$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: unJJ6egyJ2vKbf/AxeUDjo10jcX4viNT/+0qnsnQ8F0= Subject key identifier: E1:CB:C3:50:1D:07:E8:6C:17:77:C9:E2:18:B6:A1:52:EE:AB:70:3F Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0CE3 Signing time: Tue 12 May 2026 18:24:08 +0000 Manifest this update: Tue 12 May 2026 18:24:07 +0000 Manifest next update: Tue 19 May 2026 18:24:07 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: GUXKxiHMbSTTOvDfJigTdocHTfdVm8Bg9JhBHr227g4=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: May 12 18:24:07 2026 GMT Not After : May 19 18:24:07 2026 GMT Subject: CN=6a037048-9975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:9e:bf:b8:da:9c:dc:db:27:bc:b9:c9:2a: 33:d9:52:35:eb:e5:a2:15:30:e0:51:6b:79:54:56: 22:a1:cc:83:fc:00:17:e7:e3:65:96:cf:54:f4:b4: df:15:ae:d4:e7:d3:75:01:eb:78:57:c8:09:b3:09: 15:bc:ad:d0:58:2d:b7:82:6f:19:bb:ec:22:fd:2c: 78:78:5a:17:f9:2a:5d:61:34:ba:ca:08:dd:2b:be: 60:9d:c7:6f:02:e9:12:89:35:65:a5:88:5c:81:04: 2c:7b:ad:31:e1:29:ab:ad:ca:6f:1f:71:00:b6:f0: 70:8c:e3:7a:e2:89:2a:1f:9e:4e:ff:32:b6:c6:8d: 09:cb:2e:22:da:ab:d4:5a:44:99:82:7b:00:a1:3a: c6:fb:45:9a:57:e5:f2:f7:fe:b7:40:f7:53:73:cc: 99:35:6a:7f:13:37:ec:1c:e6:19:62:d9:49:e4:d3: ba:34:18:b1:e2:80:c6:13:de:3a:2c:cb:55:f6:ea: a6:bc:96:3c:54:fb:11:1a:ff:72:b3:8a:ae:bb:1f: 12:0b:f1:50:1b:66:a9:07:47:cc:36:36:1c:22:3e: 81:2f:aa:65:1c:29:a2:26:f2:91:91:3c:e8:5b:31: f8:1f:62:9c:71:20:4d:9f:b8:12:d3:a1:a4:28:de: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CB:C3:50:1D:07:E8:6C:17:77:C9:E2:18:B6:A1:52:EE:AB:70:3F X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9d:9a:c1:a7:7c:c3:23:df:b1:ae:68:4b:96:79:87:81:c4: 7b:de:ef:2b:09:84:5a:7d:12:11:3e:82:0f:58:62:d9:be:b7: 10:e1:d0:ff:4d:88:dd:0d:71:c1:6b:bb:c6:99:32:fd:4a:1f: 78:f9:5b:83:5e:70:58:4b:d3:cc:57:86:90:a1:64:65:1a:5e: 73:2c:00:28:1d:94:97:a8:4a:13:7c:62:5b:a6:76:fb:31:ef: 71:15:f3:8c:5c:3c:2b:a3:ae:d3:26:d9:b6:0d:5a:bc:13:c7: ed:88:81:49:2d:8c:9c:da:15:7e:3d:ce:21:b8:a2:39:1d:21: 66:d7:5a:51:72:a0:d6:ad:27:be:73:90:e0:d8:42:8d:e6:50: 0b:7a:47:3b:b5:47:ef:9e:84:ad:0e:62:3d:b3:24:a3:d6:48: c0:f8:82:6e:60:71:09:2b:66:95:eb:c5:95:83:ea:28:ba:12: 1d:a3:fa:e8:60:cd:e2:74:e9:5c:9d:45:28:a5:ac:b4:6b:5b: c1:07:e0:ed:4b:a6:8f:b2:28:70:28:de:be:76:fe:4b:2b:7a: 1c:6b:cc:db:34:88:3d:1a:a2:3b:0a:34:fe:f4:e3:98:8f:e0: a3:45:45:b9:0e:eb:3c:94:74:df:eb:58:55:0a:c9:46:4c:de: 62:61:66:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjYwNTEyMTgyNDA3WhcNMjYwNTE5MTgyNDA3WjAYMRYwFAYD VQQDEw02YTAzNzA0OC05OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOuev7janNzbJ7y5ySoz2VI16+WiFTDgUWt5VFYiocyD/AAX5+Nlls9U9LTf Fa7U59N1Aet4V8gJswkVvK3QWC23gm8Zu+wi/Sx4eFoX+SpdYTS6ygjdK75gncdv AukSiTVlpYhcgQQse60x4SmrrcpvH3EAtvBwjON64okqH55O/zK2xo0Jyy4i2qvU WkSZgnsAoTrG+0WaV+Xy9/63QPdTc8yZNWp/EzfsHOYZYtlJ5NO6NBix4oDGE946 LMtV9uqmvJY8VPsRGv9ys4quux8SC/FQG2apB0fMNjYcIj6BL6plHCmiJvKRkTzo WzH4H2KccSBNn7gS06GkKN5JHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHLw1Ad B+hsF3fJ4hi2oVLuq3A/MB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQp2awad8wyPfsa5oS5Z5h4HEe97vKwmEWn0SET6CD1hi2b63EOHQ/02I3Q1x wWu7xpky/UofePlbg15wWEvTzFeGkKFkZRpecywAKB2Ul6hKE3xiW6Z2+zHvcRXz jFw8K6Ou0ybZtg1avBPH7YiBSS2MnNoVfj3OIbiiOR0hZtdaUXKg1q0nvnOQ4NhC jeZQC3pHO7VH756ErQ5iPbMko9ZIwPiCbmBxCStmlevFlYPqKLoSHaP66GDN4nTp XJ1FKKWstGtbwQfg7Uumj7IocCjevnb+Syt6HGvM2zSIPRqiOwo0/vTjmI/go0VF uQ7rPJR03+tYVQrJRkzeYmFm0w== -----END CERTIFICATE-----Generated at Wed May 13 05:40:59 2026 by rpki-client