$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: eptVzVXiV6YCy7SDtHIODyTDjt3X5+vRWTvQYqLvgXg= Subject key identifier: F4:E0:AB:44:69:69:B3:61:93:E0:79:17:EE:15:DD:28:B8:75:71:D9 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0FD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0FC4 Signing time: Tue 12 May 2026 17:32:15 +0000 Manifest this update: Tue 12 May 2026 17:32:15 +0000 Manifest next update: Tue 19 May 2026 17:32:15 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: QJOwiM8C37BU/YI9MMdsajiF0VDoPatjSXC2AkBH82c=) 2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: MRRSvyAs4nXdOy4NirT/FV+CCoUxnvEKIcU+qHvpGa8=) 3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4051 (0xfd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: May 12 17:32:15 2026 GMT Not After : May 19 17:32:15 2026 GMT Subject: CN=6a03641f-2b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:83:a7:e8:ef:d0:83:43:d4:2f:36:0b:ac: c7:25:0c:0a:a6:a1:c7:89:ae:40:4e:97:f3:06:30: 1e:82:75:ea:50:3b:5f:c5:26:1c:f5:7e:e9:10:4f: 95:df:61:67:e9:8e:92:80:37:2d:31:fd:a5:c1:c7: 61:64:e0:34:ef:e9:99:f6:2d:99:1b:bc:48:7d:71: 9a:d6:de:60:c5:cc:e0:6d:87:d7:95:b6:c1:64:4e: 6e:b9:70:6c:f0:d3:b0:c5:41:53:d8:bc:53:f0:da: 25:47:98:1c:b7:7e:8f:1c:ad:a9:34:23:dc:68:d6: 5e:d3:44:12:93:e6:db:10:d6:5f:0f:ed:62:28:2e: cb:6f:a7:4f:0d:65:ca:5a:0d:ca:a4:81:89:c7:a2: 14:26:06:82:c5:5d:b5:c2:4c:b0:71:39:17:b6:67: 2b:31:43:f7:37:16:ca:82:d1:e9:02:ac:20:fd:47: 8e:e9:6f:ab:84:66:b6:1c:b2:c2:f8:1c:d2:b6:68: d4:23:6c:aa:43:a6:f8:a5:b6:5d:e0:52:2c:48:68: 0e:67:13:bf:c2:32:01:b4:fd:b8:c2:67:7c:29:de: 8a:8f:75:61:64:4c:96:0a:af:71:b9:f8:93:2b:7e: d0:ad:b5:6e:85:76:b2:c8:eb:52:91:5c:ff:ea:01: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E0:AB:44:69:69:B3:61:93:E0:79:17:EE:15:DD:28:B8:75:71:D9 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9c:2c:91:9f:97:6e:77:bf:08:9a:39:92:8f:9d:ec:ce:4c: c3:6f:d1:c6:ee:6d:c1:04:b3:1b:f2:1e:99:10:fc:cd:f8:08: 4a:55:11:07:98:88:49:44:bf:ee:2f:e9:81:78:ff:d3:38:ed: b4:7a:4f:7e:89:0d:b6:4e:2f:89:64:f3:91:76:7a:1c:96:ad: b6:b3:ff:1e:12:56:d7:53:6f:00:c9:0c:7d:3f:c4:09:a2:b9: ff:e9:fb:12:a8:ed:be:0a:d8:3a:5c:6e:a5:a4:62:96:38:d2: 76:40:83:96:cc:27:63:ce:99:1f:d0:24:95:f8:d0:95:62:d0: 7a:7b:99:07:7f:b7:e0:31:60:4a:dd:5a:2f:d6:0b:f9:cb:2c: a2:77:9b:5f:b9:9e:df:3d:7e:af:84:b2:4c:60:af:79:ce:50: ac:49:12:be:0b:99:bc:06:94:aa:dd:dc:9a:fa:a7:c8:f9:b6: 83:47:7e:40:f7:bb:9d:d8:b7:1c:5d:f7:ff:70:3b:29:d1:2e: 9c:ab:1c:b8:54:9b:da:f8:ab:02:37:ff:9f:6f:10:fc:db:e7: 50:31:7e:0a:b6:c6:79:28:5c:35:67:62:80:bf:56:e0:d8:f4: 09:47:44:5b:95:bb:c2:6d:cf:f4:e6:41:45:fa:e5:2d:55:2c: 27:db:e7:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYwNTEyMTczMjE1WhcNMjYwNTE5MTczMjE1WjAYMRYwFAYD VQQDEw02YTAzNjQxZi0yYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPiDp+jv0IND1C82C6zHJQwKpqHHia5ATpfzBjAegnXqUDtfxSYc9X7pEE+V 32Fn6Y6SgDctMf2lwcdhZOA07+mZ9i2ZG7xIfXGa1t5gxczgbYfXlbbBZE5uuXBs 8NOwxUFT2LxT8NolR5gct36PHK2pNCPcaNZe00QSk+bbENZfD+1iKC7Lb6dPDWXK Wg3KpIGJx6IUJgaCxV21wkywcTkXtmcrMUP3NxbKgtHpAqwg/UeO6W+rhGa2HLLC +BzStmjUI2yqQ6b4pbZd4FIsSGgOZxO/wjIBtP24wmd8Kd6Kj3VhZEyWCq9xufiT K37QrbVuhXayyOtSkVz/6gHKVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTgq0Rp abNhk+B5F+4V3Si4dXHZMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADZwskZ+Xbne/CJo5ko+d7M5Mw2/Rxu5twQSzG/IemRD8zfgISlURB5iISUS/ 7i/pgXj/0zjttHpPfokNtk4viWTzkXZ6HJattrP/HhJW11NvAMkMfT/ECaK5/+n7 EqjtvgrYOlxupaRiljjSdkCDlswnY86ZH9AklfjQlWLQenuZB3+34DFgSt1aL9YL +cssonebX7me3z1+r4SyTGCvec5QrEkSvguZvAaUqt3cmvqnyPm2g0d+QPe7ndi3 HF33/3A7KdEunKscuFSb2virAjf/n28Q/NvnUDF+CrbGeShcNWdigL9W4Nj0CUdE W5W7wm3P9OZBRfrlLVUsJ9vnYg== -----END CERTIFICATE-----Generated at Wed May 13 03:35:28 2026 by rpki-client