$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: 14Pa0w6b2wgGMlQ2yOoOF3GMItNTyRk0yz/In6XaHHY= Subject key identifier: B5:52:72:CA:89:D6:95:8C:8C:17:D7:E4:75:66:F7:48:C2:94:29:FB Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0CE6 Signing time: Tue 12 May 2026 18:24:01 +0000 Manifest this update: Tue 12 May 2026 18:24:00 +0000 Manifest next update: Tue 19 May 2026 18:24:00 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: dIMBvfPf6fYM4HESLOCLVpZO1kYKAnoFB2UfsTvvQuA=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: May 12 18:24:00 2026 GMT Not After : May 19 18:24:00 2026 GMT Subject: CN=6a037041-b27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:40:c4:da:86:2a:c2:14:96:23:8e:f2:bc: 27:59:99:f5:57:fe:51:07:d9:a4:a4:81:5f:ad:da: 24:b0:5b:74:b7:c8:e6:8f:b8:1d:5a:74:db:3b:11: c8:1f:3f:3b:ff:60:60:dc:9b:88:a7:ec:f3:b9:09: 67:f4:03:d6:40:e7:54:eb:00:7a:52:97:57:eb:19: 5c:21:78:e6:dc:1c:11:c7:d8:f1:89:89:1b:fc:c5: c1:21:8f:40:cb:07:6e:ef:85:4d:35:67:d5:ac:fb: 35:cb:03:25:b0:12:54:e4:29:c4:96:43:e6:88:2e: 01:5c:a6:40:bb:7b:a3:69:1d:33:cd:07:76:42:90: 82:40:1b:ee:fc:9d:c0:f3:22:d2:e3:58:87:fc:95: dd:67:71:6e:da:e5:44:5a:cb:14:f8:f0:82:b8:52: 5e:0b:2b:ed:39:fc:d6:62:33:77:3c:03:9e:ef:81: 12:86:88:44:08:1c:bd:dc:44:fa:79:e8:9e:80:af: c4:8b:7f:cf:46:a2:75:14:9f:b4:fc:c3:f9:ee:42: ae:e4:cd:a4:73:78:0a:09:f1:f0:8e:0a:e3:b0:4a: 49:e3:38:bd:5c:74:28:da:3e:14:56:8e:16:06:30: 90:2d:ee:9f:bf:8c:12:0d:c0:91:82:cf:e4:52:f3: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:52:72:CA:89:D6:95:8C:8C:17:D7:E4:75:66:F7:48:C2:94:29:FB X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:73:e4:4f:1a:43:8d:25:92:44:3e:51:df:50:6b:1b:47:64: f2:1f:66:47:31:e8:32:c7:9d:c1:f6:3a:62:72:69:d0:85:7b: 6b:a9:9c:cc:e1:31:9d:4e:f1:69:ad:88:ad:0e:f6:52:47:f2: 45:6d:fe:5d:7d:cb:4f:aa:e6:43:d7:f5:d7:18:e9:8b:1a:0e: 19:1a:5d:f7:c0:d0:33:60:a9:fa:3f:2c:f5:b2:47:8e:12:72: 2c:83:3e:e1:d5:c7:1d:70:28:68:17:ff:6d:b4:e9:e5:34:cd: 61:5b:d7:e4:41:96:b5:10:77:b5:52:0b:a6:f6:b9:43:8f:cb: 51:4e:db:fa:d8:8d:76:74:13:70:ba:a6:47:52:7e:2c:cf:1a: f3:b4:76:d2:1b:a3:22:3d:2e:c6:c3:a8:34:4a:89:08:8f:ca: 48:64:ba:c9:ee:30:ab:a1:12:32:ed:48:80:a7:c7:e7:92:e0: 65:95:3c:a0:3a:36:be:0c:c5:d8:c4:85:fb:96:a2:d0:dc:49: 40:a0:73:d4:1f:57:e1:79:fe:cb:80:33:5d:dc:80:44:41:8e: ff:03:51:68:57:8c:b2:c4:6e:6f:75:9c:68:ca:65:b3:9b:ec: 24:5e:a2:cf:a1:7e:a8:5f:be:d7:a9:67:c5:94:f4:ea:51:a9: c1:d8:a6:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjYwNTEyMTgyNDAwWhcNMjYwNTE5MTgyNDAwWjAYMRYwFAYD VQQDEw02YTAzNzA0MS1iMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRtAxNqGKsIUliOO8rwnWZn1V/5RB9mkpIFfrdoksFt0t8jmj7gdWnTbOxHI Hz87/2Bg3JuIp+zzuQln9APWQOdU6wB6UpdX6xlcIXjm3BwRx9jxiYkb/MXBIY9A ywdu74VNNWfVrPs1ywMlsBJU5CnElkPmiC4BXKZAu3ujaR0zzQd2QpCCQBvu/J3A 8yLS41iH/JXdZ3Fu2uVEWssU+PCCuFJeCyvtOfzWYjN3PAOe74EShohECBy93ET6 eeiegK/Ei3/PRqJ1FJ+0/MP57kKu5M2kc3gKCfHwjgrjsEpJ4zi9XHQo2j4UVo4W BjCQLe6fv4wSDcCRgs/kUvPxpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVScsqJ 1pWMjBfX5HVm90jClCn7MB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHPkTxpDjSWSRD5R31BrG0dk8h9mRzHoMsedwfY6YnJp0IV7a6mczOExnU7x aa2IrQ72UkfyRW3+XX3LT6rmQ9f11xjpixoOGRpd98DQM2Cp+j8s9bJHjhJyLIM+ 4dXHHXAoaBf/bbTp5TTNYVvX5EGWtRB3tVILpva5Q4/LUU7b+tiNdnQTcLqmR1J+ LM8a87R20hujIj0uxsOoNEqJCI/KSGS6ye4wq6ESMu1IgKfH55LgZZU8oDo2vgzF 2MSF+5ai0NxJQKBz1B9X4Xn+y4AzXdyAREGO/wNRaFeMssRub3WcaMpls5vsJF6i z6F+qF++16lnxZT06lGpwdimIA== -----END CERTIFICATE-----Generated at Wed May 13 07:18:16 2026 by rpki-client