$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json) Hash identifier: X0hOXlZZmK6vLtxEixoQ/XhFrcb0Vx4huDfReEJFcKw= Subject key identifier: DA:8B:8F:44:47:62:29:AE:C5:5F:47:E6:CC:11:75:7D:11:88:5B:1E Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft Manifest number: 0205 Signing time: Wed 13 May 2026 03:08:11 +0000 Manifest this update: Wed 13 May 2026 03:08:10 +0000 Manifest next update: Wed 20 May 2026 03:08:10 +0000 Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: f9bnNTs6WIhOGB/tOwVnuLoSAaKhOnVDFqP/P+6gjl0=) 2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: +d//0YGkCcKL1FsuPM9/LDwxfVKY4NL0IuPYs6NjtuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Validity Not Before: May 13 03:08:10 2026 GMT Not After : May 20 03:08:10 2026 GMT Subject: CN=6a03eb1a-9c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:20:5e:7a:82:c2:05:76:1b:24:85:ad:2c: 66:ba:c9:9e:bd:bc:4d:bf:df:18:d8:fe:01:7a:81: b9:b0:45:96:6e:eb:7a:31:33:61:cb:5e:01:42:fa: 78:f4:89:90:0c:de:a7:97:82:95:4b:c9:1c:c4:b2: 3e:82:c5:06:26:c8:0b:80:db:5c:44:9a:64:17:40: 0a:34:b8:90:a7:09:fb:a1:5f:9a:20:06:14:cc:c9: 19:51:1c:4b:fc:62:61:d1:fa:30:c7:59:ca:1c:b1: 3c:4e:f5:0c:f1:96:e7:da:70:2c:bb:8e:b5:6d:b2: ce:41:1f:25:65:7f:e1:9e:87:e6:21:be:ca:c0:e7: ad:58:90:e5:f8:0c:29:9a:53:ce:cd:cc:7a:15:20: 58:0e:48:d1:9d:a8:b4:d2:01:89:1c:d7:bb:b9:2d: fe:32:ec:0a:6c:ff:79:69:2d:2d:d4:68:a6:d0:3c: ba:a3:e3:9f:81:50:8a:0f:46:f2:76:29:90:d3:1a: ea:a6:58:23:58:49:d7:5f:da:fc:b1:a5:36:f9:fe: 99:76:fc:f3:04:45:2b:5c:b6:84:b4:75:fd:8f:bb: 7e:e2:fe:75:58:95:86:c7:a7:e1:df:be:af:92:36: f0:9f:e5:1b:ce:a7:cb:ca:c5:b0:29:0d:46:b7:7d: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8B:8F:44:47:62:29:AE:C5:5F:47:E6:CC:11:75:7D:11:88:5B:1E X509v3 Authority Key Identifier: keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:18:22:f0:40:bb:65:9b:da:da:d4:d3:ff:5e:11:3c:4b:77: 55:b6:81:fa:af:7d:f5:38:a1:de:20:2d:3a:53:51:3e:ad:72: 1f:e3:f0:b5:f4:de:8a:e2:35:3b:1a:2a:95:92:83:6b:b1:a6: 81:4d:58:d5:50:1a:04:e0:72:a6:52:1d:8f:5b:e4:ac:75:c8: 2a:21:22:e4:63:58:95:dd:7a:8e:d0:d3:3a:58:3b:46:d2:f9: b6:63:e9:28:e4:00:a5:1d:d8:f0:2e:15:f9:3a:50:28:2f:8f: 69:ea:5c:5c:ed:ba:39:10:f9:a7:07:b5:b6:48:c3:6b:a8:2e: ee:a7:b4:8d:09:04:0f:ce:96:af:79:ef:86:46:3f:c5:44:23: 85:2c:56:88:49:99:70:12:01:76:e4:06:19:6a:18:e6:ac:db: 9a:cb:2d:93:de:2f:86:33:45:f3:85:30:ad:1b:03:b7:0a:1a: d2:94:0b:1b:c9:ba:6b:79:c1:66:08:b0:12:46:41:2e:7a:ca: 24:75:2c:04:4c:6a:6d:1e:87:19:b5:11:97:81:37:e4:0e:66: 3f:db:cf:34:45:15:df:eb:86:89:bf:e1:ca:47:ac:99:9f:41: 6d:0b:fa:96:05:6a:42:09:f8:09:cf:d0:9f:48:e6:bb:64:cf: 07:6a:b4:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF MzA0N0U1MDcwHhcNMjYwNTEzMDMwODEwWhcNMjYwNTIwMDMwODEwWjAYMRYwFAYD VQQDEw02YTAzZWIxYS05YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybogXnqCwgV2GySFrSxmusmevbxNv98Y2P4BeoG5sEWWbut6MTNhy14BQvp4 9ImQDN6nl4KVS8kcxLI+gsUGJsgLgNtcRJpkF0AKNLiQpwn7oV+aIAYUzMkZURxL /GJh0fowx1nKHLE8TvUM8Zbn2nAsu461bbLOQR8lZX/hnofmIb7KwOetWJDl+Awp mlPOzcx6FSBYDkjRnai00gGJHNe7uS3+MuwKbP95aS0t1Gim0Dy6o+OfgVCKD0by dimQ0xrqplgjWEnXX9r8saU2+f6ZdvzzBEUrXLaEtHX9j7t+4v51WJWGx6fh376v kjbwn+UbzqfLysWwKQ1Gt32fhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqLj0RH YimuxV9H5swRdX0RiFseMB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3 RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1 UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x cmpxeXdNS3YzUVRqQkg1UWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnxgi8EC7ZZva2tTT/14RPEt3VbaB+q999Tih3iAtOlNRPq1yH+PwtfTeiuI1 OxoqlZKDa7GmgU1Y1VAaBOByplIdj1vkrHXIKiEi5GNYld16jtDTOlg7RtL5tmPp KOQApR3Y8C4V+TpQKC+PaepcXO26ORD5pwe1tkjDa6gu7qe0jQkED86Wr3nvhkY/ xUQjhSxWiEmZcBIBduQGGWoY5qzbmsstk94vhjNF84UwrRsDtwoa0pQLG8m6a3nB ZgiwEkZBLnrKJHUsBExqbR6HGbURl4E35A5mP9vPNEUV3+uGib/hykesmZ9BbQv6 lgVqQgn4Cc/Qn0jmu2TPB2q06w== -----END CERTIFICATE-----Generated at Wed May 13 15:34:51 2026 by rpki-client