$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: ijO7CcnC2yvo3PzY1iyyVTcHomIPpI6UBdHdSijcdb0= Subject key identifier: 1B:89:A4:16:0B:E9:8E:90:7A:D6:03:EE:90:E9:A5:8C:01:FC:00:50 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 0498 Signing time: Wed 13 May 2026 00:03:15 +0000 Manifest this update: Wed 13 May 2026 00:03:14 +0000 Manifest next update: Wed 20 May 2026 00:03:14 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: 8QZSYMNc967rvPzvLpCa4cI3EmdekA4A/mW0AJ91fe8=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: N+WDRVK1GCgpC7/SSOzfsvjQlOUQfUPMZGxcGp5tWsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: May 13 00:03:14 2026 GMT Not After : May 20 00:03:14 2026 GMT Subject: CN=6a03bfc2-06d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:57:f2:f1:a8:9c:cd:f0:3a:4d:2f:04:f0:c1: 0d:c3:ed:c3:db:08:7f:35:e6:61:e7:87:f8:6b:31: 16:26:90:59:13:57:a3:97:56:21:a8:18:d9:29:14: 50:0c:99:27:36:d5:71:e8:87:4e:1f:53:30:57:7b: c5:8a:98:6d:0d:f2:20:62:c3:c4:4b:35:64:43:10: ac:0f:a3:3f:e8:22:8a:95:a8:fb:83:16:90:ec:1b: 34:b5:f0:bd:26:62:43:2d:aa:5b:31:9c:8f:33:a7: 50:91:d4:d1:8b:ed:34:5e:50:5a:fe:da:46:0f:7d: 42:3e:6e:e0:cb:2c:b4:e8:38:c7:d3:2c:07:be:c9: 00:a9:7b:f9:ff:91:e8:d2:99:7e:d2:52:55:51:b6: a3:3c:e7:4e:1a:11:20:39:c0:1a:02:5d:1d:cd:5a: 91:e4:4f:e5:11:9e:29:b0:77:8f:fd:50:4e:08:9c: 10:2d:0b:dd:77:c3:1d:65:c7:23:ca:c4:17:15:90: fb:93:74:c3:72:03:92:91:f1:ce:0f:5e:b3:bd:be: d1:65:a3:6e:c2:44:a4:a4:b1:f6:18:a0:78:16:9f: aa:41:af:9c:7e:d1:e8:14:95:17:ba:54:55:97:21: a6:ae:68:c9:72:db:a8:9b:e8:2b:3a:06:6f:d4:6f: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:89:A4:16:0B:E9:8E:90:7A:D6:03:EE:90:E9:A5:8C:01:FC:00:50 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:5b:f8:f6:b9:b7:4d:7f:65:bb:95:2b:9a:18:fb:be:4c:c0: 14:e1:09:49:4f:e9:58:16:3f:08:85:47:74:24:6c:97:cf:f6: 43:ad:8d:6e:92:b6:3a:14:0e:e2:36:bb:a9:1f:ee:e6:0a:2a: 5d:b8:02:ac:e9:2e:03:87:9e:cc:c2:af:88:60:e7:de:dc:84: 52:ad:06:a6:94:c5:3c:7b:5d:b4:1f:bf:12:c0:34:28:f6:72: 88:a6:22:8b:df:fd:78:8a:3e:7b:5d:c9:f4:ee:cf:ab:e5:c7: 64:01:b3:a1:6b:7a:82:6b:8e:a6:97:7a:30:d1:4f:aa:42:6e: 9e:0e:b9:ec:6e:2d:c9:7f:b8:4f:52:c1:69:2f:ad:74:1f:10: b8:7b:c3:29:75:a4:82:38:ee:93:0e:44:38:cf:f3:8b:20:00: 95:29:1a:5b:b4:71:85:7d:12:6a:86:52:61:35:ff:3f:1c:c1: 77:8c:7d:ae:9e:15:8a:20:80:a7:76:b7:ad:57:bf:3c:72:84: 4a:1b:66:2c:72:f3:9a:1b:57:b3:a8:03:61:95:20:dd:1c:63: f9:4e:56:8b:ac:4d:41:bb:13:6e:7c:1d:72:f3:30:cd:15:8e: c9:fd:d1:3d:48:00:d5:2d:25:cb:05:ce:7e:bf:52:13:bd:35: 76:57:6a:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjYwNTEzMDAwMzE0WhcNMjYwNTIwMDAwMzE0WjAYMRYwFAYD VQQDEw02YTAzYmZjMi0wNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lfy8aiczfA6TS8E8MENw+3D2wh/NeZh54f4azEWJpBZE1ejl1YhqBjZKRRQ DJknNtVx6IdOH1MwV3vFiphtDfIgYsPESzVkQxCsD6M/6CKKlaj7gxaQ7Bs0tfC9 JmJDLapbMZyPM6dQkdTRi+00XlBa/tpGD31CPm7gyyy06DjH0ywHvskAqXv5/5Ho 0pl+0lJVUbajPOdOGhEgOcAaAl0dzVqR5E/lEZ4psHeP/VBOCJwQLQvdd8MdZccj ysQXFZD7k3TDcgOSkfHOD16zvb7RZaNuwkSkpLH2GKB4Fp+qQa+cftHoFJUXulRV lyGmrmjJctuom+grOgZv1G/s3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBuJpBYL 6Y6QetYD7pDppYwB/ABQMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFv49rm3TX9lu5Urmhj7vkzAFOEJSU/pWBY/CIVHdCRsl8/2Q62NbpK2OhQO 4ja7qR/u5goqXbgCrOkuA4eezMKviGDn3tyEUq0GppTFPHtdtB+/EsA0KPZyiKYi i9/9eIo+e13J9O7Pq+XHZAGzoWt6gmuOppd6MNFPqkJung657G4tyX+4T1LBaS+t dB8QuHvDKXWkgjjukw5EOM/ziyAAlSkaW7RxhX0SaoZSYTX/PxzBd4x9rp4ViiCA p3a3rVe/PHKEShtmLHLzmhtXs6gDYZUg3Rxj+U5Wi6xNQbsTbnwdcvMwzRWOyf3R PUgA1S0lywXOfr9SE701dldqUQ== -----END CERTIFICATE-----Generated at Wed May 13 09:00:02 2026 by rpki-client