$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: 1ywdCNXF8BeeS+4VIDT2PQUVT3u9yYkRYQ7ieXC3mA4= Subject key identifier: 50:C6:EC:48:25:89:C2:31:47:0F:76:58:8F:F0:79:9A:BB:C6:E1:FC Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0894 Signing time: Tue 12 May 2026 20:41:39 +0000 Manifest this update: Tue 12 May 2026 20:41:38 +0000 Manifest next update: Tue 19 May 2026 20:41:38 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: wMlGRX8MVpsGX+TxYmY+PzS5pe/0j2dqO/nYC4gg4p8=) 2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=) 3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: May 12 20:41:38 2026 GMT Not After : May 19 20:41:38 2026 GMT Subject: CN=6a039082-a4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:40:20:4d:48:93:5a:0f:07:bf:11:bb:75: ca:1d:ab:c5:dd:8c:60:5b:fa:b4:83:5f:36:1e:f0: 1b:f3:ed:0a:77:0e:d7:2c:7b:fb:af:97:f4:4c:23: bd:f7:ed:1b:ed:35:94:c4:8e:2c:95:b5:e8:8a:fc: 61:7f:b4:c0:b4:42:10:bc:1f:44:d0:c0:da:10:5f: 00:ee:e5:d4:61:bd:d8:b2:1b:1c:8c:f5:93:9f:36: ca:bd:88:5f:87:0f:4f:2c:42:b3:36:82:df:c5:47: 7d:6b:fe:c1:52:e7:dc:a6:a8:3b:f1:78:95:a3:ea: a2:c1:ea:35:43:93:74:d8:f6:17:96:01:14:9b:3d: 04:ce:8a:90:7e:9c:f2:e2:16:9b:ed:86:ce:62:b8: 7c:db:49:6a:fc:dc:69:0d:1b:e6:b5:21:2b:b2:85: 73:46:6d:fd:10:5c:ed:3d:30:92:68:ba:fe:46:c4: 52:25:01:d5:62:43:01:ff:d4:1e:af:e0:81:1f:2d: bc:5c:18:56:f5:41:f9:48:70:09:64:31:a9:e7:57: a1:44:6b:11:db:a4:47:54:cc:0a:9b:fa:bf:e4:c5: e2:78:ba:9f:95:37:18:3d:de:81:a1:4a:e5:b8:7c: 85:1c:32:a4:39:96:23:4c:59:1f:cf:a4:c5:f8:35: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C6:EC:48:25:89:C2:31:47:0F:76:58:8F:F0:79:9A:BB:C6:E1:FC X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1f:0d:57:5e:96:de:dd:b2:54:32:a5:ad:18:9b:59:7c:3c: b2:21:d9:a5:45:08:bc:1f:48:83:25:cb:d8:4a:eb:4d:c2:05: bd:e3:6b:4d:92:7c:fe:32:8f:1b:73:68:c1:66:56:47:ba:d6: 47:df:e9:c6:d3:a1:8a:69:09:df:3f:8a:f7:d3:43:38:81:d1: 38:07:f8:90:51:96:88:d3:7a:ce:fc:18:a4:b7:b3:d2:91:54: 69:94:e8:08:2a:50:2f:24:11:22:9e:74:ce:17:1c:0a:59:41: 66:8e:26:f1:54:46:38:ed:43:81:3e:4c:57:ae:75:50:8b:32: d6:51:42:5a:55:f8:14:db:63:cc:4b:f0:24:bf:38:6d:83:cb: 9c:13:0d:ea:2f:91:7e:39:41:cd:31:9e:2a:c8:98:48:4e:f1: 47:8f:27:80:47:16:f1:22:b4:26:ba:19:0c:12:d1:54:de:f8: 24:b0:0c:66:dc:e1:4b:ac:c8:f7:5a:c8:8e:87:2e:a9:c4:9a: 39:eb:93:b5:35:8b:90:a5:8a:45:e9:84:fe:d1:6c:12:6c:f9: 1f:05:ba:c8:6a:54:f9:91:aa:65:79:61:08:04:76:dc:2d:b5: e0:d2:e2:84:90:a9:ec:be:30:17:2d:b0:57:c1:86:a4:75:ba: c1:e3:db:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwNTEyMjA0MTM4WhcNMjYwNTE5MjA0MTM4WjAYMRYwFAYD VQQDEw02YTAzOTA4Mi1hNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lNAIE1Ik1oPB78Ru3XKHavF3YxgW/q0g182HvAb8+0Kdw7XLHv7r5f0TCO9 9+0b7TWUxI4slbXoivxhf7TAtEIQvB9E0MDaEF8A7uXUYb3YshscjPWTnzbKvYhf hw9PLEKzNoLfxUd9a/7BUufcpqg78XiVo+qiweo1Q5N02PYXlgEUmz0EzoqQfpzy 4hab7YbOYrh820lq/NxpDRvmtSErsoVzRm39EFztPTCSaLr+RsRSJQHVYkMB/9Qe r+CBHy28XBhW9UH5SHAJZDGp51ehRGsR26RHVMwKm/q/5MXieLqflTcYPd6BoUrl uHyFHDKkOZYjTFkfz6TF+DVmcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDG7Egl icIxRw92WI/weZq7xuH8MB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdR8NV16W3t2yVDKlrRibWXw8siHZpUUIvB9IgyXL2ErrTcIFveNrTZJ8/jKP G3NowWZWR7rWR9/pxtOhimkJ3z+K99NDOIHROAf4kFGWiNN6zvwYpLez0pFUaZTo CCpQLyQRIp50zhccCllBZo4m8VRGOO1DgT5MV651UIsy1lFCWlX4FNtjzEvwJL84 bYPLnBMN6i+RfjlBzTGeKsiYSE7xR48ngEcW8SK0JroZDBLRVN74JLAMZtzhS6zI 91rIjocuqcSaOeuTtTWLkKWKRemE/tFsEmz5HwW6yGpU+ZGqZXlhCAR23C214NLi hJCp7L4wFy2wV8GGpHW6wePbhg== -----END CERTIFICATE-----Generated at Wed May 13 03:39:06 2026 by rpki-client