$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: 56qlALKUuD8PPgmvuUe7RQo4HK5lMKB2Zlm+HdZHydc= Subject key identifier: 3F:00:FB:58:42:C9:F8:22:3B:C1:D1:A8:CF:5A:F5:C5:81:26:0F:60 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 181A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 17F3 Signing time: Tue 12 May 2026 16:33:17 +0000 Manifest this update: Tue 12 May 2026 16:33:17 +0000 Manifest next update: Tue 19 May 2026 16:33:17 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: mLwelZotWK677jIG3ARj2lPpBEdtacjVyDVPyqYazyQ=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: G1K2oOJN8JSdZJH7sAiV+vdZ3tm2/QChp9HUt6nzUkw=) 3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 6SGIVV8UzkYI8imkUH9CHf8Pfdrw5iBU8LEsd0w7wTY=) 4: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: eNCAWuAh5KW5qBuvE5k2vNN9F1eCn7J5iVfhenudu/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6170 (0x181a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: May 12 16:33:17 2026 GMT Not After : May 19 16:33:17 2026 GMT Subject: CN=6a03564d-7033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:81:6f:be:bb:8f:83:fd:bf:2f:b1:d2:a9: 37:f5:1d:9d:44:02:0f:23:c9:3c:94:b1:c2:e4:d7: b4:b9:e9:2b:57:e6:07:f9:32:b0:a2:78:15:33:65: 46:16:db:80:7a:8e:63:c7:e1:6a:99:95:c6:a6:8e: b9:4d:3b:af:34:07:fd:dd:ef:43:f5:f9:18:f3:95: 21:67:be:08:2e:db:ca:93:1e:83:52:75:d9:62:58: 3d:ab:04:ef:98:ad:0b:87:bd:89:92:7f:14:9f:f6: 2f:e6:35:45:8d:4e:47:73:01:33:c5:7a:30:e3:74: c2:39:0b:a7:f6:2f:2a:eb:ac:3b:33:06:e7:95:3f: bf:d5:49:fe:86:57:2a:6f:8b:b3:b4:50:d7:aa:f1: 09:24:99:1f:9c:b0:e7:4a:a8:97:27:8e:9b:b3:41: d0:76:c4:cc:5a:f0:e8:58:f9:8a:ae:ee:0e:3c:5b: c7:7b:0e:f0:5c:49:aa:e5:2e:98:19:62:66:8f:02: fe:4f:20:fd:47:a3:32:ac:17:53:54:7f:8d:d9:37: a9:8c:f1:11:55:2a:ff:d8:05:be:96:62:a4:a7:f0: a3:79:8f:6b:31:f2:a9:15:2a:96:83:ef:05:79:df: 9b:05:82:ee:1a:59:d9:e7:24:d8:79:1c:d6:84:9d: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:FB:58:42:C9:F8:22:3B:C1:D1:A8:CF:5A:F5:C5:81:26:0F:60 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:38:23:5a:4d:a6:00:eb:bc:8a:87:2a:a6:78:7c:51:94:42: 2f:c4:3c:05:31:f4:39:fa:85:36:7b:bf:1c:dc:03:ff:51:39: cc:05:50:e4:80:a7:ae:9b:c2:cd:6d:91:5e:d7:e0:dd:d9:04: 6d:51:9b:15:3b:fb:07:63:79:ac:f7:bf:39:e3:eb:2a:d7:a8: 97:7f:de:d9:b5:b0:17:33:6e:95:2c:e7:fd:58:4c:5c:ea:ea: c3:a5:57:4a:db:cc:cd:a9:d9:8b:7e:fa:dd:4d:c1:d4:f7:f4: 1b:89:41:d2:80:84:8c:27:ad:8f:16:e4:65:d2:3a:d2:14:b2: ff:f0:fb:b4:48:94:0b:8c:1c:7a:49:1f:0c:0b:d7:a9:78:f6: d4:d8:1f:7f:cf:95:5f:78:4f:0e:45:db:0e:c3:8a:4d:d3:b2: 12:6c:ef:fc:51:05:b5:69:a8:21:47:0d:fe:6b:05:3b:53:17: ef:25:38:86:19:3c:2b:ae:d4:dd:51:3a:67:c7:e4:d7:5e:d2: 71:f4:ac:25:83:ec:0c:38:17:21:a2:0c:a0:e5:42:5d:42:fd: 0e:50:2a:08:d0:b4:69:ec:51:37:f7:53:c2:df:4d:3b:89:e0: f7:5b:ca:dd:37:7a:01:05:f7:79:7c:65:09:8b:78:da:e3:29: 6c:82:25:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjYwNTEyMTYzMzE3WhcNMjYwNTE5MTYzMzE3WjAYMRYwFAYD VQQDEw02YTAzNTY0ZC03MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCCBb767j4P9vy+x0qk39R2dRAIPI8k8lLHC5Ne0uekrV+YH+TKwongVM2VG FtuAeo5jx+FqmZXGpo65TTuvNAf93e9D9fkY85UhZ74ILtvKkx6DUnXZYlg9qwTv mK0Lh72Jkn8Un/Yv5jVFjU5HcwEzxXow43TCOQun9i8q66w7MwbnlT+/1Un+hlcq b4uztFDXqvEJJJkfnLDnSqiXJ46bs0HQdsTMWvDoWPmKru4OPFvHew7wXEmq5S6Y GWJmjwL+TyD9R6MyrBdTVH+N2TepjPERVSr/2AW+lmKkp/CjeY9rMfKpFSqWg+8F ed+bBYLuGlnZ5yTYeRzWhJ1JFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8A+1hC yfgiO8HRqM9a9cWBJg9gMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVTgjWk2mAOu8iocqpnh8UZRCL8Q8BTH0OfqFNnu/HNwD/1E5zAVQ5ICnrpvC zW2RXtfg3dkEbVGbFTv7B2N5rPe/OePrKteol3/e2bWwFzNulSzn/VhMXOrqw6VX StvMzanZi3763U3B1Pf0G4lB0oCEjCetjxbkZdI60hSy//D7tEiUC4wcekkfDAvX qXj21Ngff8+VX3hPDkXbDsOKTdOyEmzv/FEFtWmoIUcN/msFO1MX7yU4hhk8K67U 3VE6Z8fk117ScfSsJYPsDDgXIaIMoOVCXUL9DlAqCNC0aexRN/dTwt9NO4ng91vK 3Td6AQX3eXxlCYt42uMpbIIlwQ== -----END CERTIFICATE-----Generated at Wed May 13 03:37:06 2026 by rpki-client