$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: XMX2ii680VnlODFV1XpoFhTN8Fdz2bgwGp19yb6E1ow= Subject key identifier: EF:1E:D3:D5:67:5A:61:9D:14:9F:A7:A3:2E:6B:EA:84:E9:2F:71:6A Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 0141 Signing time: Wed 13 May 2026 05:33:12 +0000 Manifest this update: Wed 13 May 2026 05:33:11 +0000 Manifest next update: Wed 20 May 2026 05:33:11 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: rJ7HNRARwGEo3bRk8/I87f5xsrer4QPZD5FbgrnrvJs=) 2: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: nm1Ullm2VIIXw5m4XpAUTvY39qoFFv2kQzceO6Rs4JQ=) 3: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: zpgkPkDvpxrkSLXBoEJusQVoT2JeDQ/RaiKoNpwaUvg=) 4: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: tbOGVdr1pGEtRNIPhw+pN+6OYD1Bg4DdAHsAJbGglfo=) 5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: WpLf4AaObe+N5I2HIzmO3ifOs3a8b6pFk0v9kjWfhKo=) 6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: CkipJrZk0lzhAoob2kPQd93c6/y1lAZ0Ra8Fe1utBl0=) 7: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: May 13 05:33:11 2026 GMT Not After : May 20 05:33:11 2026 GMT Subject: CN=6a040d18-f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:a6:17:90:e4:25:fd:8e:8a:b6:b5:ee:7c: 85:f1:c2:06:e3:f0:a3:d0:85:a8:e0:22:5e:74:1e: 0e:08:bb:ee:ca:53:0c:55:f8:95:fe:53:b2:60:e7: 78:9e:ab:8a:78:d4:25:3a:01:37:05:67:41:3a:b2: dd:49:e2:dc:6f:84:28:ec:43:ee:e8:bc:2a:e5:12: d0:ab:fb:83:ee:76:29:dc:d8:fa:55:79:1e:5a:a6: cb:a1:bd:c9:5c:4e:f5:66:df:69:65:0b:3a:f4:d7: 92:cd:db:67:ac:7e:57:85:18:69:e9:85:4a:6a:a0: 4b:da:e2:27:15:64:b0:72:9a:3c:f4:42:03:97:28: 7a:67:2f:a6:40:98:29:da:e9:da:a9:e4:36:88:f8: 58:9d:26:cf:33:23:bf:77:b6:cb:86:f2:19:78:4b: 28:dd:da:02:78:bf:c2:f4:45:80:22:9a:fd:6d:a7: bb:fe:4c:ac:47:8e:78:77:19:46:6d:4c:51:22:9f: 34:7a:3a:16:af:4e:a5:83:c4:f6:f4:21:72:d4:02: d7:e3:21:be:ce:95:37:1b:fe:a5:da:35:f0:79:b3: c3:bb:c4:55:d3:62:5c:20:f2:f5:e7:89:a9:8f:14: 7c:b3:95:71:b3:8b:38:ed:4c:a1:e6:6a:87:fd:7c: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1E:D3:D5:67:5A:61:9D:14:9F:A7:A3:2E:6B:EA:84:E9:2F:71:6A X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:a8:7f:4b:68:3c:7f:3d:09:f7:07:c9:78:14:88:a9:87: ff:f6:b1:12:f4:9d:b0:10:08:be:71:02:86:46:14:e6:f6:14: 2c:a2:ff:79:09:41:55:ac:61:94:3f:bd:0c:df:aa:b7:01:e4: 7b:af:19:27:3a:25:49:54:64:27:d5:80:5d:96:f0:15:90:57: 07:f2:6e:10:e3:8c:b9:b3:3f:6f:1b:47:94:f3:8e:e8:89:0b: 99:f2:a7:66:54:56:db:e8:0b:0f:49:ee:3b:84:0d:25:b2:7d: 92:a4:fe:36:98:94:83:be:76:f5:7f:9c:5b:93:fd:e0:ef:ac: 91:65:1b:71:a8:02:4a:1b:54:28:7b:00:16:c3:37:f5:1c:65: 5c:a5:93:8b:51:8d:6e:86:b1:01:0d:75:cf:35:85:91:01:53: 48:a8:36:03:8b:ef:0c:90:95:c8:5f:f4:29:00:23:1e:d5:46: 76:8f:44:f7:9c:7f:a7:c8:a1:b5:f4:89:e8:9a:1d:38:53:c7: 60:c7:80:f4:61:57:34:30:94:8e:70:32:8a:6d:2e:5a:13:8d: e2:21:2a:d2:8f:07:bc:c6:fe:5b:c2:fa:3c:8d:50:8a:67:ae: b2:b9:63:2f:c7:88:fc:bf:02:e8:4f:fd:3a:8c:4b:5d:d3:90: 35:d4:de:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjYwNTEzMDUzMzExWhcNMjYwNTIwMDUzMzExWjAYMRYwFAYD VQQDEw02YTA0MGQxOC1mMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAju2mF5DkJf2Oira17nyF8cIG4/Cj0IWo4CJedB4OCLvuylMMVfiV/lOyYOd4 nquKeNQlOgE3BWdBOrLdSeLcb4Qo7EPu6Lwq5RLQq/uD7nYp3Nj6VXkeWqbLob3J XE71Zt9pZQs69NeSzdtnrH5XhRhp6YVKaqBL2uInFWSwcpo89EIDlyh6Zy+mQJgp 2unaqeQ2iPhYnSbPMyO/d7bLhvIZeEso3doCeL/C9EWAIpr9bae7/kysR454dxlG bUxRIp80ejoWr06lg8T29CFy1ALX4yG+zpU3G/6l2jXwebPDu8RV02JcIPL154mp jxR8s5Vxs4s47Uyh5mqH/XwXQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8e09Vn WmGdFJ+noy5r6oTpL3FqMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdBGof0toPH89CfcHyXgUiKmH//axEvSdsBAIvnEChkYU5vYULKL/eQlBVaxh lD+9DN+qtwHke68ZJzolSVRkJ9WAXZbwFZBXB/JuEOOMubM/bxtHlPOO6IkLmfKn ZlRW2+gLD0nuO4QNJbJ9kqT+NpiUg7529X+cW5P94O+skWUbcagCShtUKHsAFsM3 9RxlXKWTi1GNboaxAQ11zzWFkQFTSKg2A4vvDJCVyF/0KQAjHtVGdo9E95x/p8ih tfSJ6JodOFPHYMeA9GFXNDCUjnAyim0uWhON4iEq0o8HvMb+W8L6PI1Qimeusrlj L8eI/L8C6E/9OoxLXdOQNdTehw== -----END CERTIFICATE-----Generated at Wed May 13 14:41:52 2026 by rpki-client