$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: J35fELp4eCFGTlDxnUu15/Z2IuEhjeTKbff0kz06DCM= Subject key identifier: 57:43:B6:BB:2A:3D:EF:4F:11:24:5A:BA:CF:EE:60:0F:B4:CB:4F:FE Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 18F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 18D1 Signing time: Tue 12 May 2026 16:29:12 +0000 Manifest this update: Tue 12 May 2026 16:29:11 +0000 Manifest next update: Tue 19 May 2026 16:29:11 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: ALBMDVqJ3/1NvOzuGT4Rtjc+RPZNQDL1Dn3dFZEgdOY=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: F7gvzg0So++J2V4XA9vCkNOHszA1gZ0+wMtYApbJrQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6392 (0x18f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: May 12 16:29:11 2026 GMT Not After : May 19 16:29:11 2026 GMT Subject: CN=6a035558-a4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:0c:37:16:ac:8e:b8:d6:4c:55:44:0e:97: e8:73:e4:00:d9:5c:3f:f8:d4:d3:6e:17:b4:a3:ca: 1c:2a:ac:7e:b5:e2:47:ae:92:69:9c:d0:cc:a6:b8: d3:e6:c4:4c:91:6d:61:fd:4e:33:54:49:4a:ab:4d: 16:f9:68:c7:ab:f4:4f:ea:12:ad:11:6c:04:5a:74: e0:43:54:7e:b4:a3:00:29:b5:92:5c:80:7b:43:45: c1:f6:90:2c:f6:23:45:72:74:2e:b5:96:48:2a:32: 6c:1c:71:bc:af:4e:df:9c:c8:f3:99:d6:3e:72:73: d2:16:02:99:4b:c5:d0:75:78:ab:b9:d6:be:d9:ad: 5f:bd:46:32:d2:b2:b2:b1:8b:ea:97:9c:59:3f:66: b5:6c:9e:9f:1d:c3:52:c8:39:6d:ba:13:e4:2b:92: 05:9a:54:d4:38:71:a3:3a:5b:64:cd:61:09:dd:89: d5:55:92:fe:42:78:93:fe:57:cc:ed:87:85:da:c7: 02:1e:fb:52:52:65:77:f3:3d:cb:c8:1f:65:b8:0a: 3d:8c:c6:0c:0b:e0:d4:f6:14:f5:a5:ed:31:26:c5: 02:71:e2:5c:bd:39:ff:09:d2:9e:2d:d6:9a:b5:55: 05:9a:1d:09:df:4c:6b:18:8c:1b:9c:f9:b6:6b:63: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:43:B6:BB:2A:3D:EF:4F:11:24:5A:BA:CF:EE:60:0F:B4:CB:4F:FE X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b9:cf:84:d5:5a:bd:6f:c9:ce:4b:da:0b:d2:8a:0a:b0:55: 1d:85:1f:04:61:0e:16:10:63:84:78:6c:31:2a:86:50:fb:1b: 97:73:89:cc:72:de:e9:a4:9c:64:9b:68:87:f8:a8:05:72:0f: d6:c0:5f:40:43:8a:ef:a0:af:d8:68:c7:e2:e6:a5:4e:d7:9e: 5b:76:e2:a2:3e:14:6e:81:fe:4a:73:68:ea:3d:7d:e5:75:40: 2a:ba:1b:52:01:dd:76:75:bd:b9:20:cb:e9:4a:c5:24:3b:56: fd:13:9a:60:d3:83:d6:e6:1f:8d:36:2e:83:32:19:0b:05:e4: 38:2d:74:2b:4a:15:70:90:9b:0f:15:b0:75:2f:67:4d:db:54: ba:8d:34:6d:5f:30:39:92:3d:6d:0f:17:2f:12:90:40:e8:94: 94:16:cc:dd:06:c3:c9:6a:da:24:2a:66:a5:34:7a:f1:23:78: 04:17:41:ef:10:1b:64:cf:0f:f8:86:35:29:02:65:ad:5a:ea: 87:5c:2f:f1:db:f1:e0:43:d5:f1:83:7d:df:b9:39:44:f2:12: 22:ef:85:20:3f:21:f1:fb:65:25:c7:59:81:17:f1:90:c1:82: b5:b3:5f:d6:93:cf:ed:e2:d1:a7:10:1c:93:94:28:11:d8:4f: c8:68:0a:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwNTEyMTYyOTExWhcNMjYwNTE5MTYyOTExWjAYMRYwFAYD VQQDEw02YTAzNTU1OC1hNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL8MNxasjrjWTFVEDpfoc+QA2Vw/+NTTbhe0o8ocKqx+teJHrpJpnNDMprjT 5sRMkW1h/U4zVElKq00W+WjHq/RP6hKtEWwEWnTgQ1R+tKMAKbWSXIB7Q0XB9pAs 9iNFcnQutZZIKjJsHHG8r07fnMjzmdY+cnPSFgKZS8XQdXiruda+2a1fvUYy0rKy sYvql5xZP2a1bJ6fHcNSyDltuhPkK5IFmlTUOHGjOltkzWEJ3YnVVZL+QniT/lfM 7YeF2scCHvtSUmV38z3LyB9luAo9jMYMC+DU9hT1pe0xJsUCceJcvTn/CdKeLdaa tVUFmh0J30xrGIwbnPm2a2O+wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdDtrsq Pe9PESRaus/uYA+0y0/+MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwLnPhNVavW/JzkvaC9KKCrBVHYUfBGEOFhBjhHhsMSqGUPsbl3OJzHLe6aSc ZJtoh/ioBXIP1sBfQEOK76Cv2GjH4ualTteeW3bioj4UboH+SnNo6j195XVAKrob UgHddnW9uSDL6UrFJDtW/ROaYNOD1uYfjTYugzIZCwXkOC10K0oVcJCbDxWwdS9n TdtUuo00bV8wOZI9bQ8XLxKQQOiUlBbM3QbDyWraJCpmpTR68SN4BBdB7xAbZM8P +IY1KQJlrVrqh1wv8dvx4EPV8YN937k5RPISIu+FID8h8ftlJcdZgRfxkMGCtbNf 1pPP7eLRpxAck5QoEdhPyGgKFQ== -----END CERTIFICATE-----Generated at Wed May 13 11:54:49 2026 by rpki-client