$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: vNOQ1NdMUGY7jmHrrZaSU0HmPZmhpqJYX3BB/3Ayfjw= Subject key identifier: 02:0E:B1:D7:68:70:14:B9:D1:D8:66:0D:AF:A8:9B:B6:E9:A1:52:68 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0CC0 Signing time: Tue 12 May 2026 18:30:06 +0000 Manifest this update: Tue 12 May 2026 18:30:06 +0000 Manifest next update: Tue 19 May 2026 18:30:06 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: FapSTfsONjOmK7oJ/onuIsPBszUJQvPDFzHPL7DxvW8=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: May 12 18:30:06 2026 GMT Not After : May 19 18:30:06 2026 GMT Subject: CN=6a0371ae-1900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:86:9b:c5:4c:b6:6a:5e:de:53:b0:61:96: 76:4d:d7:32:c4:38:f8:06:f5:1e:e9:fc:1a:34:a2: 67:b4:3f:da:37:ac:f3:a3:f2:ca:00:19:73:a0:15: 60:32:83:24:ee:25:81:98:39:6c:35:59:63:47:3d: a6:8c:76:9b:68:6e:7e:7a:bf:10:13:14:51:a6:c1: f7:26:25:8b:81:5c:4b:f4:f1:4a:01:74:b5:40:ac: a7:b2:f5:8a:07:6a:fd:2d:6e:fc:08:8d:00:20:da: 76:ba:01:9c:e8:1a:aa:3e:21:49:1e:d2:ae:37:aa: 5c:cf:29:9d:56:13:2f:4e:95:95:29:18:a5:94:2c: 7e:4a:69:1c:41:a5:ed:52:a2:07:a5:39:7f:27:7c: 85:a2:a3:21:2e:a8:b0:c3:28:ee:df:75:4b:a5:f4: df:22:08:8f:12:1e:ca:57:88:b7:b9:f9:8b:b7:b7: 9b:41:ca:2f:8c:8a:3f:43:6b:b4:77:2c:01:9f:b5: ce:ad:0c:10:97:18:af:dc:31:60:08:79:23:7a:24: cb:d9:36:fa:9a:ad:2d:3c:94:eb:b9:32:0d:ac:c7: a5:53:a0:e9:c1:74:48:73:46:3d:08:fd:1d:fa:df: dc:91:80:f6:8b:7d:84:f1:df:a6:be:53:47:8f:af: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:B1:D7:68:70:14:B9:D1:D8:66:0D:AF:A8:9B:B6:E9:A1:52:68 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:02:bf:8d:0e:72:86:75:df:cf:bb:ce:72:57:99:fb:f6:b3: 5d:49:ec:0c:ec:74:4b:23:33:43:90:fc:df:80:7d:ed:4b:4f: d6:60:c7:22:33:bc:54:72:e1:d0:fe:5e:a5:bd:7a:8d:03:ae: a1:0f:bc:12:90:34:ff:54:0e:f8:3e:91:4e:9b:78:c7:9f:22: 57:d3:64:8f:7d:df:c3:50:5a:8b:bd:d0:92:a9:f0:ab:34:a5: 20:00:17:06:6a:c9:0f:75:2b:79:be:4c:1f:b5:cd:f0:da:60: 2f:ab:77:94:1f:32:e4:26:7c:cc:4e:31:8b:cb:a9:26:93:d8: 6c:d2:47:cd:26:9e:e8:e2:a9:db:62:c4:6a:d4:99:c8:e9:8b: f7:b6:31:14:ff:9e:14:22:fb:de:43:e9:3e:98:51:7b:e4:8c: d5:be:f6:47:a4:2d:e9:d5:86:fa:fa:f6:dd:01:a9:f6:24:d2: 4d:92:b2:b5:33:d8:20:e0:82:b0:87:16:15:db:82:22:ed:75: 1b:1a:aa:9d:ce:dc:63:bc:5d:36:16:d6:f9:b6:e5:d1:bc:d6: 0e:fc:12:61:e3:62:41:f9:95:16:04:6b:90:f6:ee:03:83:87: 1a:e5:32:a0:cd:b2:3e:9b:f3:2b:98:ba:da:e2:40:6c:7c:91: 10:8f:39:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjYwNTEyMTgzMDA2WhcNMjYwNTE5MTgzMDA2WjAYMRYwFAYD VQQDEw02YTAzNzFhZS0xOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0+Gm8VMtmpe3lOwYZZ2TdcyxDj4BvUe6fwaNKJntD/aN6zzo/LKABlzoBVg MoMk7iWBmDlsNVljRz2mjHabaG5+er8QExRRpsH3JiWLgVxL9PFKAXS1QKynsvWK B2r9LW78CI0AINp2ugGc6BqqPiFJHtKuN6pczymdVhMvTpWVKRillCx+SmkcQaXt UqIHpTl/J3yFoqMhLqiwwyju33VLpfTfIgiPEh7KV4i3ufmLt7ebQcovjIo/Q2u0 dywBn7XOrQwQlxiv3DFgCHkjeiTL2Tb6mq0tPJTruTINrMelU6DpwXRIc0Y9CP0d +t/ckYD2i32E8d+mvlNHj6+9zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIOsddo cBS50dhmDa+om7bpoVJoMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkwK/jQ5yhnXfz7vOcleZ+/azXUnsDOx0SyMzQ5D834B97UtP1mDHIjO8VHLh 0P5epb16jQOuoQ+8EpA0/1QO+D6RTpt4x58iV9Nkj33fw1Bai73QkqnwqzSlIAAX BmrJD3Ureb5MH7XN8NpgL6t3lB8y5CZ8zE4xi8upJpPYbNJHzSae6OKp22LEatSZ yOmL97YxFP+eFCL73kPpPphRe+SM1b72R6Qt6dWG+vr23QGp9iTSTZKytTPYIOCC sIcWFduCIu11Gxqqnc7cY7xdNhbW+bbl0bzWDvwSYeNiQfmVFgRrkPbuA4OHGuUy oM2yPpvzK5i62uJAbHyREI85eQ== -----END CERTIFICATE-----Generated at Wed May 13 02:57:20 2026 by rpki-client