$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: xU9rwC30e7cTX88lL0Bxh6NruZJ92B7djNrHPSQjcFY= Subject key identifier: D3:F0:3C:87:A2:BC:44:E5:D3:E2:87:6A:41:DF:E4:F6:3F:94:55:53 Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: CE Signing time: Mon 11 May 2026 07:00:30 +0000 Manifest this update: Mon 11 May 2026 07:00:29 +0000 Manifest next update: Mon 18 May 2026 07:00:29 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: GtKk6HJwVgHXOxmp8S729GvG8wD/VwYKxCEb11VfN4M=) 2: 998CA7F6B29611F0A9620F65C4F9AE02.roa (hash: vNh/5KqyGcLBgRea4GEaf1GiSDPNGV2ayLMJqKrT05s=) 3: E31A926E6EAF11F088699976C4F9AE02.roa (hash: FKzaSN7wk2dTCiUFf01WiFdCMnfThuKnhdLTnhYbGgM=) 4: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: RftIc/WPafbaN59fO/ljS0lkrMOduHYR+hGVEu5br4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: May 11 07:00:29 2026 GMT Not After : May 18 07:00:29 2026 GMT Subject: CN=6a017e8e-8794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:4e:f3:64:ec:d5:c8:e5:04:57:be:48:3c: 2e:73:14:d0:0a:dd:c5:22:4c:96:1b:2a:ed:9e:1d: fb:f5:b2:fb:ed:c7:82:fe:58:17:ef:c2:c9:68:77: d8:2a:18:38:81:f5:a5:dd:cf:01:8b:7f:c1:62:a5: 37:12:38:d3:b3:54:3a:09:49:ea:ba:bc:9d:1c:36: c6:ef:a1:e7:72:c3:cb:1e:2e:d6:35:ff:8c:28:47: ea:01:87:7b:36:89:b5:55:dd:2e:31:fd:1d:1d:ee: ac:67:3f:40:cd:c1:09:26:55:c5:c6:69:f8:e3:a2: b1:d6:f9:98:0b:35:ca:be:4d:c4:f1:fa:5b:51:b5: 65:72:eb:d3:66:44:0d:fc:d1:20:68:67:55:0b:22: f9:b6:92:32:54:6e:ad:bb:d9:1d:aa:e3:70:d3:f8: f8:36:3b:d7:ed:70:8f:47:7c:d1:73:f5:d0:8d:76: c8:f3:d4:e5:d2:9a:97:66:72:07:d4:57:2b:1e:ba: a8:9a:39:50:2c:fb:a8:73:ee:0e:5f:54:f1:11:b8: fb:3e:eb:54:35:22:1c:5d:dc:31:e3:3c:e6:2a:85: 68:e9:2d:39:56:fc:b2:a1:71:a8:39:6d:7c:e0:34: 0b:19:f6:4f:0b:b5:cb:96:00:24:58:84:bd:3d:f9: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F0:3C:87:A2:BC:44:E5:D3:E2:87:6A:41:DF:E4:F6:3F:94:55:53 X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9a:c9:b0:4a:34:60:ac:f2:93:f0:16:6f:74:a0:c4:61:a4: ba:12:16:74:65:f6:5a:b9:f8:f4:bb:4d:7a:67:4c:8b:3d:49: 54:b7:45:15:90:0b:b3:d0:e8:d7:de:15:df:bb:05:70:da:b4: a5:39:16:ce:a3:ef:66:25:84:46:68:c3:77:92:a6:e0:7b:73: 7c:11:52:1f:7e:10:3d:2a:65:9c:03:af:b8:bb:b4:aa:b6:3f: 7a:6f:7b:79:d6:0d:d8:53:05:f4:55:25:2f:d9:6f:28:b3:9a: 98:df:69:12:9a:7a:a7:73:9a:c9:75:d5:ea:55:6c:d3:bc:eb: 9c:eb:84:a4:9b:30:25:02:9f:e5:4f:ee:68:d7:96:ed:16:11: 6a:9d:13:81:04:57:e8:10:ad:53:66:ac:4e:1d:40:04:f5:76: c6:9f:04:81:39:94:45:89:18:e6:d5:20:23:b0:7a:76:55:dd: 42:c1:3a:01:0c:e0:34:5f:9d:21:d8:86:77:af:a3:4f:98:90: 32:a4:55:90:14:dd:c0:af:5e:12:b4:c1:ca:fd:b4:37:d6:5f: 2d:01:c8:c8:de:65:f7:93:49:92:bd:75:4c:7a:0f:78:d4:13: 2f:ae:f3:33:4d:8f:97:67:32:ae:ed:12:ff:4e:e7:8c:da:2c: 64:fe:3e:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI2QkMxMTAvBgNVBAUTKEQ4QkVFOTY5NUQ0M0IzMzlFNzU2M0YyNDEzQjcyMzE5 RDE2Nzc0QjEwHhcNMjYwNTExMDcwMDI5WhcNMjYwNTE4MDcwMDI5WjAYMRYwFAYD VQQDEw02YTAxN2U4ZS04Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbJO82Ts1cjlBFe+SDwucxTQCt3FIkyWGyrtnh379bL77ceC/lgX78LJaHfY Khg4gfWl3c8Bi3/BYqU3EjjTs1Q6CUnqurydHDbG76HncsPLHi7WNf+MKEfqAYd7 Nom1Vd0uMf0dHe6sZz9AzcEJJlXFxmn446Kx1vmYCzXKvk3E8fpbUbVlcuvTZkQN /NEgaGdVCyL5tpIyVG6tu9kdquNw0/j4NjvX7XCPR3zRc/XQjXbI89Tl0pqXZnIH 1FcrHrqomjlQLPuoc+4OX1TxEbj7PutUNSIcXdwx4zzmKoVo6S05VvyyoXGoOW18 4DQLGfZPC7XLlgAkWIS9PfnQFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPwPIei vETl0+KHakHf5PY/lFVTMB8GA1UdIwQYMBaAFNi+6WldQ7M551Y/JBO3IxnRZ3Sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjZCQy9BMDMwQ0QzMDIw NEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6bm5WajhrRTdjakdkRm5k TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjZCQy9BMDMwQ0QzMDIwNEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6 bm5WajhrRTdjakdkRm5kTEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdprJsEo0YKzyk/AWb3SgxGGkuhIWdGX2Wrn49LtNemdMiz1JVLdFFZALs9Do 194V37sFcNq0pTkWzqPvZiWERmjDd5Km4HtzfBFSH34QPSplnAOvuLu0qrY/em97 edYN2FMF9FUlL9lvKLOamN9pEpp6p3OayXXV6lVs07zrnOuEpJswJQKf5U/uaNeW 7RYRap0TgQRX6BCtU2asTh1ABPV2xp8EgTmURYkY5tUgI7B6dlXdQsE6AQzgNF+d IdiGd6+jT5iQMqRVkBTdwK9eErTByv20N9ZfLQHIyN5l95NJkr11THoPeNQTL67z M02Pl2cyru0S/07njNosZP4+0A== -----END CERTIFICATE-----Generated at Wed May 13 03:26:10 2026 by rpki-client