$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: VHpIapsnILpPtQdazdzfHckW0qpt/5B2xhuNyMKB+0k= Subject key identifier: 1E:30:37:0F:03:82:41:19:35:7A:AF:B5:3B:7D:45:03:73:AD:F0:05 Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 8D Signing time: Mon 11 May 2026 02:32:17 +0000 Manifest this update: Mon 11 May 2026 02:32:17 +0000 Manifest next update: Mon 18 May 2026 02:32:17 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: McW2XC7wkVDcISYwHfOmlFiRmZ1ZZNQNbcdKV5141n4=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: snafex4e2SJ4Z7RULXkopBIE0X2g6JmA9mTt3bV4/r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: May 11 02:32:17 2026 GMT Not After : May 18 02:32:17 2026 GMT Subject: CN=6a013fb1-9191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:76:73:d9:21:e4:08:d1:b9:3a:1a:06:c0: 90:b5:1c:1f:38:e5:f5:e4:58:9d:33:9c:05:22:cb: f5:09:58:48:54:f6:33:43:46:da:c2:e0:c9:f5:66: 35:20:e1:3d:fd:c4:55:1e:fd:0b:da:a7:37:ce:09: 3c:a4:d7:e5:05:07:29:8e:80:06:72:f5:a6:45:cb: 3b:62:e1:d1:37:93:56:d2:53:4c:4a:f1:26:19:7e: 80:e7:3d:4f:2e:11:45:40:25:c7:ab:2e:20:87:76: c6:01:a0:6d:87:f0:28:c4:a8:cd:60:74:ba:1a:79: 93:cd:94:ea:c6:73:75:65:a8:ed:34:93:3f:fd:bb: 09:3e:cd:1a:db:41:62:50:db:a3:bf:35:0d:79:55: 2d:19:cb:8d:0c:a4:6f:b4:45:3b:b1:81:69:2e:71: c4:d0:27:4b:d1:41:b7:79:bf:96:cd:68:0a:1c:72: f7:7f:e6:7f:c8:01:28:9a:94:f5:b0:01:da:cf:72: cf:83:e9:4a:14:20:9b:a1:c6:1c:2b:3a:87:37:ee: 88:e0:61:9c:ad:43:c0:2d:0a:9e:32:13:f2:f5:a7: 61:be:6a:be:53:64:8f:d6:94:1a:83:4d:27:68:17: 87:fa:95:8a:76:e0:98:92:ee:fa:f4:ff:1e:87:34: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:30:37:0F:03:82:41:19:35:7A:AF:B5:3B:7D:45:03:73:AD:F0:05 X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:65:f8:60:d2:22:ce:17:e9:de:f0:99:bd:4d:45:fc:58:47: 8c:1f:9c:6f:77:c8:e4:85:4f:62:e8:c5:8c:a2:49:f2:69:dc: 29:97:61:6c:2b:7a:f3:d6:48:85:80:d6:ab:31:23:87:ee:64: b6:f4:29:ff:fe:86:fe:88:8b:40:e0:07:d4:42:bf:bb:83:39: 57:e9:e6:63:3d:5c:a8:f6:de:0f:c0:a3:6f:86:dc:46:b2:a9: 82:da:a1:4f:64:fe:04:a8:79:c5:a1:77:46:9c:52:83:1d:f4: d1:a5:55:0f:f8:3d:4a:5b:69:f0:3d:d3:3f:94:89:8d:2d:2f: c9:7b:da:48:7e:d3:d7:c7:28:59:c6:49:89:c5:b6:db:97:8c: c0:33:d1:6f:71:48:11:37:6a:8c:cb:3e:a8:17:b0:f5:86:aa: a6:2d:d2:94:a0:f1:b8:72:3f:fa:09:6d:1f:60:ad:60:44:d3: 4d:5e:b5:df:c6:71:d1:d3:3d:9d:a0:38:a5:44:1e:80:ce:5d: 27:b7:13:cd:f7:7e:e6:f2:69:c5:f8:f5:dd:2f:78:17:6f:72: 6b:c1:72:e0:56:1e:8c:81:58:b9:3f:32:eb:43:03:6b:4e:1e: e6:73:59:5e:5a:9d:69:ad:23:ae:7d:4b:70:e2:bb:95:64:68: 0d:e4:bd:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDAyNEQ4RjE1QUEzOTc3MjE3NTg4M0EyRURDMTY1MDE0 RTE5MjhBMUEwHhcNMjYwNTExMDIzMjE3WhcNMjYwNTE4MDIzMjE3WjAYMRYwFAYD VQQDEw02YTAxM2ZiMS05MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQh2c9kh5AjRuToaBsCQtRwfOOX15FidM5wFIsv1CVhIVPYzQ0bawuDJ9WY1 IOE9/cRVHv0L2qc3zgk8pNflBQcpjoAGcvWmRcs7YuHRN5NW0lNMSvEmGX6A5z1P LhFFQCXHqy4gh3bGAaBth/AoxKjNYHS6GnmTzZTqxnN1ZajtNJM//bsJPs0a20Fi UNujvzUNeVUtGcuNDKRvtEU7sYFpLnHE0CdL0UG3eb+WzWgKHHL3f+Z/yAEompT1 sAHaz3LPg+lKFCCbocYcKzqHN+6I4GGcrUPALQqeMhPy9adhvmq+U2SP1pQag00n aBeH+pWKduCYku769P8ehzQBZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4wNw8D gkEZNXqvtTt9RQNzrfAFMB8GA1UdIwQYMBaAFAJNjxWqOXchdYg6LtwWUBThkooa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80QTEyQTMzQzgy RjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5RjFpRG91M0JaUUZPR1Np aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2loby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80QTEyQTMzQzgyRjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5 RjFpRG91M0JaUUZPR1NpaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnWX4YNIizhfp3vCZvU1F/FhHjB+cb3fI5IVPYujFjKJJ8mncKZdhbCt689ZI hYDWqzEjh+5ktvQp//6G/oiLQOAH1EK/u4M5V+nmYz1cqPbeD8Cjb4bcRrKpgtqh T2T+BKh5xaF3RpxSgx300aVVD/g9Sltp8D3TP5SJjS0vyXvaSH7T18coWcZJicW2 25eMwDPRb3FIETdqjMs+qBew9Yaqpi3SlKDxuHI/+gltH2CtYETTTV6138Zx0dM9 naA4pUQegM5dJ7cTzfd+5vJpxfj13S94F29ya8Fy4FYejIFYuT8y60MDa04e5nNZ Xlqdaa0jrn1LcOK7lWRoDeS9dg== -----END CERTIFICATE-----Generated at Wed May 13 05:02:32 2026 by rpki-client