$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: zMn8MZnEIBgkCLf6K/VQhQKNwJ17+jBem9IRSSGSd1U= Subject key identifier: D2:CB:93:48:3C:A1:E3:A5:5A:43:55:FF:3E:A5:36:4E:06:D1:28:0F Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 0118 Signing time: Mon 11 May 2026 06:02:10 +0000 Manifest this update: Mon 11 May 2026 06:02:09 +0000 Manifest next update: Mon 18 May 2026 06:02:09 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: 88e191A2iRXvzd0sQRvTCV8HnNILP1DMCUk/fvlKVlk=) 2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) 3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: May 11 06:02:09 2026 GMT Not After : May 18 06:02:09 2026 GMT Subject: CN=6a0170e2-c138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:d1:31:ce:c8:7d:d6:a8:6b:5e:55:2b:99: 72:20:98:a9:87:9f:e7:33:59:94:55:46:c8:6c:c0: af:c0:7e:d9:f1:d3:d6:62:f8:ec:dd:e2:40:1b:5d: a7:f7:4e:ef:fd:91:81:0f:49:40:5e:44:94:1d:37: 91:b6:7e:5f:9c:92:59:7a:1f:0f:ff:cb:c7:88:c4: 9f:55:01:64:3e:17:aa:e6:88:13:fe:6d:ea:11:72: 32:a1:73:fb:6e:97:89:01:76:b5:46:81:59:9e:ee: ad:b9:51:28:ae:44:9a:aa:ba:64:79:96:b8:d0:e8: 24:dd:ed:00:4e:69:ac:e9:83:48:f0:bf:55:78:4c: 84:65:3a:70:00:9e:cd:c8:6e:bf:be:d4:ce:43:0a: 18:41:03:4d:74:0c:c1:3a:93:cd:d0:c8:e4:42:55: 62:c9:45:6f:21:6c:85:93:51:92:7f:99:f8:9b:bd: bf:06:cd:42:89:cb:b4:6f:df:5f:7b:b7:42:dc:19: 15:d2:2f:1f:96:ad:66:f9:d1:1c:9c:24:84:cb:4a: 89:b6:8c:04:7b:af:38:77:bd:21:c9:67:22:3b:94: 37:0e:8d:28:3e:ae:68:fe:a7:b1:09:43:69:24:4e: fe:d0:7b:1a:c2:f1:ae:9e:ed:91:ce:91:fb:03:12: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CB:93:48:3C:A1:E3:A5:5A:43:55:FF:3E:A5:36:4E:06:D1:28:0F X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:34:c9:04:e7:a4:8c:59:cf:2e:f0:64:72:a7:ae:2c:55:bb: 20:78:47:92:43:12:d9:ac:1a:97:10:16:6d:01:07:8d:33:4f: 20:1a:f4:df:f5:19:e3:5d:99:5e:36:0e:b1:83:20:c9:61:08: 5a:9d:65:72:04:97:e0:a6:cf:89:75:77:8f:b9:f9:bf:8d:e5: 7f:bc:e6:77:af:24:53:cb:e8:ad:8a:08:1a:44:66:21:64:20: f1:91:67:92:80:64:a9:8e:7b:02:fe:fc:77:84:7a:24:ae:3e: a2:92:29:50:73:40:35:6b:79:4d:3e:dd:f7:73:a9:2b:02:ee: 51:a3:70:b1:35:8a:ab:d9:cd:d5:2f:ac:d2:01:6f:4c:c8:d0: 99:8c:44:cc:98:24:86:db:6f:d6:3a:d3:62:2e:1b:6c:ee:b2: 1b:a6:17:22:95:4c:82:5d:4f:63:8b:0b:b0:5a:d6:90:76:d4: 78:a4:1b:4e:c8:05:a2:dc:a3:3a:5e:1b:d9:23:96:b5:e0:5a: 92:8e:da:15:71:79:e0:60:6c:21:bf:12:63:7f:f6:f0:2e:23: 2a:b1:98:2f:19:1a:8a:77:27:7d:c4:4a:ec:e1:f3:d4:7e:b4: d7:f3:ae:10:f0:0a:65:96:cf:f0:1f:7c:c7:6b:fd:82:ff:3e: e5:35:ef:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYwNTExMDYwMjA5WhcNMjYwNTE4MDYwMjA5WjAYMRYwFAYD VQQDEw02YTAxNzBlMi1jMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lvRMc7Ifdaoa15VK5lyIJiph5/nM1mUVUbIbMCvwH7Z8dPWYvjs3eJAG12n 907v/ZGBD0lAXkSUHTeRtn5fnJJZeh8P/8vHiMSfVQFkPheq5ogT/m3qEXIyoXP7 bpeJAXa1RoFZnu6tuVEorkSaqrpkeZa40Ogk3e0ATmms6YNI8L9VeEyEZTpwAJ7N yG6/vtTOQwoYQQNNdAzBOpPN0MjkQlViyUVvIWyFk1GSf5n4m72/Bs1Cicu0b99f e7dC3BkV0i8flq1m+dEcnCSEy0qJtowEe684d70hyWciO5Q3Do0oPq5o/qexCUNp JE7+0HsawvGunu2RzpH7AxJN0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLLk0g8 oeOlWkNV/z6lNk4G0SgPMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIDTJBOekjFnPLvBkcqeuLFW7IHhHkkMS2awalxAWbQEHjTNPIBr03/UZ412Z XjYOsYMgyWEIWp1lcgSX4KbPiXV3j7n5v43lf7zmd68kU8vorYoIGkRmIWQg8ZFn koBkqY57Av78d4R6JK4+opIpUHNANWt5TT7d93OpKwLuUaNwsTWKq9nN1S+s0gFv TMjQmYxEzJgkhttv1jrTYi4bbO6yG6YXIpVMgl1PY4sLsFrWkHbUeKQbTsgFotyj Ol4b2SOWteBako7aFXF54GBsIb8SY3/28C4jKrGYLxkaincnfcRK7OHz1H601/Ou EPAKZZbP8B98x2v9gv8+5TXvcg== -----END CERTIFICATE-----Generated at Wed May 13 03:36:09 2026 by rpki-client