$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json) Hash identifier: RbfxW+pQjKv4Jb+XbTM9d3cSha2bawVZCmx4r9ehTQE= Subject key identifier: 3C:C4:3B:F0:45:45:3A:23:F0:BB:8B:DF:13:B4:7F:A1:C8:5C:4B:59 Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft Manifest number: 8C Signing time: Mon 11 May 2026 07:42:33 +0000 Manifest this update: Mon 11 May 2026 07:42:33 +0000 Manifest next update: Mon 18 May 2026 07:42:33 +0000 Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: aMA+OZwnd5Voku8e19WGTIGvDjibpXrV+fePq9EYhw8=) 2: 442749147D6311F0BC413466C4F9AE02.roa (hash: pZzQ3wcf5NhKLhQ5y0SYHfcdZzM5PRL9cbkeNwOsguc=) 3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: 0u1ZLLqCampcdXnPq/pBAes2DhVX2vLtj9KlG8BoPAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: May 11 07:42:33 2026 GMT Not After : May 18 07:42:33 2026 GMT Subject: CN=6a018869-8da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:c7:4b:64:c9:1b:66:4f:a3:92:db:c1:a7: b2:25:52:14:5d:a4:3d:2b:35:63:cc:b6:c0:5d:ee: 2a:0a:17:08:bb:a3:d4:ae:48:72:5a:94:2c:16:73: d8:13:78:2a:4e:20:f5:38:e8:25:bf:56:70:fe:b8: 70:e6:69:e4:9e:9d:c8:10:40:bb:3e:4b:c8:50:3d: e9:2b:cf:45:d9:6a:9a:44:66:67:b1:5d:9d:be:9f: eb:7d:24:09:f1:69:21:3a:5c:90:4c:0e:dc:f6:ba: 52:49:c6:ff:62:b3:be:a8:d6:44:69:59:55:2d:c3: 7b:b8:cd:c5:af:3a:1d:58:a9:dd:c2:5c:a3:3f:a9: c7:f5:e5:bd:2a:7c:79:89:ef:7e:bc:37:21:96:07: 5c:c9:00:5a:45:4f:d9:92:8f:ad:4b:0c:8e:79:c5: 3f:da:9d:aa:50:d0:76:e5:38:00:32:3f:56:36:cf: ef:7e:cd:19:79:8c:2d:d3:0b:24:9c:f3:66:1d:4c: 9b:fd:38:8e:57:cc:e5:cb:70:b6:7d:e6:89:37:ef: 77:7c:51:94:28:27:39:5e:be:a8:fa:93:f0:c5:03: f2:47:b8:51:d4:6a:52:fc:f8:2a:fb:c4:c1:76:02: 83:0a:67:12:9f:7c:88:57:69:a5:64:75:f5:e0:96: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C4:3B:F0:45:45:3A:23:F0:BB:8B:DF:13:B4:7F:A1:C8:5C:4B:59 X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:66:76:14:d4:9a:7a:6a:0a:06:af:e4:fe:1b:c7:9d:5c:74: 4d:fa:8e:56:7b:e6:74:f0:1c:f4:7a:31:f2:f8:ee:5a:4c:84: 9a:ad:66:4e:7e:b0:ad:50:0c:d2:83:f1:28:7f:ba:6b:86:78: 5d:7c:49:7e:7b:8a:70:b4:06:1e:30:26:44:86:8e:90:a5:64: 78:29:1c:a3:e0:30:4e:6c:10:51:77:a8:cf:d9:54:08:90:0d: d5:41:3e:fa:d8:92:7f:e8:f5:e9:cd:cd:ce:a3:a1:76:9b:62: 3e:f2:b7:8e:63:25:b1:6a:7f:7d:44:73:b5:7a:dc:38:da:9f: 30:ec:a9:fe:d4:2e:53:8d:7d:22:6b:1c:bb:96:0b:04:ce:35: b2:ed:e0:26:09:af:97:2b:8e:ae:28:cd:a2:bf:8f:29:16:d3: 18:b9:95:07:fb:a8:05:41:36:07:6c:2f:6b:a7:cb:70:fa:08: 29:da:e9:78:69:e3:f8:aa:af:ed:29:f0:f3:21:c5:99:81:81: 14:df:9b:0d:a5:c7:bf:29:94:1a:23:60:e6:ad:41:b9:29:21: 83:31:f5:cc:d0:d9:4b:17:f8:cc:51:6e:e6:47:a2:e5:e0:d1: a6:5e:86:1b:09:5b:c8:81:7a:c2:f1:26:b6:c4:d8:ff:18:5c: ac:a8:8e:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEMDExMTAvBgNVBAUTKEQyNUY4Nzk2RTcwRDY3MEU5ODZDNkMyNDc3M0U2Qjc3 OEMzNjA1NzcwHhcNMjYwNTExMDc0MjMzWhcNMjYwNTE4MDc0MjMzWjAYMRYwFAYD VQQDEw02YTAxODg2OS04ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GrHS2TJG2ZPo5LbwaeyJVIUXaQ9KzVjzLbAXe4qChcIu6PUrkhyWpQsFnPY E3gqTiD1OOglv1Zw/rhw5mnknp3IEEC7PkvIUD3pK89F2WqaRGZnsV2dvp/rfSQJ 8WkhOlyQTA7c9rpSScb/YrO+qNZEaVlVLcN7uM3FrzodWKndwlyjP6nH9eW9Knx5 ie9+vDchlgdcyQBaRU/Zko+tSwyOecU/2p2qUNB25TgAMj9WNs/vfs0ZeYwt0wsk nPNmHUyb/TiOV8zly3C2feaJN+93fFGUKCc5Xr6o+pPwxQPyR7hR1GpS/Pgq+8TB dgKDCmcSn3yIV2mlZHX14JZjNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzEO/BF RToj8LuL3xO0f6HIXEtZMB8GA1UdIwQYMBaAFNJfh5bnDWcOmGxsJHc+a3eMNgV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQwMS8zNkE3MUU0RTdE NUYxMUYwOUVDOUM5MzhDNEY5QUUwMi8wbC1IbHVjTlp3NlliR3drZHo1cmQ0dzJC WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQwMS8zNkE3MUU0RTdENUYxMUYwOUVDOUM5MzhDNEY5QUUwMi8wbC1IbHVjTlp3 NlliR3drZHo1cmQ0dzJCWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiWZ2FNSaemoKBq/k/hvHnVx0TfqOVnvmdPAc9Hox8vjuWkyEmq1mTn6wrVAM 0oPxKH+6a4Z4XXxJfnuKcLQGHjAmRIaOkKVkeCkco+AwTmwQUXeoz9lUCJAN1UE+ +tiSf+j16c3NzqOhdptiPvK3jmMlsWp/fURztXrcONqfMOyp/tQuU419Imscu5YL BM41su3gJgmvlyuOrijNor+PKRbTGLmVB/uoBUE2B2wva6fLcPoIKdrpeGnj+Kqv 7Snw8yHFmYGBFN+bDaXHvymUGiNg5q1BuSkhgzH1zNDZSxf4zFFu5kei5eDRpl6G GwlbyIF6wvEmtsTY/xhcrKiOYw== -----END CERTIFICATE-----Generated at Wed May 13 08:15:17 2026 by rpki-client