$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json) Hash identifier: u4ujgq3SMFnv/V0oR7A/Th473tbt43EsRCv5WVsQAnA= Subject key identifier: 22:4F:DD:2C:C9:57:7E:E0:D2:78:85:4A:7B:22:29:7F:DF:0E:72:0E Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft Manifest number: 0685 Signing time: Tue 12 May 2026 22:38:07 +0000 Manifest this update: Tue 12 May 2026 22:38:07 +0000 Manifest next update: Tue 19 May 2026 22:38:07 +0000 Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: sWvR78aQ/dLiR4H+VhrBkJX//BgmSrpRSFZZM8Yn+3Q=) 2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: JOGvq1AD8Gg+4yY3ltKJTiWff0l41sfm7XWi5tngbn4=) 3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 5be7I0/+cwjNbyTqFfbMRK0sXrbNJNl+sPoUACjviPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Validity Not Before: May 12 22:38:07 2026 GMT Not After : May 19 22:38:07 2026 GMT Subject: CN=6a03abcf-8836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:c9:f9:7a:4e:b6:50:76:50:c0:ef:e6:23: e6:6c:56:a8:22:dd:fa:e9:f3:d6:1d:63:d8:fa:12: e1:cc:0d:64:fe:28:99:b8:d7:bd:22:b8:95:a3:7c: f2:3b:80:8d:8a:3c:e3:a6:49:6a:d7:7e:a6:7f:e4: fa:3b:2d:a2:9c:88:df:30:aa:d1:b1:be:7c:5c:f1: 18:a8:99:fa:56:74:83:4d:75:0d:47:29:84:e1:2e: f2:bf:74:df:e5:64:2d:af:ec:f9:49:ca:c8:a7:da: 7f:51:03:c1:21:ad:dc:5a:76:c2:25:e7:17:6c:9f: c8:f2:6a:97:7f:3b:4e:55:93:06:55:65:22:02:ff: e3:21:ce:55:dd:fe:c9:61:9b:62:49:3f:11:41:1a: ef:b7:25:e7:44:44:c2:26:64:0f:8b:69:ba:3f:40: 52:a2:e7:8d:b1:06:69:51:e8:01:a2:3f:ae:67:a9: 49:63:b1:e3:6a:71:bb:4d:28:f2:14:30:25:4a:b5: 57:f0:30:37:04:46:f4:3d:30:09:21:43:3c:26:9d: 36:4f:e2:07:c7:ef:ad:1e:0a:1a:46:c0:dc:32:97: 3d:03:eb:b3:4a:76:0c:56:bc:3b:c0:25:81:7a:37: 3b:02:79:1c:6d:67:7d:0e:5d:73:33:bc:5c:19:4c: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4F:DD:2C:C9:57:7E:E0:D2:78:85:4A:7B:22:29:7F:DF:0E:72:0E X509v3 Authority Key Identifier: keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:94:ac:26:05:63:b4:4a:8b:8f:83:a0:60:54:49:08:43:c1: a2:f2:2d:7b:c6:3d:49:06:d9:73:ea:d1:f1:40:22:a8:c6:67: c2:f1:35:48:e7:bb:47:48:51:14:5e:90:ad:d3:a1:19:73:75: 2a:67:5e:cf:d7:10:03:e8:9b:4d:0a:77:67:90:9f:35:47:4f: ee:2e:a8:f7:44:c5:dc:b0:ad:cc:d2:de:ba:9f:ef:63:19:77: 50:3e:bd:15:74:bc:54:ab:2e:2a:4c:53:fa:0d:6c:51:44:45: 30:e1:d3:6d:8e:9f:bb:93:59:7f:7d:c5:7b:40:59:39:c7:0b: 3e:d0:b1:5c:fa:4b:e6:8d:c0:43:ce:fa:7b:24:0d:fa:b5:a2: f1:ea:de:df:c3:b7:78:eb:97:52:25:81:9c:3e:1e:db:1a:9e: 83:e6:a8:7d:ed:c8:38:55:f4:10:41:40:9d:43:26:cf:d6:83: b9:e3:39:43:c9:85:88:d0:c2:e3:f1:c1:6a:c9:c9:87:a7:05: d0:30:98:9a:c0:1e:a0:67:1a:b5:46:88:a2:18:3e:a9:6c:d4: be:f2:dc:55:35:cc:26:8c:03:4e:cd:73:29:96:3b:58:d0:1b: 77:ad:9e:ac:46:b8:66:c0:c1:68:32:48:b9:60:eb:f8:89:0d: 1b:83:9e:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz NzRBNUM3MjIwHhcNMjYwNTEyMjIzODA3WhcNMjYwNTE5MjIzODA3WjAYMRYwFAYD VQQDEw02YTAzYWJjZi04ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F/J+XpOtlB2UMDv5iPmbFaoIt366fPWHWPY+hLhzA1k/iiZuNe9IriVo3zy O4CNijzjpklq136mf+T6Oy2inIjfMKrRsb58XPEYqJn6VnSDTXUNRymE4S7yv3Tf 5WQtr+z5ScrIp9p/UQPBIa3cWnbCJecXbJ/I8mqXfztOVZMGVWUiAv/jIc5V3f7J YZtiST8RQRrvtyXnRETCJmQPi2m6P0BSoueNsQZpUegBoj+uZ6lJY7HjanG7TSjy FDAlSrVX8DA3BEb0PTAJIUM8Jp02T+IHx++tHgoaRsDcMpc9A+uzSnYMVrw7wCWB ejc7AnkcbWd9Dl1zM7xcGUxGQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJP3SzJ V37g0niFSnsiKX/fDnIOMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL blRBNHpnRTg4WVUzU2x4eUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvZSsJgVjtEqLj4OgYFRJCEPBovIte8Y9SQbZc+rR8UAiqMZnwvE1SOe7R0hR FF6QrdOhGXN1Kmdez9cQA+ibTQp3Z5CfNUdP7i6o90TF3LCtzNLeup/vYxl3UD69 FXS8VKsuKkxT+g1sUURFMOHTbY6fu5NZf33Fe0BZOccLPtCxXPpL5o3AQ876eyQN +rWi8ere38O3eOuXUiWBnD4e2xqeg+aofe3IOFX0EEFAnUMmz9aDueM5Q8mFiNDC 4/HBasnJh6cF0DCYmsAeoGcatUaIohg+qWzUvvLcVTXMJowDTs1zKZY7WNAbd62e rEa4ZsDBaDJIuWDr+IkNG4OeEg== -----END CERTIFICATE-----Generated at Wed May 13 13:09:54 2026 by rpki-client