$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: hGZny4EnYkI2iReh5vv04wNQtl3unxDYPChhQ+amolw= Subject key identifier: 07:95:A7:94:04:45:6D:A3:B9:50:81:CB:15:F7:86:D1:37:C7:BE:C5 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 0293 Signing time: Wed 13 May 2026 02:35:24 +0000 Manifest this update: Wed 13 May 2026 02:35:24 +0000 Manifest next update: Wed 20 May 2026 02:35:24 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: Gw6ZWdJXlwe5z4IropCVq0e69IioSA83BgnA8cZJOgU=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: ByTjShjzlXNDkMN69/J18p3VnbTj5vjjzwheoKvtWG4=) 3: 23852F72273711F1B6AB5B98AD833773.roa (hash: P31b2FKpx48VcLnsu7CI9st3Wk7Nus+neDGiJjmbJZg=) 4: 232F9552F80D11F0AED4E007706F56BC.roa (hash: 1VQhLb/1DZcPUazmrGPc7TJ13JYFfVY10cAzsAWEN8k=) 5: 05F505961AA311F0A475D464C4F9AE02.roa (hash: xZbkhabGis/U5mUU9RekGm8eUQ6rFKaSmoEBRgqnHq8=) 6: 020607A2498711EFBB260663C4F9AE02.roa (hash: NE7gXopF/sfzGGjBPy5TRpiqm9S4sfZVevZ1+WaB9aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: May 13 02:35:24 2026 GMT Not After : May 20 02:35:24 2026 GMT Subject: CN=6a03e36c-c3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:1b:c2:fd:03:a2:10:8a:8e:e4:ab:33:38: 0f:7f:e9:6c:0a:de:07:11:1d:d7:54:d6:f3:27:aa: bc:7f:34:08:67:3e:c9:2b:44:ee:6c:ae:b0:22:32: 9d:f5:a0:d8:e9:9a:82:4b:c3:8a:16:41:5c:f1:38: e3:3d:56:5d:38:0c:cf:a7:f3:26:d7:1c:28:0f:17: de:da:f9:e5:92:26:62:f9:70:aa:89:f2:71:2a:69: bf:be:c5:37:2d:d0:06:d9:4f:05:c7:72:f1:3c:ca: a2:b1:19:f6:28:10:a7:06:a1:67:a7:86:16:82:b8: bf:74:9a:20:ce:08:2d:10:42:95:36:90:e2:7e:ba: a4:60:ac:0e:ff:84:47:04:31:15:2f:7f:4c:79:2a: c0:08:f8:3f:c1:fd:31:a7:85:72:f4:21:92:d1:b7: ff:0b:70:fe:0d:a1:1c:e6:12:c1:60:09:d3:ae:d1: 97:53:40:61:be:db:d4:6f:1b:0a:87:f6:7e:bc:64: 73:b7:b3:97:da:c7:8d:52:fd:59:39:6a:83:81:81: be:1c:85:cd:5c:c8:de:40:c1:3c:3f:7c:7f:62:f7: 9e:72:d6:ac:c7:c2:f9:6f:61:f3:6f:b1:45:2f:ba: 35:48:e1:21:3c:e1:1d:a6:f1:8b:4e:2f:55:c7:f0: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:95:A7:94:04:45:6D:A3:B9:50:81:CB:15:F7:86:D1:37:C7:BE:C5 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:84:31:12:9d:6a:25:83:36:cf:70:e7:6f:8e:6c:50:d0:05: 15:29:27:96:89:ef:e0:04:bb:c7:c9:ad:09:d7:85:b4:a7:71: 2d:e5:ce:25:3b:b7:fd:8e:10:14:ed:01:c1:e8:c6:fb:d3:a8: d4:7f:f0:34:4a:7a:83:db:3f:03:18:da:ba:6a:41:28:2b:54: 5a:b8:51:21:b2:8a:a1:f7:f4:10:76:99:ee:0a:04:7e:b7:79: ed:6a:0d:9d:fa:29:b1:96:b5:49:a2:25:09:15:e2:0f:ea:69: 9b:7a:a0:65:80:b0:c8:e2:99:ff:1f:52:47:a3:3d:5a:2a:86: 89:95:17:39:66:d6:48:8d:33:81:4c:ae:fb:ac:82:fe:f2:3a: e4:d2:c8:f6:09:e5:ba:66:33:36:c5:c3:17:e3:d7:74:24:98: a0:ba:58:79:64:2a:47:72:28:b0:62:0e:93:b2:b1:73:c3:98: 15:3e:17:0d:d4:d1:08:0d:6a:09:c6:b3:e6:3e:69:43:bb:5d: 3d:8b:64:bf:8f:ba:bd:9f:56:60:4b:be:c9:a2:e0:d2:ff:ef: a8:3d:95:2f:46:b6:4d:a7:81:fe:38:1f:8e:84:14:e9:8f:4b: fe:81:1e:79:6f:a5:76:1c:34:88:f5:f6:a6:c9:2c:f2:c5:09: 3f:6b:b7:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwNTEzMDIzNTI0WhcNMjYwNTIwMDIzNTI0WjAYMRYwFAYD VQQDEw02YTAzZTM2Yy1jM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrIbwv0DohCKjuSrMzgPf+lsCt4HER3XVNbzJ6q8fzQIZz7JK0TubK6wIjKd 9aDY6ZqCS8OKFkFc8TjjPVZdOAzPp/Mm1xwoDxfe2vnlkiZi+XCqifJxKmm/vsU3 LdAG2U8Fx3LxPMqisRn2KBCnBqFnp4YWgri/dJogzggtEEKVNpDifrqkYKwO/4RH BDEVL39MeSrACPg/wf0xp4Vy9CGS0bf/C3D+DaEc5hLBYAnTrtGXU0BhvtvUbxsK h/Z+vGRzt7OX2seNUv1ZOWqDgYG+HIXNXMjeQME8P3x/Yveectasx8L5b2Hzb7FF L7o1SOEhPOEdpvGLTi9Vx/BAnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeVp5QE RW2juVCByxX3htE3x77FMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdIQxEp1qJYM2z3Dnb45sUNAFFSknlonv4AS7x8mtCdeFtKdxLeXOJTu3/Y4Q FO0BwejG+9Oo1H/wNEp6g9s/AxjaumpBKCtUWrhRIbKKoff0EHaZ7goEfrd57WoN nfopsZa1SaIlCRXiD+ppm3qgZYCwyOKZ/x9SR6M9WiqGiZUXOWbWSI0zgUyu+6yC /vI65NLI9gnlumYzNsXDF+PXdCSYoLpYeWQqR3IosGIOk7Kxc8OYFT4XDdTRCA1q Ccaz5j5pQ7tdPYtkv4+6vZ9WYEu+yaLg0v/vqD2VL0a2TaeB/jgfjoQU6Y9L/oEe eW+ldhw0iPX2psks8sUJP2u3JA== -----END CERTIFICATE-----Generated at Wed May 13 15:33:45 2026 by rpki-client