$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: L46KCOB0EXbNVBP7G1BTbXJuC3woeYT5ZkCMwHnrnME= Subject key identifier: 53:17:A1:22:74:CD:70:59:9C:CB:BF:EA:C9:70:B1:4C:8F:3B:0A:C2 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 011E Signing time: Mon 11 May 2026 05:53:44 +0000 Manifest this update: Mon 11 May 2026 05:53:43 +0000 Manifest next update: Mon 18 May 2026 05:53:43 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: dnyB8Z72/i/vU0ATa04uouel0xfShNMZy1MidQMGFFc=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: May 11 05:53:43 2026 GMT Not After : May 18 05:53:43 2026 GMT Subject: CN=6a016ee7-f716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c7:86:20:9f:a2:d6:9d:d5:22:67:2c:f6:a1: d3:53:f9:e8:3e:ea:ff:59:05:b1:50:61:f5:8f:bf: 37:20:93:0b:4c:c6:d5:9d:a2:16:dd:a7:ad:c0:a4: dc:28:d8:d0:46:3f:9e:06:a0:b7:39:f9:18:56:6e: 91:d2:94:af:45:2e:7b:c2:70:c2:f5:78:7e:8e:96: 5c:41:e1:20:d5:a6:6b:2f:5e:bc:c3:59:fe:23:51: 3e:c0:b0:64:21:df:f9:28:4e:ab:40:28:ca:e6:9e: e6:06:54:e2:61:23:22:e6:f0:97:4a:8d:95:90:5b: 6c:d0:65:75:f4:78:8c:d8:50:9d:50:5c:c4:50:32: ab:d1:15:3b:5d:3b:93:e1:b9:b0:04:b7:35:9d:03: 08:0b:e4:3c:c3:9d:c5:ec:e4:0b:23:32:2a:ed:54: 0d:cc:70:84:65:4e:7c:3b:69:cb:cd:dc:e5:9e:f6: 4a:81:67:68:e3:3e:96:be:dc:0a:88:58:02:c8:9d: 6a:07:79:e2:1c:40:26:27:bb:8b:94:76:1f:70:2e: e6:3f:79:5e:cc:03:c8:f9:d5:4b:54:c0:1a:22:5d: d4:78:5b:9c:c2:9e:ad:c5:ce:62:97:3f:7b:23:dc: 81:b8:0d:68:61:34:06:d9:1a:f8:c4:8e:78:a7:c7: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:17:A1:22:74:CD:70:59:9C:CB:BF:EA:C9:70:B1:4C:8F:3B:0A:C2 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3b:8e:1b:f5:80:59:e8:ad:60:78:11:37:b2:6e:52:7c:ba: 1d:46:78:10:ad:9c:b1:5d:77:5d:95:05:ba:fa:3d:43:8e:97: ed:c0:ee:0e:bc:a4:c0:5f:3a:a7:04:e3:d5:90:2e:17:f9:0e: f5:b8:c9:1e:60:88:70:bd:c7:fa:ae:bc:2d:bc:79:d9:ac:16: 9a:03:2e:3e:c2:fd:75:d2:fd:55:60:b8:d7:a6:b7:e8:a3:81: 59:12:3d:0c:31:ff:b0:95:18:33:93:23:21:85:dc:ed:a0:1a: bf:40:e3:49:c2:96:0c:3d:77:9c:20:d7:9b:d3:cc:90:d1:4f: 5a:e3:df:ed:85:ac:fc:ab:c5:c2:9b:3d:f9:cc:21:c4:b5:24: c9:22:08:d6:f9:a9:4d:e8:56:65:df:b7:01:b5:13:31:db:2c: 77:7c:73:f3:bc:97:9f:74:3c:1b:41:89:a4:9d:15:74:5e:38: de:92:f0:6c:e2:61:c9:8b:56:37:c2:9d:95:9d:b1:e0:49:7b: fe:bb:14:06:1a:ab:76:7a:4b:bf:51:ef:81:1c:7b:33:e3:82: 4b:98:a2:c4:9e:96:4f:91:1d:d6:af:3d:83:35:b0:c7:7b:9b: 62:65:ca:69:e2:ff:3b:3b:89:51:a8:80:6c:7a:85:f8:31:9c: 33:5a:5c:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjYwNTExMDU1MzQzWhcNMjYwNTE4MDU1MzQzWjAYMRYwFAYD VQQDEw02YTAxNmVlNy1mNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7seGIJ+i1p3VImcs9qHTU/noPur/WQWxUGH1j783IJMLTMbVnaIW3aetwKTc KNjQRj+eBqC3OfkYVm6R0pSvRS57wnDC9Xh+jpZcQeEg1aZrL168w1n+I1E+wLBk Id/5KE6rQCjK5p7mBlTiYSMi5vCXSo2VkFts0GV19HiM2FCdUFzEUDKr0RU7XTuT 4bmwBLc1nQMIC+Q8w53F7OQLIzIq7VQNzHCEZU58O2nLzdzlnvZKgWdo4z6WvtwK iFgCyJ1qB3niHEAmJ7uLlHYfcC7mP3lezAPI+dVLVMAaIl3UeFucwp6txc5ilz97 I9yBuA1oYTQG2Rr4xI54p8eFlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMXoSJ0 zXBZnMu/6slwsUyPOwrCMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIjuOG/WAWeitYHgRN7JuUny6HUZ4EK2csV13XZUFuvo9Q46X7cDuDrykwF86 pwTj1ZAuF/kO9bjJHmCIcL3H+q68Lbx52awWmgMuPsL9ddL9VWC416a36KOBWRI9 DDH/sJUYM5MjIYXc7aAav0DjScKWDD13nCDXm9PMkNFPWuPf7YWs/KvFwps9+cwh xLUkySII1vmpTehWZd+3AbUTMdssd3xz87yXn3Q8G0GJpJ0VdF443pLwbOJhyYtW N8KdlZ2x4El7/rsUBhqrdnpLv1HvgRx7M+OCS5iixJ6WT5Ed1q89gzWwx3ubYmXK aeL/OzuJUaiAbHqF+DGcM1pcsg== -----END CERTIFICATE-----Generated at Wed May 13 07:47:45 2026 by rpki-client