$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: aCQ0EPdzrLDvwv3qwIKraXWkuD2WFNrF1JxjO4vtljQ= Subject key identifier: 2B:D5:B1:4D:DE:71:F7:9C:CA:F7:45:44:9F:D7:6B:7F:63:1C:06:7D Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: B3 Signing time: Mon 11 May 2026 07:22:23 +0000 Manifest this update: Mon 11 May 2026 07:22:23 +0000 Manifest next update: Mon 18 May 2026 07:22:23 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: X7ugOp9jpLDR43MZKohQivDrSzGNKe0uN0KQkcUpldw=) 2: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: uMO+2JAcztORNSv06a9gx7VlI/CanLXKpbYCi8Zh4kI=) 3: E641780E535211F0A795A950C4F9AE02.roa (hash: ed5G9bTTE4ta+9ZR/j/PVZoByMJafJHwh2lR+lbY92s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: May 11 07:22:23 2026 GMT Not After : May 18 07:22:23 2026 GMT Subject: CN=6a0183af-86bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:b5:3a:d5:73:69:87:9e:3f:fa:34:95:01: 6d:ed:cf:cf:77:b7:3d:59:92:c4:9e:9b:aa:5a:40: c0:7f:d4:28:07:c8:a5:75:f3:d9:f7:3b:e4:af:b6: 15:1a:9f:0c:b6:1d:fb:ac:dd:7e:4f:3c:f0:c5:26: 35:7e:29:f8:63:fa:22:2d:37:64:30:e7:ca:11:8e: f2:54:ca:68:84:84:7c:0b:d4:6e:b7:4e:2f:b8:55: 45:e3:a6:48:7d:8c:a2:01:34:4c:1d:3a:a5:44:0a: a0:fd:22:fd:33:30:81:8a:75:79:93:f7:71:1a:ee: 40:8e:9d:46:dc:d1:ce:ee:fe:a5:e6:09:c7:d0:12: ad:f0:54:6a:80:98:0f:71:bb:5f:ab:de:e8:3c:8c: f6:03:8a:51:1c:7d:f6:93:29:3d:8f:7a:cb:d1:20: a2:a4:b1:0e:8a:4f:21:13:fa:69:d2:5b:8f:17:61: d4:64:88:54:28:7c:a0:df:df:96:6e:37:0d:2b:0e: b3:68:cc:f8:0a:50:86:65:04:93:ce:fd:34:c7:01: c9:63:ea:85:04:4d:6c:ca:90:4a:14:2d:60:85:55: 99:63:5b:40:75:5a:77:9d:fb:39:42:33:26:71:af: 70:57:43:80:a1:41:11:e2:c9:ca:f8:1f:5e:4c:8b: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:B1:4D:DE:71:F7:9C:CA:F7:45:44:9F:D7:6B:7F:63:1C:06:7D X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:2c:dc:56:93:c0:f3:70:ee:05:a5:69:a4:6f:a1:c1:8b: 6a:4b:8d:ad:cc:67:86:6e:86:37:19:15:92:94:72:e6:7a:79: 4d:35:36:15:ce:6a:b4:96:15:83:2b:90:35:fd:e9:98:bf:10: 4a:53:06:c6:c9:5d:52:2a:e8:b8:31:c3:b8:b3:28:f7:4e:7f: 8a:53:96:a7:db:48:08:e3:f2:85:11:0b:96:32:04:8d:86:75: a0:44:45:47:1e:ce:dd:c9:54:52:49:bf:ac:bc:bc:a7:fd:94: e2:b7:0d:fe:2a:d1:de:80:0e:90:99:40:ab:08:ce:cc:eb:61: 15:49:b6:28:78:e5:ed:33:d1:8a:7a:86:9d:68:29:4c:aa:9c: 4e:09:7d:ea:32:e4:0e:bc:c7:75:46:66:03:35:7d:64:d3:ab: 54:ee:0f:b6:57:90:93:11:c0:d1:b1:00:fe:9d:83:53:07:ff: 40:4e:6b:21:bb:b5:2a:df:a3:b4:60:68:29:19:96:0e:ac:78: 5b:c2:3f:b4:68:07:9c:8e:84:8f:6f:59:c8:b1:74:69:79:7d: 3d:46:54:a7:95:e6:f5:5b:53:ed:1c:c7:55:09:5f:24:93:e2: a3:a7:d0:06:0f:3d:53:db:3b:71:f4:b9:91:1e:e7:2b:6c:74: ac:49:26:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFCQUMxMTAvBgNVBAUTKEI0MDM4QUI2NDAzOUYzMTQ1NjIyQTIwRkY3MEVEN0JF MUQ0RTdGOTEwHhcNMjYwNTExMDcyMjIzWhcNMjYwNTE4MDcyMjIzWjAYMRYwFAYD VQQDEw02YTAxODNhZi04NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0721OtVzaYeeP/o0lQFt7c/Pd7c9WZLEnpuqWkDAf9QoB8ildfPZ9zvkr7YV Gp8Mth37rN1+TzzwxSY1fin4Y/oiLTdkMOfKEY7yVMpohIR8C9Rut04vuFVF46ZI fYyiATRMHTqlRAqg/SL9MzCBinV5k/dxGu5Ajp1G3NHO7v6l5gnH0BKt8FRqgJgP cbtfq97oPIz2A4pRHH32kyk9j3rL0SCipLEOik8hE/pp0luPF2HUZIhUKHyg39+W bjcNKw6zaMz4ClCGZQSTzv00xwHJY+qFBE1sypBKFC1ghVWZY1tAdVp3nfs5QjMm ca9wV0OAoUER4snK+B9eTItGrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvVsU3e cfecyvdFRJ/Xa39jHAZ9MB8GA1UdIwQYMBaAFLQDirZAOfMUViKiD/cO174dTn+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUJBQy82NDlCQzNCMjUw QzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4UldJcUlQOXc3WHZoMU9m NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUJBQy82NDlCQzNCMjUwQzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4 UldJcUlQOXc3WHZoMU9mNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/gs3FaTwPNw7gWlaaRvocGLakuNrcxnhm6GNxkVkpRy5np5TTU2Fc5qtJYV gyuQNf3pmL8QSlMGxsldUirouDHDuLMo905/ilOWp9tICOPyhRELljIEjYZ1oERF Rx7O3clUUkm/rLy8p/2U4rcN/irR3oAOkJlAqwjOzOthFUm2KHjl7TPRinqGnWgp TKqcTgl96jLkDrzHdUZmAzV9ZNOrVO4PtleQkxHA0bEA/p2DUwf/QE5rIbu1Kt+j tGBoKRmWDqx4W8I/tGgHnI6Ej29ZyLF0aXl9PUZUp5Xm9VtT7RzHVQlfJJPio6fQ Bg89U9s7cfS5kR7nK2x0rEkm7Q== -----END CERTIFICATE-----Generated at Wed May 13 04:33:53 2026 by rpki-client