$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: 3wYcCyjfmnoBGXmJ8de2CIteoSvf8OnlDkPMgo4bKRM= Subject key identifier: 81:AF:72:C8:51:4D:B2:E1:D5:31:A9:66:48:EA:FB:BD:42:1B:AF:5B Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 04D3 Signing time: Mon 11 May 2026 00:02:56 +0000 Manifest this update: Mon 11 May 2026 00:02:56 +0000 Manifest next update: Mon 18 May 2026 00:02:56 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: JLRdyCGCn1PcHUIIBVMkLj+u1gJySGtB3xztY8hP2nU=) 2: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=) 3: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=) 4: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=) 5: 76ABC3662DC511F1AFF54E10AD833773.roa (hash: of3FRWMIcYkEaWQWOZhJTwnfrjFeAR8rTgZWsIgU1hQ=) 6: 8000E572494F11F1BF737F10BE833773.roa (hash: RSiETjjKzvCQ0UxbntfjXpMp1b8caiQTMLYifGRmsgs=) 7: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: May 11 00:02:56 2026 GMT Not After : May 18 00:02:56 2026 GMT Subject: CN=6a011cb0-6a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:25:e1:b0:1a:bb:59:7c:2b:87:cd:0a:ed: 2e:f9:49:c1:0d:81:85:8a:88:af:a1:95:12:da:4e: e5:ad:f2:12:4f:49:04:6b:8b:f6:b7:fb:b6:d2:ec: 1a:2b:f0:c5:12:ec:e8:b3:2e:db:c5:01:42:ec:52: 86:ae:c8:f9:1a:3d:bc:3b:5e:26:56:f8:76:72:ee: d9:e1:0e:e2:1d:a7:88:6e:8d:ae:a9:08:1b:fa:96: e8:56:d6:4f:f2:25:b0:2f:68:b1:19:5b:c5:83:b5: b9:9e:85:99:ba:69:d4:59:3c:bc:47:f5:20:6e:79: 11:c7:ad:61:b7:bc:54:04:01:f9:bb:69:25:ac:20: 9b:7f:da:8d:b1:51:4f:5f:6f:97:9f:c9:58:40:2b: 32:b7:4b:bc:37:a1:1f:50:42:19:bb:34:be:ef:ad: 28:85:12:2a:fc:f5:35:6c:26:00:a5:58:12:1e:41: e0:44:f7:21:88:40:e7:93:37:5d:e1:49:d0:57:e4: cf:2b:30:c9:d7:db:a0:97:84:5b:55:c6:a4:cf:7c: ad:b7:71:c2:58:d9:5a:ad:09:49:ca:d2:e7:75:ec: 14:80:05:27:a5:c5:6c:c6:6d:24:5a:03:83:e2:71: ea:f7:1b:5b:e7:58:30:35:21:99:70:28:78:d4:0c: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AF:72:C8:51:4D:B2:E1:D5:31:A9:66:48:EA:FB:BD:42:1B:AF:5B X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:73:e4:09:94:60:72:6e:ac:ad:e7:4a:ab:f0:55:27:3b:26: f8:66:70:b1:db:da:91:48:4b:16:26:1d:50:54:9a:96:57:b7: 26:47:96:fb:34:a8:90:0e:8f:7a:9a:ec:f5:70:c5:bd:a8:64: 22:96:86:63:90:ae:86:ab:75:2f:d8:71:33:ff:fe:b8:f5:a2: cf:eb:24:8a:df:29:f7:18:01:7b:43:77:d9:f3:4f:76:bb:95: dc:1d:2f:f7:7e:cb:43:b9:ca:fd:d2:9b:4d:22:72:26:8f:1e: b1:9a:a9:f3:42:1d:6a:49:89:d8:29:20:db:df:d7:3e:8f:eb: f3:df:5d:dd:12:62:1f:0f:f1:f3:34:ed:f0:76:0b:89:73:cd: bc:65:57:5c:bb:25:3c:db:b6:d7:43:d6:7c:ad:54:3a:24:a4: 15:eb:9c:4b:c6:1b:ca:ba:c5:d8:38:bf:81:05:8e:05:68:de: b9:09:24:d1:91:74:e3:4c:93:36:6c:49:ff:c4:fe:f0:8c:fa: 5a:4d:d0:b2:6c:b8:ff:ef:32:a3:d0:66:95:06:cd:cb:40:50: 3a:0d:e3:ae:e8:12:a3:ed:cb:06:52:bd:28:d3:25:5b:09:13: 8e:39:43:51:18:14:58:a1:cb:4f:e5:72:aa:95:77:04:8c:03: 17:32:45:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwNTExMDAwMjU2WhcNMjYwNTE4MDAwMjU2WjAYMRYwFAYD VQQDEw02YTAxMWNiMC02YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Tkl4bAau1l8K4fNCu0u+UnBDYGFioivoZUS2k7lrfIST0kEa4v2t/u20uwa K/DFEuzosy7bxQFC7FKGrsj5Gj28O14mVvh2cu7Z4Q7iHaeIbo2uqQgb+pboVtZP 8iWwL2ixGVvFg7W5noWZumnUWTy8R/UgbnkRx61ht7xUBAH5u2klrCCbf9qNsVFP X2+Xn8lYQCsyt0u8N6EfUEIZuzS+760ohRIq/PU1bCYApVgSHkHgRPchiEDnkzdd 4UnQV+TPKzDJ19ugl4RbVcakz3ytt3HCWNlarQlJytLndewUgAUnpcVsxm0kWgOD 4nHq9xtb51gwNSGZcCh41Ay+owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGvcshR TbLh1TGpZkjq+71CG69bMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFXPkCZRgcm6sredKq/BVJzsm+GZwsdvakUhLFiYdUFSalle3JkeW+zSokA6P eprs9XDFvahkIpaGY5Cuhqt1L9hxM//+uPWiz+skit8p9xgBe0N32fNPdruV3B0v 937LQ7nK/dKbTSJyJo8esZqp80IdakmJ2Ckg29/XPo/r899d3RJiHw/x8zTt8HYL iXPNvGVXXLslPNu210PWfK1UOiSkFeucS8YbyrrF2Di/gQWOBWjeuQkk0ZF040yT NmxJ/8T+8Iz6Wk3Qsmy4/+8yo9BmlQbNy0BQOg3jrugSo+3LBlK9KNMlWwkTjjlD URgUWKHLT+VyqpV3BIwDFzJFrw== -----END CERTIFICATE-----Generated at Wed May 13 01:27:24 2026 by rpki-client