$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: 3p1uD5g4CFuXggZPSPcOv+1freN0t38CtMIeOr9kt0g= Subject key identifier: 8D:2D:DB:C6:11:F1:54:41:AE:4C:15:51:96:79:32:91:29:21:0E:94 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0844 Signing time: Tue 12 May 2026 21:01:27 +0000 Manifest this update: Tue 12 May 2026 21:01:26 +0000 Manifest next update: Tue 19 May 2026 21:01:26 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: 15x0/KZ4ofx+GOqNiGgael5VkvnjlmV3QvmfCcxZCTw=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) 3: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: May 12 21:01:26 2026 GMT Not After : May 19 21:01:26 2026 GMT Subject: CN=6a039527-e622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:9c:29:be:dd:64:24:50:37:de:25:34:a0: d2:9f:6e:89:c0:e1:2c:01:71:76:59:9d:e5:98:72: db:9d:9b:e3:69:94:e9:0f:77:bb:be:21:33:db:e0: 3e:cd:a8:29:4e:cc:5c:f0:0c:fa:90:2a:09:bc:71: 5f:f9:c5:a2:e7:74:1a:1c:36:d3:7c:80:c8:61:33: a3:7d:fe:f1:6f:06:29:9a:5f:ba:29:26:b6:47:8f: ff:69:46:c7:7f:8c:e1:cb:cf:2f:45:21:d6:05:cb: c7:36:6a:1c:04:00:d8:36:5a:54:1b:6d:93:84:ed: eb:1f:e3:9d:68:54:65:52:67:fa:b3:ed:55:40:8c: 40:c5:88:1e:9d:21:d3:10:9b:ad:f9:eb:7b:eb:8c: b5:8c:ab:d2:32:9e:eb:27:68:23:40:a3:ec:af:3b: 9b:1e:98:99:b4:c7:3b:fa:62:0b:0c:b0:10:e7:08: 37:88:2d:d9:4e:38:cc:e4:ae:29:d0:1d:07:51:53: cb:29:30:ab:09:a7:1a:aa:3a:4b:9d:cf:ad:c0:c4: 67:71:34:5d:80:79:de:b5:18:f5:a0:ad:6a:2a:14: 89:73:e8:ed:21:6b:ce:65:e5:89:7e:76:aa:db:7c: 5d:ec:ab:5b:38:cd:cc:8d:33:29:05:99:76:e7:9c: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2D:DB:C6:11:F1:54:41:AE:4C:15:51:96:79:32:91:29:21:0E:94 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:4c:83:57:27:19:5f:32:7f:41:73:af:47:16:3e:48:4b: 21:63:67:e4:33:6f:20:c0:dc:f3:6e:58:05:35:17:1d:f9:66: 3f:c0:33:8f:9c:cb:39:b3:23:7a:30:b3:59:e9:7c:5f:6e:7c: 02:e8:f7:b1:41:0f:32:95:98:26:90:c4:0a:03:9f:17:61:58: ee:9e:ae:ce:df:cc:c6:6a:da:8f:49:6f:75:d1:17:d5:a7:80: 2a:61:f3:6e:87:a3:22:4c:f3:bf:b3:e0:69:6b:bd:4e:ec:c8: c0:19:b4:88:43:8f:75:bb:c0:54:56:ec:c1:cd:8b:51:7d:3c: a4:d0:d9:e8:6e:6e:33:02:f4:ce:34:c9:79:ec:cf:c0:86:d4: aa:ac:5c:1f:a4:68:8d:4a:b4:08:93:8f:82:df:30:af:91:16: dc:05:e3:16:0f:64:c6:23:8a:94:0a:d8:f7:da:c3:d8:03:fe: b8:f5:99:e7:15:95:80:e2:a8:e3:62:1c:78:fb:b2:7f:d0:b2: ca:94:77:d6:fd:6e:25:39:48:a5:c0:59:17:63:b4:d1:30:47: 97:94:9d:af:58:3a:7b:fa:62:f9:5b:de:6a:97:29:5a:c1:eb: 66:66:18:98:91:cd:88:e5:3a:de:0c:e4:40:65:bf:f1:c4:f9: e1:67:e4:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwNTEyMjEwMTI2WhcNMjYwNTE5MjEwMTI2WjAYMRYwFAYD VQQDEw02YTAzOTUyNy1lNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLOcKb7dZCRQN94lNKDSn26JwOEsAXF2WZ3lmHLbnZvjaZTpD3e7viEz2+A+ zagpTsxc8Az6kCoJvHFf+cWi53QaHDbTfIDIYTOjff7xbwYpml+6KSa2R4//aUbH f4zhy88vRSHWBcvHNmocBADYNlpUG22ThO3rH+OdaFRlUmf6s+1VQIxAxYgenSHT EJut+et764y1jKvSMp7rJ2gjQKPsrzubHpiZtMc7+mILDLAQ5wg3iC3ZTjjM5K4p 0B0HUVPLKTCrCacaqjpLnc+twMRncTRdgHnetRj1oK1qKhSJc+jtIWvOZeWJfnaq 23xd7KtbOM3MjTMpBZl255y+vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0t28YR 8VRBrkwVUZZ5MpEpIQ6UMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV+9Mg1cnGV8yf0Fzr0cWPkhLIWNn5DNvIMDc825YBTUXHflmP8Azj5zLObMj ejCzWel8X258Auj3sUEPMpWYJpDECgOfF2FY7p6uzt/Mxmraj0lvddEX1aeAKmHz boejIkzzv7PgaWu9TuzIwBm0iEOPdbvAVFbswc2LUX08pNDZ6G5uMwL0zjTJeezP wIbUqqxcH6RojUq0CJOPgt8wr5EW3AXjFg9kxiOKlArY99rD2AP+uPWZ5xWVgOKo 42IcePuyf9CyypR31v1uJTlIpcBZF2O00TBHl5Sdr1g6e/pi+VveapcpWsHrZmYY mJHNiOU63gzkQGW/8cT54WfkBw== -----END CERTIFICATE-----Generated at Wed May 13 04:46:32 2026 by rpki-client