$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: MZqvD6zeREz8oVSK2rkC+beki3JLYe5tVSN4qJEAdKY= Subject key identifier: DE:70:2A:3B:C2:54:C5:0A:24:82:2A:E8:AA:79:C1:74:62:0F:47:D5 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 0207 Signing time: Mon 11 May 2026 03:02:46 +0000 Manifest this update: Mon 11 May 2026 03:02:46 +0000 Manifest next update: Mon 18 May 2026 03:02:46 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: VthutZf8ZmNrHMJXMc5fFjhew3/IiHZsgoEP7Gnz594=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: Jy8XOiA0kN27oXJXLhTzYwQbS1Mw45QfiLEVZ4JMgEM=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: +VGb3DLO/rVhkz02/GwA3CkCqPb4QLi9bk86uPT+tR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: May 11 03:02:46 2026 GMT Not After : May 18 03:02:46 2026 GMT Subject: CN=6a0146d6-f619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:12:00:c6:6e:f2:80:20:08:5d:bf:7b:1a: d8:73:c0:f7:91:62:55:ab:84:57:4d:ca:8d:d7:8c: 53:0a:e1:46:e9:ad:09:9a:90:ae:73:4c:c4:00:53: 9d:dc:ed:df:cd:f0:e3:af:7e:47:3f:22:b2:df:e2: 76:ab:c6:10:e9:66:2b:4a:16:a0:d8:f2:03:58:62: 4c:98:f8:fe:53:5f:4a:42:00:31:5b:d8:ae:3c:54: bb:84:fc:57:e1:92:cf:01:02:ee:bf:48:49:4b:c6: 08:35:bf:af:4b:3b:10:ff:a5:9b:47:9a:81:ed:3c: d8:41:a5:2f:9b:db:ff:a0:9f:e5:03:41:05:f2:de: d2:0f:96:1c:94:27:5b:c1:c5:93:2b:cf:ee:77:42: b5:e8:08:53:9f:78:99:eb:7e:0f:b1:0b:8c:31:9a: 82:a4:c6:e5:e2:38:04:91:f0:02:e9:08:81:ff:b5: e7:41:33:57:b3:a1:1f:ea:83:a1:39:fb:9b:19:8c: ed:e0:3a:55:b7:86:c5:2e:09:d0:3c:00:29:bc:71: 61:ed:8a:c0:e9:07:8f:14:fb:bc:d4:50:8a:d7:71: 2e:e7:81:01:d2:39:03:13:56:ff:5f:9e:30:33:a2: 20:1f:2f:33:5e:c2:b5:58:1e:b6:36:6b:b7:e1:a8: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:70:2A:3B:C2:54:C5:0A:24:82:2A:E8:AA:79:C1:74:62:0F:47:D5 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f1:5c:d5:9e:ad:be:16:26:f8:39:50:a4:7c:e8:63:25:f9: 84:08:c2:2b:43:e5:a9:50:49:4f:be:b6:b6:84:f0:c0:96:42: ef:65:75:72:1a:be:ed:fc:76:64:74:0c:e1:41:5d:16:fe:a1: 2a:00:0e:8c:ed:1e:a3:1b:42:39:65:5b:12:3d:20:ba:1d:15: 6f:1e:7e:ba:d0:d2:df:53:3e:26:82:ac:04:3a:44:dc:a2:4f: 06:0b:bd:1f:ff:c4:ac:4f:98:ac:9a:97:ea:7c:f6:19:42:9a: 6c:31:35:ad:1c:ec:a8:80:ba:09:e1:4f:e1:0b:b0:48:72:5b: 7f:5a:3a:97:e1:64:c2:52:1f:a1:e2:c0:cd:d9:b5:8e:a8:7f: 79:c7:3f:76:3b:75:59:3c:4c:4e:5a:97:34:c8:45:a3:47:83: a8:6a:81:2b:a3:3c:83:11:f8:9a:92:e5:ec:1e:73:db:6f:1c: 14:c1:77:0e:5e:4b:77:06:48:56:c3:11:0d:4f:31:60:88:c7: df:e3:30:6b:19:d5:7f:ba:71:4d:40:df:63:ef:cd:83:24:ca: 11:a8:5b:a1:9c:de:df:d0:2f:74:ed:30:c0:21:31:86:08:df: 5a:0b:85:b0:06:14:f4:f9:ac:be:77:c1:e8:49:74:5f:77:5e: 13:9c:f9:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwNTExMDMwMjQ2WhcNMjYwNTE4MDMwMjQ2WjAYMRYwFAYD VQQDEw02YTAxNDZkNi1mNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYoSAMZu8oAgCF2/exrYc8D3kWJVq4RXTcqN14xTCuFG6a0JmpCuc0zEAFOd 3O3fzfDjr35HPyKy3+J2q8YQ6WYrShag2PIDWGJMmPj+U19KQgAxW9iuPFS7hPxX 4ZLPAQLuv0hJS8YINb+vSzsQ/6WbR5qB7TzYQaUvm9v/oJ/lA0EF8t7SD5YclCdb wcWTK8/ud0K16AhTn3iZ634PsQuMMZqCpMbl4jgEkfAC6QiB/7XnQTNXs6Ef6oOh OfubGYzt4DpVt4bFLgnQPAApvHFh7YrA6QePFPu81FCK13Eu54EB0jkDE1b/X54w M6IgHy8zXsK1WB62Nmu34ag4EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5wKjvC VMUKJIIq6Kp5wXRiD0fVMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo/Fc1Z6tvhYm+DlQpHzoYyX5hAjCK0PlqVBJT762toTwwJZC72V1chq+7fx2 ZHQM4UFdFv6hKgAOjO0eoxtCOWVbEj0guh0Vbx5+utDS31M+JoKsBDpE3KJPBgu9 H//ErE+YrJqX6nz2GUKabDE1rRzsqIC6CeFP4QuwSHJbf1o6l+FkwlIfoeLAzdm1 jqh/ecc/djt1WTxMTlqXNMhFo0eDqGqBK6M8gxH4mpLl7B5z228cFMF3Dl5LdwZI VsMRDU8xYIjH3+MwaxnVf7pxTUDfY+/NgyTKEahboZze39AvdO0wwCExhgjfWguF sAYU9PmsvnfB6El0X3deE5z5HA== -----END CERTIFICATE-----Generated at Wed May 13 05:18:02 2026 by rpki-client