$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: 1T5VXrgPkp5P6dtY8UKACBVV4P0Hrt4XR1Gh3G6DoF0= Subject key identifier: F2:46:7C:1A:F7:B9:EE:06:E8:79:93:AC:B3:51:9C:49:5C:D0:27:17 Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0EBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0EAD Signing time: Tue 12 May 2026 17:44:13 +0000 Manifest this update: Tue 12 May 2026 17:44:12 +0000 Manifest next update: Tue 19 May 2026 17:44:12 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: B9ZyGPVIGdgBIOIFXO80+XZ1MrizrUZ0Fxl5llHWCAs=) 2: 22BEE7823E6511F1B20B4B5BCD833773.roa (hash: xa3z/ia41GT5N2AZECsdieRJXA6FM8GWCOKn0/5pr3Y=) 3: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: 6kYz/jIqF4bH5D+CFSov74IZW+HxnNg38aTmon4kT+g=) 4: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: 0i79WpYlAZ9LIzXBaRHXpaEMFnxhq4fNWyYI1M5ojU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3774 (0xebe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: May 12 17:44:12 2026 GMT Not After : May 19 17:44:12 2026 GMT Subject: CN=6a0366ed-19c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:4a:84:ca:76:c9:ed:f2:1a:e9:94:57:4f: 82:32:60:7c:65:63:43:b1:8e:32:11:91:a9:01:66: 49:12:d2:da:d2:6e:50:a7:28:1e:f6:4e:ce:0d:bd: df:e3:61:fc:99:89:bb:9e:6f:e4:7b:bf:ec:1d:2e: 45:7b:49:6b:df:f5:e8:d6:8e:a8:e6:e4:63:74:90: 69:fb:dd:f9:dc:b8:a5:de:41:f4:81:90:36:b2:5c: 04:75:34:a5:1b:a8:eb:de:fd:73:73:48:df:2c:db: dd:ae:33:30:8e:37:a1:15:5d:d2:b0:11:17:ab:57: 32:eb:27:c0:d3:de:57:f0:40:23:c5:02:c0:b8:cc: a1:34:8b:69:24:a2:a6:42:1c:ef:fa:a6:6b:e8:1f: 02:83:0f:f6:1d:f0:bc:b6:ca:dc:bd:31:7d:ae:56: de:b3:cf:08:bb:5b:ef:ad:52:77:21:aa:37:7f:00: 3b:6e:c2:71:31:10:88:eb:96:0a:76:55:b4:ab:7a: b9:24:5e:9d:9f:65:fe:dd:87:c5:2d:ac:4f:67:d2: 06:5d:fa:bb:af:4d:c3:2f:37:b7:96:90:0a:ea:fa: 2c:f0:a7:92:2a:e9:3f:2a:6c:7e:84:41:ad:ba:94: 53:09:bd:fe:20:b9:17:67:c9:31:a9:23:7e:84:ad: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:7C:1A:F7:B9:EE:06:E8:79:93:AC:B3:51:9C:49:5C:D0:27:17 X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:47:0b:17:17:5a:28:bc:a9:fd:3e:c2:03:4c:59:93:37:7b: fa:9d:7b:31:7c:13:1f:81:2e:64:c5:cc:5e:b2:38:fa:71:fb: 5a:9b:a0:09:4e:ac:c0:02:d0:94:1d:48:dc:fc:6f:1b:09:0c: 27:df:de:e9:e1:a5:d8:bf:b6:76:d7:71:66:d2:df:58:bc:6e: a5:c4:92:9b:d5:37:a9:50:9e:2a:37:e7:19:33:01:e5:a6:a1: 9d:3a:ca:aa:9b:ee:32:9d:3b:4e:62:71:4e:af:4a:23:a2:81: 88:6d:e8:cc:57:87:90:4e:33:bd:a5:1a:55:bc:9f:63:34:7c: 7c:9b:d1:cf:b6:57:03:34:36:6f:c1:e6:16:0c:43:0f:c9:83: ec:5a:25:98:36:b1:e0:aa:f2:b3:01:8b:66:33:62:f4:40:c4: 04:38:22:7c:c2:71:70:68:03:85:38:87:68:a0:07:77:87:4a: 5d:ea:de:65:49:84:17:19:83:51:ec:ed:07:98:88:20:41:3e: 4f:76:97:a9:bd:44:9f:cf:68:b7:af:1d:cb:c6:5c:e8:e9:6e: 85:34:f1:b7:23:f1:99:09:d6:2e:d2:d1:51:2b:60:89:bb:c6: 47:9c:2b:4e:a3:37:19:d6:23:03:ab:72:20:c8:42:c3:56:e5: 6a:bd:91:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjYwNTEyMTc0NDEyWhcNMjYwNTE5MTc0NDEyWjAYMRYwFAYD VQQDEw02YTAzNjZlZC0xOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFdKhMp2ye3yGumUV0+CMmB8ZWNDsY4yEZGpAWZJEtLa0m5Qpyge9k7ODb3f 42H8mYm7nm/ke7/sHS5Fe0lr3/Xo1o6o5uRjdJBp+9353Lil3kH0gZA2slwEdTSl G6jr3v1zc0jfLNvdrjMwjjehFV3SsBEXq1cy6yfA095X8EAjxQLAuMyhNItpJKKm Qhzv+qZr6B8Cgw/2HfC8tsrcvTF9rlbes88Iu1vvrVJ3Iao3fwA7bsJxMRCI65YK dlW0q3q5JF6dn2X+3YfFLaxPZ9IGXfq7r03DLze3lpAK6vos8KeSKuk/Kmx+hEGt upRTCb3+ILkXZ8kxqSN+hK28VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJGfBr3 ue4G6HmTrLNRnElc0CcXMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUcLFxdaKLyp/T7CA0xZkzd7+p17MXwTH4EuZMXMXrI4+nH7WpugCU6swALQ lB1I3PxvGwkMJ9/e6eGl2L+2dtdxZtLfWLxupcSSm9U3qVCeKjfnGTMB5aahnTrK qpvuMp07TmJxTq9KI6KBiG3ozFeHkE4zvaUaVbyfYzR8fJvRz7ZXAzQ2b8HmFgxD D8mD7FolmDax4KryswGLZjNi9EDEBDgifMJxcGgDhTiHaKAHd4dKXereZUmEFxmD UeztB5iIIEE+T3aXqb1En89ot68dy8Zc6OluhTTxtyPxmQnWLtLRUStgibvGR5wr TqM3GdYjA6tyIMhCw1blar2Rxw== -----END CERTIFICATE-----Generated at Wed May 13 11:41:03 2026 by rpki-client