$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: exmMKPsUKYIJ1z3oGgc1RDs8NntT1bCJaNME8JfJWEw= Subject key identifier: 9B:DD:24:85:A7:E0:2F:F8:73:0B:B2:FA:42:AA:27:80:4B:C2:B0:4A Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: 013D Signing time: Wed 13 May 2026 05:33:52 +0000 Manifest this update: Wed 13 May 2026 05:33:52 +0000 Manifest next update: Wed 20 May 2026 05:33:52 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: OrPtxuBW9Ui5I1qtOUiMc+0Z4FtYjGXlYqBdqVqO/aA=) 2: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: jyhxOeVpH0OFLETq5nPbqtVCOCG8G/oOvurrxR+iOB4=) 3: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=) 4: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: 2lh0VekensC1iCGtapEG4/oWVTugB2CUNEuEgGTMM4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: May 13 05:33:52 2026 GMT Not After : May 20 05:33:52 2026 GMT Subject: CN=6a040d40-b9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:9a:f7:a1:58:14:85:4b:65:1c:76:1f:61: fc:87:a6:be:75:8e:8a:01:1f:25:b8:36:0e:00:38: 5b:e0:7d:2f:69:03:1a:a8:12:be:05:f3:f5:01:47: ad:c3:83:57:96:d7:0b:42:49:7f:1b:39:73:0b:1b: 13:d0:cd:f2:fb:f2:bb:c7:46:58:53:56:09:0c:e7: 16:a8:59:c3:8a:df:2e:5c:b0:3a:7b:53:b4:62:92: 71:81:79:19:59:11:3e:38:a9:73:48:11:4c:73:52: 61:cf:30:43:98:3a:d6:9f:69:04:e0:83:cf:d3:a2: e6:2c:98:83:74:73:6c:a8:12:7d:a0:85:24:0e:a0: 9d:27:f4:c6:1b:20:26:c4:49:59:4c:70:15:8b:ec: b8:ce:d8:e5:d8:83:83:d6:cc:2a:99:3d:11:cc:36: 3c:97:53:23:3e:98:58:a1:56:9f:93:30:a6:ab:20: 79:5a:a3:b8:77:49:bf:fe:1b:25:bc:42:54:03:51: b0:4e:6e:91:a1:68:95:fb:40:5e:8f:35:d3:8c:a2: c1:96:34:e6:62:77:1f:7f:af:66:26:f4:b9:d6:60: cb:a3:7a:a4:73:4c:dd:00:14:67:90:d5:04:16:24: cf:65:21:53:06:db:37:70:b3:ec:1d:e7:58:7d:b9: 00:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DD:24:85:A7:E0:2F:F8:73:0B:B2:FA:42:AA:27:80:4B:C2:B0:4A X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ce:61:d1:3c:b6:6a:1c:e6:d2:c9:2a:0c:0d:69:5e:5c:fa: f2:ae:02:31:f0:ba:0e:3b:c2:a1:92:3f:e0:c3:be:4b:fb:8e: 6d:05:da:39:b5:f7:1d:a6:94:ff:4e:7e:73:12:e0:5e:5e:af: 2c:09:53:04:00:b9:87:21:dd:2c:5c:7f:0c:06:fd:33:7c:c3: ab:7c:85:98:46:c6:10:02:7f:7a:96:2a:4d:d1:de:47:a2:43: cf:64:fb:43:0e:c4:a1:a5:d0:66:1e:2a:b5:f4:b4:de:01:2a: 71:5c:23:43:d9:f8:7c:00:ed:3d:d9:03:8f:c1:b4:fa:74:81: ea:e3:ff:5d:57:0a:d9:32:a8:81:31:c7:19:b6:91:8f:15:82: 8a:85:37:58:2e:31:ca:02:e3:55:24:54:42:c7:4a:84:bd:6d: d1:c3:11:c4:67:8a:29:05:df:4d:7f:c1:69:0a:2b:50:da:79: 39:15:85:b2:b2:26:94:4e:60:10:01:d3:1c:8b:3b:50:df:c6: 48:eb:7e:99:e3:a8:85:37:f8:ae:a1:7d:09:53:62:ff:b6:a1: 59:f2:60:ed:1d:f6:bf:b8:84:1b:fb:bc:7c:0a:44:a7:92:05: 78:9e:2d:ad:7b:39:dd:b7:b3:43:fc:df:91:18:55:53:f3:35: d7:dc:86:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjYwNTEzMDUzMzUyWhcNMjYwNTIwMDUzMzUyWjAYMRYwFAYD VQQDEw02YTA0MGQ0MC1iOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCSa96FYFIVLZRx2H2H8h6a+dY6KAR8luDYOADhb4H0vaQMaqBK+BfP1AUet w4NXltcLQkl/GzlzCxsT0M3y+/K7x0ZYU1YJDOcWqFnDit8uXLA6e1O0YpJxgXkZ WRE+OKlzSBFMc1JhzzBDmDrWn2kE4IPP06LmLJiDdHNsqBJ9oIUkDqCdJ/TGGyAm xElZTHAVi+y4ztjl2IOD1swqmT0RzDY8l1MjPphYoVafkzCmqyB5WqO4d0m//hsl vEJUA1GwTm6RoWiV+0BejzXTjKLBljTmYncff69mJvS51mDLo3qkc0zdABRnkNUE FiTPZSFTBts3cLPsHedYfbkAaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvdJIWn 4C/4cwuy+kKqJ4BLwrBKMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOM5h0Ty2ahzm0skqDA1pXlz68q4CMfC6DjvCoZI/4MO+S/uObQXaObX3HaaU /05+cxLgXl6vLAlTBAC5hyHdLFx/DAb9M3zDq3yFmEbGEAJ/epYqTdHeR6JDz2T7 Qw7EoaXQZh4qtfS03gEqcVwjQ9n4fADtPdkDj8G0+nSB6uP/XVcK2TKogTHHGbaR jxWCioU3WC4xygLjVSRUQsdKhL1t0cMRxGeKKQXfTX/BaQorUNp5ORWFsrImlE5g EAHTHIs7UN/GSOt+meOohTf4rqF9CVNi/7ahWfJg7R32v7iEG/u8fApEp5IFeJ4t rXs53bezQ/zfkRhVU/M119yG6w== -----END CERTIFICATE-----Generated at Wed May 13 10:40:42 2026 by rpki-client