$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: 7zQ+DntP4PZa+uQxfhY3A8jIEbz37V+e/oZIyDgMCNM= Subject key identifier: BE:9D:55:AE:F6:9C:BD:3B:4C:AB:40:85:09:8D:0D:B4:E0:B5:38:14 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 03D4 Signing time: Wed 13 May 2026 00:48:25 +0000 Manifest this update: Wed 13 May 2026 00:48:24 +0000 Manifest next update: Wed 20 May 2026 00:48:24 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: LZnNJbNosfmatA7+pp5t+2iquvcnUI+Ku4SwNAh9h3Q=) 2: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) 3: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) 4: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: May 13 00:48:24 2026 GMT Not After : May 20 00:48:24 2026 GMT Subject: CN=6a03ca59-0da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:22:93:1e:14:eb:79:c5:6b:29:f5:15:b4: 41:9e:ae:98:ae:1f:c7:2f:9e:61:c6:58:cc:30:04: d6:b8:73:6f:8a:ab:27:32:d5:41:0a:96:8f:9f:cb: 5c:c7:4b:b3:1b:2f:c2:46:e0:d3:89:e1:b1:9e:f8: a8:0a:47:37:cf:d0:dc:ba:95:c0:c6:e9:51:54:67: ea:bc:f8:73:88:79:2e:c6:68:7a:20:13:de:72:19: ad:b7:5a:f1:cf:21:c8:ae:3d:68:e6:10:b9:ff:f4: 7a:a9:38:7f:3a:62:1d:d9:4b:fc:7c:68:90:8e:b3: ce:b8:e3:25:e9:f0:57:ac:31:44:87:ad:7f:a0:90: 3e:71:0c:49:95:74:61:4c:a6:65:f0:23:4e:42:23: 87:e5:c3:eb:8b:8d:b5:b3:b1:f6:02:f7:19:ad:2a: b6:4c:d7:0e:37:03:90:fa:77:66:e7:a8:19:dd:eb: c5:0f:e4:12:83:32:00:c9:ed:7d:98:4d:b3:ab:60: 32:3d:38:0f:fe:d2:e7:df:0c:b0:2e:c7:af:01:25: 20:28:76:55:84:2a:86:23:63:b6:fb:e7:83:2d:90: dc:3e:27:df:37:90:cc:2f:40:77:58:0e:03:cf:60: ca:df:05:6d:9c:f0:ed:99:54:34:66:66:ab:ad:a8: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:55:AE:F6:9C:BD:3B:4C:AB:40:85:09:8D:0D:B4:E0:B5:38:14 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:bd:c7:a1:99:a8:94:26:3e:bc:80:cf:76:f4:c3:31:51:4e: c8:8e:1d:5f:a0:d7:9d:88:2a:a0:17:43:b8:f3:f5:03:6b:e3: 53:30:8b:38:0b:81:fb:fd:71:ab:3e:91:da:19:5c:76:78:6f: 0f:38:43:c7:92:41:f4:c7:ab:e4:65:28:6f:1f:6a:82:0f:0f: bc:77:26:43:03:34:44:aa:20:40:c3:d5:ae:01:38:51:88:50: 2c:6c:2d:0a:ea:59:bf:6a:70:fd:97:f9:7f:38:e8:b3:91:72: 7e:8a:d0:f7:13:cf:56:6a:40:e2:c0:71:c1:f7:a5:e2:e6:ea: 86:01:89:dd:f8:78:cb:2a:a7:3d:40:59:00:bd:47:a4:12:e5: 39:87:65:3f:21:52:07:19:3f:58:fc:2d:74:eb:ca:52:f9:7e: a5:8b:30:2d:2c:e1:38:79:dd:24:e1:bd:7b:c3:bc:f3:18:77: 98:00:b7:9d:3d:60:cf:34:89:8d:57:de:37:68:f7:6d:b2:8b: 16:1b:69:0a:46:66:82:cb:22:62:70:80:29:a9:5d:3d:2c:60: cd:d0:5d:b6:a3:51:56:cb:3e:20:fc:5b:8e:00:eb:8f:24:46: 69:74:c8:ed:2f:43:25:ec:1a:14:2b:3b:bb:67:ae:ca:9d:00: db:8d:91:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwNTEzMDA0ODI0WhcNMjYwNTIwMDA0ODI0WjAYMRYwFAYD VQQDEw02YTAzY2E1OS0wZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAph8ikx4U63nFayn1FbRBnq6Yrh/HL55hxljMMATWuHNviqsnMtVBCpaPn8tc x0uzGy/CRuDTieGxnvioCkc3z9DcupXAxulRVGfqvPhziHkuxmh6IBPechmtt1rx zyHIrj1o5hC5//R6qTh/OmId2Uv8fGiQjrPOuOMl6fBXrDFEh61/oJA+cQxJlXRh TKZl8CNOQiOH5cPri421s7H2AvcZrSq2TNcONwOQ+ndm56gZ3evFD+QSgzIAye19 mE2zq2AyPTgP/tLn3wywLsevASUgKHZVhCqGI2O2++eDLZDcPiffN5DML0B3WA4D z2DK3wVtnPDtmVQ0ZmarragU+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6dVa72 nL07TKtAhQmNDbTgtTgUMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAL3HoZmolCY+vIDPdvTDMVFOyI4dX6DXnYgqoBdDuPP1A2vjUzCLOAuB+/1x qz6R2hlcdnhvDzhDx5JB9Mer5GUobx9qgg8PvHcmQwM0RKogQMPVrgE4UYhQLGwt CupZv2pw/Zf5fzjos5FyforQ9xPPVmpA4sBxwfel4ubqhgGJ3fh4yyqnPUBZAL1H pBLlOYdlPyFSBxk/WPwtdOvKUvl+pYswLSzhOHndJOG9e8O88xh3mAC3nT1gzzSJ jVfeN2j3bbKLFhtpCkZmgssiYnCAKaldPSxgzdBdtqNRVss+IPxbjgDrjyRGaXTI 7S9DJewaFCs7u2euyp0A242RzQ== -----END CERTIFICATE-----Generated at Wed May 13 06:14:27 2026 by rpki-client