5uHJyJF9AnTEDT4nux2xnB0e7UDjY1PtVm2KqOSJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Validity Not Before: May 12 22:25:39 2026 GMT Not After : May 19 22:25:39 2026 GMT Subject: CN=6a03a8e3-5331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:36:ab:b6:de:b5:b2:34:4e:10:d2:70:88: f4:12:e3:40:ba:89:1d:c6:b0:d4:89:2b:78:24:8a: e0:09:7a:24:ab:db:2f:b8:3d:2c:0e:ad:6b:9b:10: ba:e3:a7:c8:eb:58:bd:77:51:4b:38:2d:07:f3:75: b8:66:51:a6:b6:ca:2f:d2:ee:17:cf:c6:c3:06:a0: 16:53:0d:44:b1:c1:bb:be:b8:b7:d2:8b:4a:95:d8: 9f:4a:3a:e4:37:47:00:d7:d7:db:f4:ce:ad:a0:1b: 6a:7f:42:b3:86:58:e2:9a:40:8e:ba:b1:a0:77:c6: 1a:4e:36:cf:ff:3e:74:c8:08:70:a7:d9:75:0c:c8: 36:bf:06:42:9a:9f:c6:74:49:f4:27:bd:7a:6d:bb: 9c:bf:b9:c9:4b:88:d6:12:7c:3b:21:2a:48:26:bb: ba:81:4c:a2:9a:73:f2:71:f5:11:c7:23:95:e9:f7: 2f:1d:a9:e0:7e:dc:e7:d2:cb:c7:bb:09:7c:ca:4d: 61:9f:16:ad:4b:11:9a:80:d4:f4:db:25:4b:bd:d2: e9:0d:26:ae:d0:9b:b1:c6:ff:b9:8d:af:31:0f:2f: 21:2a:08:0e:10:78:dd:b8:4c:3c:c7:6d:fd:c6:3f: 11:69:37:6b:69:34:68:b5:7b:d2:c8:02:e3:49:8c: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:71:C3:89:CA:D7:FF:44:C3:6F:3E:AA:8E:FA:B1:CD:B9:8B:0A:31 X509v3 Authority Key Identifier: keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a9:fd:17:ab:ba:2f:99:87:05:1f:3e:f5:5c:f9:00:ea:e1: 11:55:8d:aa:9b:53:f9:1a:42:99:d6:8a:58:79:2b:d2:b1:8d: d2:b5:6d:2c:f9:2b:c4:9d:55:02:01:39:d0:78:2b:c7:d1:aa: 9d:fe:fc:7e:f8:49:34:fd:3c:92:a4:16:f6:9a:64:43:6c:10: df:c1:a1:7a:2a:09:9e:8d:f2:21:36:24:a8:ac:6e:21:ae:11: d7:8a:c9:bb:5e:43:cd:58:f4:51:62:56:0e:af:da:19:54:78: 06:c1:ee:c5:95:95:21:0e:b4:1a:d5:55:0b:2d:38:bf:09:9f: 21:76:5d:6a:ea:b1:d8:dc:82:8c:5e:65:4f:aa:b1:02:7b:0e: 89:64:4f:05:a8:38:ee:0e:26:60:6c:3f:00:e1:5d:77:8b:9d: de:01:21:c8:07:c1:9f:0b:ca:ac:14:57:25:21:59:42:78:26: 5c:79:3a:ab:28:00:d9:9b:ad:46:be:80:7a:7f:f2:e3:9b:7a: 64:04:cd:ae:2f:63:8c:39:54:54:67:80:4b:b3:d0:e1:9a:57: af:54:8f:d4:95:39:1a:10:3d:15:d8:81:05:ea:ee:1d:1e:b6: f1:9f:66:e0:26:d8:7c:f0:e4:5e:6c:2f:a9:96:0e:ab:35:e5: 1b:33:5c:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU3M0UxMTAvBgNVBAUTKERBNTdBMjQyMDcwNDcwMDhENzNBNjVENjgyMjRBNDdC OUEwM0RBQUEwHhcNMjYwNTEyMjIyNTM5WhcNMjYwNTE5MjIyNTM5WjAYMRYwFAYD VQQDEw02YTAzYThlMy01MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JQ2q7betbI0ThDScIj0EuNAuokdxrDUiSt4JIrgCXokq9svuD0sDq1rmxC6 46fI61i9d1FLOC0H83W4ZlGmtsov0u4Xz8bDBqAWUw1EscG7vri30otKldifSjrk N0cA19fb9M6toBtqf0KzhljimkCOurGgd8YaTjbP/z50yAhwp9l1DMg2vwZCmp/G dEn0J716bbucv7nJS4jWEnw7ISpIJru6gUyimnPycfURxyOV6fcvHangftzn0svH uwl8yk1hnxatSxGagNT02yVLvdLpDSau0Juxxv+5ja8xDy8hKggOEHjduEw8x239 xj8RaTdraTRotXvSyALjSYw3dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5xw4nK 1/9Ew28+qo76sc25iwoxMB8GA1UdIwQYMBaAFNpXokIHBHAI1zpl1oIkpHuaA9qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTczRS82NzY4OTc4RUE1 QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNBalhPbVhXZ2lTa2U1b0Qy cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsZWlRZ2NFY0FqWE9tWFdnaVNrZTVvRDJxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTczRS82NzY4OTc4RUE1QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNB alhPbVhXZ2lTa2U1b0QycW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN6n9F6u6L5mHBR8+9Vz5AOrhEVWNqptT+RpCmdaKWHkr0rGN0rVtLPkrxJ1V AgE50Hgrx9Gqnf78fvhJNP08kqQW9ppkQ2wQ38GheioJno3yITYkqKxuIa4R14rJ u15DzVj0UWJWDq/aGVR4BsHuxZWVIQ60GtVVCy04vwmfIXZdauqx2NyCjF5lT6qx AnsOiWRPBag47g4mYGw/AOFdd4ud3gEhyAfBnwvKrBRXJSFZQngmXHk6qygA2Zut Rr6Aen/y45t6ZATNri9jjDlUVGeAS7PQ4ZpXr1SP1JU5GhA9FdiBBeruHR628Z9m 4CbYfPDkXmwvqZYOqzXlGzNcQQ== -----END CERTIFICATE-----Generated at Wed May 13 11:28:19 2026 by rpki-client