$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft File: vXIUPbev9hPoLqKQtMnCv_qIvCY.mft (raw, json) Hash identifier: fXcLQsvxovt2LLcLukgX+dNXq8ktAGhZOyRwjGj8Lp8= Subject key identifier: DF:EC:C7:62:79:8B:BC:61:D5:17:F1:4A:A6:58:8C:E7:F7:D9:A0:E4 Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft Manifest number: 2A Signing time: Mon 11 May 2026 09:00:14 +0000 Manifest this update: Mon 11 May 2026 09:00:13 +0000 Manifest next update: Mon 18 May 2026 09:00:13 +0000 Files and hashes: 1: vXIUPbev9hPoLqKQtMnCv_qIvCY.crl (hash: bKde4+I3eZzKe28o6gW68Qris1BJYQArylMIIm1QEqU=) 2: F5841C74184E11F187DD6055283D8C67.roa (hash: 1eCvlfrhwMJgBVBc2wUYU+P7lRMVeJM21k0aMFZwo+Y=) 3: A90EFDD2184E11F1A5F3D04C283D8C67.roa (hash: 41o1xFvxv8xU0sfJZnGCZodYFoVfZm4EROBfY2dH3IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Validity Not Before: May 11 09:00:13 2026 GMT Not After : May 18 09:00:13 2026 GMT Subject: CN=6a019a9e-6bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:0f:55:08:4c:0f:c1:44:6a:54:9d:e7:c0: e3:53:81:77:0e:57:28:62:f6:b1:63:f7:4b:14:39: 05:7b:7b:40:f8:41:77:b9:8d:4c:f4:97:20:94:04: 92:ba:70:94:d9:b3:69:d2:ba:51:f5:eb:37:e1:36: 2a:ba:f6:07:dc:95:d5:74:41:d8:c3:fc:ef:5d:07: 2c:49:c8:3c:6d:35:de:dc:99:4e:6b:be:59:d6:6c: a8:ec:07:7a:3e:3d:a2:00:79:13:a9:3e:7a:f5:56: dd:f6:fa:ed:5d:8e:10:a8:ee:61:8a:0b:f7:ad:84: fc:71:81:93:8e:73:d5:81:88:bb:f9:43:ed:b8:7b: d4:b4:7e:6d:4a:ef:1b:b7:f1:8a:f0:e1:2d:b8:75: db:98:5c:d6:0f:e1:cf:de:0b:07:2a:8f:aa:c0:97: d1:1f:f6:2b:42:01:cc:d1:5f:fb:1d:b7:86:8a:a2: 39:b9:10:f4:86:53:cb:9b:a2:62:89:42:2c:e2:8f: 72:77:b2:e9:de:3c:b9:4c:fa:81:9f:59:b0:03:25: 07:f8:30:29:3e:c5:ef:df:fb:79:e5:cd:b4:4a:bb: 09:38:aa:04:6e:46:26:5f:e4:03:69:c8:d1:8a:7b: 8b:bd:00:12:10:45:a0:79:e9:c3:70:81:7f:67:ce: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:C7:62:79:8B:BC:61:D5:17:F1:4A:A6:58:8C:E7:F7:D9:A0:E4 X509v3 Authority Key Identifier: keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:31:00:90:4e:2d:b9:29:fd:45:63:0c:bb:1d:3b:73:92: cb:97:70:a6:9f:49:85:ce:22:ad:f2:f3:ab:43:5e:0b:a9:c9: 2a:8c:9b:17:f0:c1:98:a9:54:2a:5e:d7:0c:44:64:65:16:e7: 62:57:0c:9f:d7:53:b8:b8:14:16:e9:17:af:4a:8e:6d:21:d3: 81:8f:7b:76:40:83:d5:9f:86:5d:67:1b:8f:37:9c:6f:28:11: a2:d8:72:ec:b2:4c:62:34:00:c4:1e:4c:dd:27:71:e3:7a:1a: 6c:2d:8b:61:cb:cb:e3:55:9b:2e:ec:0f:af:8b:e6:73:3d:cf: 4f:7b:5e:9a:32:29:48:e1:98:09:4c:c8:ac:6e:8c:ae:46:82: b8:a0:9f:c3:64:01:3b:eb:95:89:fc:47:3a:70:ee:f0:32:05: 0e:e5:1d:00:92:80:40:ea:93:fc:85:1a:06:35:f0:00:db:e1: 66:46:01:2a:1b:1d:9a:08:5a:48:70:ee:21:9a:41:3a:d2:9f: b1:8e:dd:e2:5f:22:03:db:77:c1:20:f4:40:ea:be:8d:06:54: 24:da:af:8d:ae:1c:f8:38:1b:83:8a:1d:51:c8:57:f2:7f:96: c7:ae:93:4a:5c:af:d8:39:bf:67:4c:45:68:86:81:3c:4e:3f: c0:1e:24:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoQkQ3MjE0M0RCN0FGRjYxM0U4MkVBMjkwQjRDOUMyQkZG QTg4QkMyNjAeFw0yNjA1MTEwOTAwMTNaFw0yNjA1MTgwOTAwMTNaMBgxFjAUBgNV BAMTDTZhMDE5YTllLTZiZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZpg9VCEwPwURqVJ3nwONTgXcOVyhi9rFj90sUOQV7e0D4QXe5jUz0lyCUBJK6 cJTZs2nSulH16zfhNiq69gfcldV0QdjD/O9dByxJyDxtNd7cmU5rvlnWbKjsB3o+ PaIAeROpPnr1Vt32+u1djhCo7mGKC/ethPxxgZOOc9WBiLv5Q+24e9S0fm1K7xu3 8Yrw4S24dduYXNYP4c/eCwcqj6rAl9Ef9itCAczRX/sdt4aKojm5EPSGU8ubomKJ Qizij3J3sunePLlM+oGfWbADJQf4MCk+xe/f+3nlzbRKuwk4qgRuRiZf5ANpyNGK e4u9ABIQRaB56cNwgX9nzpQrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3+zHYnmL vGHVF/FKpliM5/fZoOQwHwYDVR0jBBgwFoAUvXIUPbev9hPoLqKQtMnCv/qIvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzYzMDI3REY2MTg0 RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhJVVBiZXY5aFBvTHFLUXRNbkN2X3FJdkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD Mjg3LzYzMDI3REY2MTg0RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQ b0xxS1F0TW5Ddl9xSXZDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEITEAkE4tuSn9RWMMux07c5LLl3Cmn0mFziKt8vOrQ14LqckqjJsX8MGYqVQq XtcMRGRlFudiVwyf11O4uBQW6RevSo5tIdOBj3t2QIPVn4ZdZxuPN5xvKBGi2HLs skxiNADEHkzdJ3HjehpsLYthy8vjVZsu7A+vi+ZzPc9Pe16aMilI4ZgJTMisboyu RoK4oJ/DZAE765WJ/Ec6cO7wMgUO5R0AkoBA6pP8hRoGNfAA2+FmRgEqGx2aCFpI cO4hmkE60p+xjt3iXyID23fBIPRA6r6NBlQk2q+Nrhz4OBuDih1RyFfyf5bHrpNK XK/YOb9nTEVohoE8Tj/AHiSs -----END CERTIFICATE-----Generated at Wed May 13 06:21:31 2026 by rpki-client