$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: LtQWDWGDKmLQ6IODipucWwrqL934hXgGh3zxsEiC0o4= Subject key identifier: EB:57:3D:0C:0F:41:5C:C7:8A:C0:54:93:78:C0:06:C5:90:C5:7E:5B Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 0947 Signing time: Tue 12 May 2026 20:40:57 +0000 Manifest this update: Tue 12 May 2026 20:40:56 +0000 Manifest next update: Tue 19 May 2026 20:40:56 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: YMixv1Dsi01XyqxmMhgEOquAl/hLv0MPwdcEF+ydGmI=) 2: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: Fkicx7CSwAUsnDPdfHvB6HsA9q0BYXagiCWHfaLV4Bg=) 3: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: bBolaE4J+ODeMaCpkUYIkQ/PrlqstuijFxA7VnkQpuo=) 4: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: LpD49WPYOZPaHio5ZklNa5sGnt+yU3gxsH0FPSNIjpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: May 12 20:40:56 2026 GMT Not After : May 19 20:40:56 2026 GMT Subject: CN=6a039059-540a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:d8:13:04:32:bd:90:fa:69:35:46:c1:ee: a9:d4:43:a2:d9:09:17:df:52:f0:7b:25:0f:4e:2d: 44:c3:0e:a8:c6:7c:e7:e8:63:2e:56:36:83:1f:62: 61:e9:88:3a:35:cf:be:cd:4f:bf:76:a2:bc:21:d0: f7:56:9c:a5:ea:a1:37:0a:e8:fb:97:47:00:70:84: cc:55:4b:43:81:d7:ae:2b:ee:09:82:4a:4f:3a:dc: cd:ab:5b:8b:be:2c:f3:33:81:7c:6a:15:40:75:a4: e7:9f:04:7d:5a:e9:d5:f4:59:5e:cc:b8:6d:04:ce: 8e:03:fd:78:ef:f6:86:71:85:f0:3c:ec:7f:4f:e6: fc:d7:e9:67:95:0f:45:e3:49:20:79:da:ee:92:c6: d8:ec:70:ed:16:7b:83:55:c5:a0:29:c7:6e:39:53: 2e:a1:04:50:41:ba:ea:75:01:c4:c5:c7:44:9a:31: a3:2e:5c:76:12:3f:86:7d:ad:64:af:5e:91:17:49: ce:a3:8e:74:0f:56:63:3e:f6:1c:86:59:f7:da:54: ed:65:e1:64:13:24:c4:c0:4c:bd:78:d3:37:11:ca: 97:c1:2c:ba:b4:9d:b7:01:53:68:2a:eb:fe:de:96: c2:a9:9e:3f:6d:b8:f6:ca:29:f9:b3:1f:5b:57:63: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:57:3D:0C:0F:41:5C:C7:8A:C0:54:93:78:C0:06:C5:90:C5:7E:5B X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f0:64:54:1a:38:8f:3c:3a:85:f2:8b:d8:db:58:19:af:79: b9:1f:35:5e:09:eb:8c:86:ca:08:e9:a3:d8:62:99:65:a7:b1: 8f:39:d8:6d:d8:65:5d:cf:f3:0c:12:46:0b:cd:0c:17:c8:2a: d1:16:70:e8:bb:95:50:7d:85:0c:8c:a8:c6:8d:7a:f8:3a:9c: bb:c5:95:db:7b:81:aa:1d:f4:bf:01:80:f6:5e:22:ab:3f:82: ec:e8:80:aa:a9:d4:03:f0:34:e8:4f:6e:6c:30:48:37:c2:32: 36:b5:a9:f2:af:c4:f4:f5:a3:ac:3a:5c:49:a8:85:39:69:61: fa:63:4c:0c:32:f7:a2:b3:dc:69:c5:82:5f:46:71:47:cc:45: ca:be:24:b2:5f:5f:e5:c2:d8:a1:a6:68:67:e8:fa:b5:76:b5: 15:2f:b2:ba:34:29:48:9b:a4:2e:24:d2:1e:1e:71:39:9c:7f: a6:b5:5c:0e:eb:4d:a2:0c:5d:f6:bc:32:ab:44:e6:10:f7:07: 6d:44:e7:79:fa:6e:26:86:e7:79:ae:35:bb:b1:8e:9b:34:58: f0:5e:43:06:0d:9d:f9:05:ef:0b:9f:e7:63:4e:c5:a4:d7:2e: 7f:cf:7e:8e:60:cd:38:a5:03:e6:05:b5:ab:1d:6a:85:89:3f: ef:3d:ca:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwNTEyMjA0MDU2WhcNMjYwNTE5MjA0MDU2WjAYMRYwFAYD VQQDEw02YTAzOTA1OS01NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6zYEwQyvZD6aTVGwe6p1EOi2QkX31LweyUPTi1Eww6oxnzn6GMuVjaDH2Jh 6Yg6Nc++zU+/dqK8IdD3Vpyl6qE3Cuj7l0cAcITMVUtDgdeuK+4JgkpPOtzNq1uL vizzM4F8ahVAdaTnnwR9WunV9FlezLhtBM6OA/147/aGcYXwPOx/T+b81+lnlQ9F 40kgedruksbY7HDtFnuDVcWgKcduOVMuoQRQQbrqdQHExcdEmjGjLlx2Ej+Gfa1k r16RF0nOo450D1ZjPvYchln32lTtZeFkEyTEwEy9eNM3EcqXwSy6tJ23AVNoKuv+ 3pbCqZ4/bbj2yin5sx9bV2PD2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtXPQwP QVzHisBUk3jABsWQxX5bMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUfBkVBo4jzw6hfKL2NtYGa95uR81XgnrjIbKCOmj2GKZZaexjznYbdhlXc/z DBJGC80MF8gq0RZw6LuVUH2FDIyoxo16+Dqcu8WV23uBqh30vwGA9l4iqz+C7OiA qqnUA/A06E9ubDBIN8IyNrWp8q/E9PWjrDpcSaiFOWlh+mNMDDL3orPcacWCX0Zx R8xFyr4ksl9f5cLYoaZoZ+j6tXa1FS+yujQpSJukLiTSHh5xOZx/prVcDutNogxd 9rwyq0TmEPcHbUTnefpuJobnea41u7GOmzRY8F5DBg2d+QXvC5/nY07FpNcuf89+ jmDNOKUD5gW1qx1qhYk/7z3KYg== -----END CERTIFICATE-----Generated at Tue May 12 23:10:07 2026 by rpki-client