$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: h2ChfGVdbSzPAzkD2UuhxCsKE0c38Toll7JMQLUKxPU= Subject key identifier: 5A:04:66:F1:5B:B9:31:FF:93:38:FC:84:4A:EB:23:53:3C:2F:B9:6B Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C95 Signing time: Tue 12 May 2026 18:40:12 +0000 Manifest this update: Tue 12 May 2026 18:40:11 +0000 Manifest next update: Tue 19 May 2026 18:40:11 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: K4heGjhvrjkTYRWwJuA5HGffDr9562S61Q5zxIBHhJ8=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: May 12 18:40:11 2026 GMT Not After : May 19 18:40:11 2026 GMT Subject: CN=6a03740b-199c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:de:74:64:99:f9:a5:32:39:43:b4:0d:a2: 26:f8:e0:7c:7a:d8:55:89:ec:df:ab:51:26:6e:b4: a6:c3:72:d7:bb:06:67:49:29:2d:f6:6d:5c:30:4c: 18:bb:24:85:2e:37:58:d5:a8:0e:81:fb:a2:a8:56: b4:04:ec:93:11:a6:4e:07:a6:88:e9:70:ef:2f:2d: 2f:37:d8:ec:a3:cb:05:03:26:6d:d4:b3:df:2f:b7: cc:67:a1:21:04:f4:9d:42:ce:06:52:c0:e4:93:2f: b9:df:f2:75:45:ec:b0:b8:25:33:11:9e:da:be:6e: ac:e1:f8:f6:1c:7c:17:82:02:9c:c9:36:53:f7:22: ad:87:9b:2f:14:46:ae:75:8e:77:69:dc:c4:47:60: d5:25:cb:d7:74:0d:7c:76:a4:28:94:c1:54:a3:74: e8:b1:7f:19:1e:cc:50:41:8e:1f:64:da:0d:34:08: f4:3e:6a:ad:18:b1:a6:e2:3e:a4:ea:92:81:60:85: 80:67:4e:37:e7:b6:e9:cc:f1:06:5f:03:d6:e6:4f: 89:4d:e1:ff:db:d5:06:6f:14:42:f7:63:aa:a7:ae: d8:94:36:c8:b3:b3:b3:aa:6b:4b:1e:24:f4:6d:2c: 29:ed:18:39:62:31:c2:15:83:17:89:a0:f7:e6:b3: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:04:66:F1:5B:B9:31:FF:93:38:FC:84:4A:EB:23:53:3C:2F:B9:6B X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1a:70:f7:71:4a:1e:61:3c:c7:a7:fe:fe:c8:c2:74:10:f8: c5:82:ed:a5:3c:f4:55:91:6d:07:af:84:ac:6f:ae:a0:dd:c8: 41:84:1f:15:66:3c:31:75:bc:6c:fb:71:d6:b9:59:aa:f3:cb: 4e:eb:de:78:2f:f2:db:4c:e2:80:94:55:0e:6e:4c:03:82:1e: a5:d1:72:4c:0c:56:3d:1e:17:e3:cb:1c:d8:00:44:27:9e:90: c3:c6:d3:fc:f6:5b:f4:bd:13:9d:3d:87:de:a5:51:85:41:b9: 9f:33:48:76:f4:ec:ac:d1:ca:c8:97:06:c7:8f:7e:cc:00:04: a5:ae:97:1e:3c:e5:99:14:7f:d6:16:7e:de:d8:ca:ed:a2:e3: c1:3e:43:8a:a5:bb:ec:ee:ee:23:db:e7:fa:44:d7:d9:d2:bc: e2:a0:90:f6:da:d5:80:85:dd:c2:46:f1:7a:4a:48:ba:62:2b: b2:ac:88:fc:14:75:cc:fc:00:4c:7e:09:85:ee:a8:58:a6:e0: ad:be:0e:52:26:31:0a:9e:12:e8:cf:95:c3:d7:f0:2f:c2:b6: 27:b1:f5:58:ab:9a:cd:6a:bc:ad:3f:fb:8a:9f:f4:c9:6a:74: 85:a1:c7:81:ba:82:bd:4e:2f:f0:fd:97:de:09:a8:ec:05:c3: 28:4d:d5:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwNTEyMTg0MDExWhcNMjYwNTE5MTg0MDExWjAYMRYwFAYD VQQDEw02YTAzNzQwYi0xOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBredGSZ+aUyOUO0DaIm+OB8ethViezfq1EmbrSmw3LXuwZnSSkt9m1cMEwY uySFLjdY1agOgfuiqFa0BOyTEaZOB6aI6XDvLy0vN9jso8sFAyZt1LPfL7fMZ6Eh BPSdQs4GUsDkky+53/J1ReywuCUzEZ7avm6s4fj2HHwXggKcyTZT9yKth5svFEau dY53adzER2DVJcvXdA18dqQolMFUo3TosX8ZHsxQQY4fZNoNNAj0PmqtGLGm4j6k 6pKBYIWAZ04357bpzPEGXwPW5k+JTeH/29UGbxRC92Oqp67YlDbIs7OzqmtLHiT0 bSwp7Rg5YjHCFYMXiaD35rOCTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoEZvFb uTH/kzj8hErrI1M8L7lrMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRpw93FKHmE8x6f+/sjCdBD4xYLtpTz0VZFtB6+ErG+uoN3IQYQfFWY8MXW8 bPtx1rlZqvPLTuveeC/y20zigJRVDm5MA4IepdFyTAxWPR4X48sc2ABEJ56Qw8bT /PZb9L0TnT2H3qVRhUG5nzNIdvTsrNHKyJcGx49+zAAEpa6XHjzlmRR/1hZ+3tjK 7aLjwT5DiqW77O7uI9vn+kTX2dK84qCQ9trVgIXdwkbxekpIumIrsqyI/BR1zPwA TH4Jhe6oWKbgrb4OUiYxCp4S6M+Vw9fwL8K2J7H1WKuazWq8rT/7ip/0yWp0haHH gbqCvU4v8P2X3gmo7AXDKE3VYg== -----END CERTIFICATE-----Generated at Wed May 13 15:30:01 2026 by rpki-client