$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: hD2STdfCob4KAgLYwB+40CyiJlOyJZw3dj+EXsp65P8= Subject key identifier: BE:67:CB:7C:4F:B5:37:8E:A2:76:DA:73:9E:A4:87:79:4D:38:7D:01 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0E35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0E27 Signing time: Tue 12 May 2026 17:50:08 +0000 Manifest this update: Tue 12 May 2026 17:50:08 +0000 Manifest next update: Tue 19 May 2026 17:50:08 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: JTaFu4HlO3+5dxjimUmiG6UtGkpuYDJsiCcgV0cg438=) 2: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: LJdsn8M+8WOyn3xfnVOerz5lCaK7ncj5KJBGdZ3Z5os=) 3: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: gEMIOBcajdhE7ILa/lRfnCIRCgvUIHfApcn6AAUhQyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3637 (0xe35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: May 12 17:50:08 2026 GMT Not After : May 19 17:50:08 2026 GMT Subject: CN=6a036850-a792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:67:8d:3b:18:15:df:21:c8:61:73:94:c3: 9b:b4:c0:0a:c0:88:75:15:61:1f:15:9f:53:ba:1b: 53:59:f1:a1:e6:5e:60:b1:d9:d1:dd:73:61:1f:7d: fd:88:6c:ed:ef:ed:f2:58:d9:43:b2:cc:de:e9:c0: 86:e9:d4:4f:15:ab:14:4e:f3:72:46:37:8d:f8:39: 84:a4:ba:ba:43:f0:82:a3:b0:15:7e:37:61:9c:09: 79:b0:50:6d:12:42:9b:57:30:36:7a:e0:d8:73:85: 92:c6:7a:b1:d4:b8:8e:27:14:79:61:67:a0:68:aa: 1a:63:4f:e5:43:54:f8:87:f1:eb:d0:f6:70:f5:59: ce:52:56:26:2e:5b:68:40:2c:1c:55:0a:c5:8f:b7: a2:56:83:88:56:04:e1:cd:4e:de:4a:e3:06:bb:12: f5:be:f4:7e:bf:10:b2:1b:8e:97:ef:33:fe:54:e3: 73:f5:ed:63:2f:c4:2b:ae:07:1e:34:d6:59:3f:b2: ee:83:50:64:58:87:a5:bb:d2:20:3f:cc:be:40:14: e4:90:b8:82:b9:f8:ca:fc:8f:4d:d9:d7:71:a7:f7: 62:d0:2c:50:d1:2d:39:59:6d:61:1f:04:ea:8d:25: 4c:66:a7:c2:9f:dc:d3:dd:c5:9b:9e:79:c5:f8:77: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:CB:7C:4F:B5:37:8E:A2:76:DA:73:9E:A4:87:79:4D:38:7D:01 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1e:f3:8d:13:3c:5b:20:74:f0:6d:df:52:bd:04:0f:4a:5f: 30:b1:e6:4e:a8:e8:8e:5d:8b:dd:01:4a:d0:0c:86:a3:04:4e: ce:c6:bb:05:21:4a:1e:56:4c:fe:86:0f:b8:6f:5f:32:d3:92: a3:43:ef:0f:e2:f9:e4:66:fc:d7:a8:5c:d6:ef:e2:93:3f:f2: 5a:8b:4f:81:9e:96:e5:53:0d:ae:86:96:dd:e2:e1:84:c2:98: 47:b2:c6:48:5d:f2:f2:26:42:09:40:3f:6c:3d:99:27:15:c3: 43:36:a7:bc:4d:3a:64:c6:b0:6d:c4:41:f5:8b:7b:19:11:c7: f6:62:3d:e8:b8:68:98:35:36:ff:65:41:32:10:cf:d1:44:ef: b9:e1:fd:42:dc:0e:00:15:db:c9:bb:c9:ba:5c:b9:c2:0a:58: 7b:1b:f9:ab:60:b6:12:b0:7f:23:a4:ea:56:3f:c6:66:53:99: 57:98:d0:8e:a2:fe:37:3e:fd:a7:26:99:87:9d:93:ad:1f:77: ed:c4:1a:74:6b:2d:b3:07:cb:64:4d:90:a5:64:9e:9c:13:f4: de:1f:42:d7:2a:e6:68:c0:5a:6d:34:47:4d:cc:df:c9:53:e1: ee:80:2b:19:bd:b9:9f:0c:d3:c1:b9:6f:43:cc:50:49:d7:12: 36:16:b5:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjYwNTEyMTc1MDA4WhcNMjYwNTE5MTc1MDA4WjAYMRYwFAYD VQQDEw02YTAzNjg1MC1hNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kNnjTsYFd8hyGFzlMObtMAKwIh1FWEfFZ9TuhtTWfGh5l5gsdnR3XNhH339 iGzt7+3yWNlDssze6cCG6dRPFasUTvNyRjeN+DmEpLq6Q/CCo7AVfjdhnAl5sFBt EkKbVzA2euDYc4WSxnqx1LiOJxR5YWegaKoaY0/lQ1T4h/Hr0PZw9VnOUlYmLlto QCwcVQrFj7eiVoOIVgThzU7eSuMGuxL1vvR+vxCyG46X7zP+VONz9e1jL8Qrrgce NNZZP7Lug1BkWIelu9IgP8y+QBTkkLiCufjK/I9N2ddxp/di0CxQ0S05WW1hHwTq jSVMZqfCn9zT3cWbnnnF+Hfl7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5ny3xP tTeOonbac56kh3lNOH0BMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsB7zjRM8WyB08G3fUr0ED0pfMLHmTqjojl2L3QFK0AyGowROzsa7BSFKHlZM /oYPuG9fMtOSo0PvD+L55Gb816hc1u/ikz/yWotPgZ6W5VMNroaW3eLhhMKYR7LG SF3y8iZCCUA/bD2ZJxXDQzanvE06ZMawbcRB9Yt7GRHH9mI96LhomDU2/2VBMhDP 0UTvueH9QtwOABXbybvJuly5wgpYexv5q2C2ErB/I6TqVj/GZlOZV5jQjqL+Nz79 pyaZh52TrR937cQadGstswfLZE2QpWSenBP03h9C1yrmaMBabTRHTczfyVPh7oAr Gb25nwzTwblvQ8xQSdcSNha1AA== -----END CERTIFICATE-----Generated at Wed May 13 16:09:41 2026 by rpki-client