$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: YgggY56DZf728AsGcf5qRrS0y2sentFt9vekMeGG5do= Subject key identifier: 08:68:04:2C:75:EA:44:85:CD:25:54:81:09:F4:4D:CA:9B:15:F5:EC Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 04B1 Signing time: Wed 13 May 2026 00:03:35 +0000 Manifest this update: Wed 13 May 2026 00:03:34 +0000 Manifest next update: Wed 20 May 2026 00:03:34 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: jjFj82lSMGQ/GDhvWE6Oe25WNKGhX0oej0nSriyt0/E=) 2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=) 3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: May 13 00:03:34 2026 GMT Not After : May 20 00:03:34 2026 GMT Subject: CN=6a03bfd7-d587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:2d:df:04:7f:e7:30:5b:67:27:07:75:32: 9a:7c:2d:71:73:4b:11:59:66:21:e5:66:b8:c6:f6: 7e:f6:a4:83:da:55:5a:10:cc:0e:4e:6f:85:e2:4e: 27:4f:db:2e:d0:66:aa:b1:d4:03:f7:6e:10:78:db: 1f:2b:7f:da:a0:5c:1f:c6:ef:50:9e:4a:0d:f5:ae: 83:12:00:3f:cf:92:49:cb:4a:74:a7:24:c8:7c:22: 30:b6:c7:2e:44:e5:4c:dc:3a:5b:e7:4a:0d:7f:97: 1a:1a:99:e7:67:31:e3:9c:65:35:cb:37:9f:a6:d3: 03:80:60:42:57:d3:b7:26:aa:69:08:de:ae:b9:50: 5d:0a:d6:01:88:1a:20:9f:a1:4a:b1:f9:14:46:9c: c3:fe:ff:b3:ba:08:c9:4b:34:f8:cf:c5:40:73:1b: c0:c9:34:17:ff:f2:70:24:ce:b9:0e:3c:82:09:67: 07:d9:6d:61:2a:d9:78:80:aa:ea:b0:7a:f2:0f:7e: 25:6c:8a:b1:b4:1c:90:b4:d8:65:c1:81:49:26:c4: 29:66:e1:64:f0:c3:68:f0:f6:75:71:37:09:a3:92: 08:44:7c:b1:ec:53:41:d3:bb:5e:e1:7d:ae:76:e3: 44:a1:2a:51:17:85:c1:3b:c9:27:8c:90:f7:18:f1: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:68:04:2C:75:EA:44:85:CD:25:54:81:09:F4:4D:CA:9B:15:F5:EC X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:08:02:47:cd:4f:6d:54:ec:3b:8e:e3:6b:3f:70:a7:d6:21: d8:94:9e:27:1d:73:d4:d9:ab:95:da:84:4e:6d:d5:55:67:bf: ea:33:6b:f0:41:85:df:80:2a:01:92:54:03:5b:90:9a:91:94: d9:88:bb:19:9a:8a:47:de:6b:ed:9c:91:6c:f2:e4:30:48:ca: 98:d0:85:ba:06:8f:00:0f:13:79:8f:82:b4:3e:a5:65:24:80: 86:09:8b:76:d4:d3:72:e0:20:60:89:06:58:36:c9:d6:d6:9b: ce:01:61:81:35:00:27:01:1f:ec:61:5c:76:2b:84:69:8c:b6: 35:03:a3:ca:e8:09:e1:22:83:b1:3d:12:cc:dd:04:a6:f5:7d: e2:55:98:3a:72:ea:22:23:61:bb:7d:e7:87:55:ec:fa:0f:9a: f2:5f:80:e6:86:d8:ce:06:26:60:a4:e7:78:15:1a:2c:3e:cb: 85:de:c9:c6:82:94:42:9e:f7:ac:4d:91:80:41:af:e2:3f:ff: 88:73:16:b1:31:18:eb:c7:7a:6e:e5:9c:b5:09:bc:21:fd:17: 85:65:29:79:67:14:b0:88:fe:bb:2a:2c:ae:43:1c:bc:49:66: 94:40:ee:78:a8:b9:cd:9c:54:31:32:8d:bf:36:b0:35:5e:89: 26:6a:34:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYwNTEzMDAwMzM0WhcNMjYwNTIwMDAwMzM0WjAYMRYwFAYD VQQDEw02YTAzYmZkNy1kNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9wt3wR/5zBbZycHdTKafC1xc0sRWWYh5Wa4xvZ+9qSD2lVaEMwOTm+F4k4n T9su0GaqsdQD924QeNsfK3/aoFwfxu9QnkoN9a6DEgA/z5JJy0p0pyTIfCIwtscu ROVM3Dpb50oNf5caGpnnZzHjnGU1yzefptMDgGBCV9O3JqppCN6uuVBdCtYBiBog n6FKsfkURpzD/v+zugjJSzT4z8VAcxvAyTQX//JwJM65DjyCCWcH2W1hKtl4gKrq sHryD34lbIqxtByQtNhlwYFJJsQpZuFk8MNo8PZ1cTcJo5IIRHyx7FNB07te4X2u duNEoSpRF4XBO8knjJD3GPES9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhoBCx1 6kSFzSVUgQn0TcqbFfXsMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMAgCR81PbVTsO47jaz9wp9Yh2JSeJx1z1NmrldqETm3VVWe/6jNr8EGF34Aq AZJUA1uQmpGU2Yi7GZqKR95r7ZyRbPLkMEjKmNCFugaPAA8TeY+CtD6lZSSAhgmL dtTTcuAgYIkGWDbJ1tabzgFhgTUAJwEf7GFcdiuEaYy2NQOjyugJ4SKDsT0SzN0E pvV94lWYOnLqIiNhu33nh1Xs+g+a8l+A5obYzgYmYKTneBUaLD7Lhd7JxoKUQp73 rE2RgEGv4j//iHMWsTEY68d6buWctQm8If0XhWUpeWcUsIj+uyosrkMcvElmlEDu eKi5zZxUMTKNvzawNV6JJmo0OQ== -----END CERTIFICATE-----Generated at Wed May 13 11:41:23 2026 by rpki-client