$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: XMrPa4mDh+5Kf1XdySIYlf6CEF0YECgnN66aUBTV6Bk= Subject key identifier: A1:EC:8B:7A:0B:2E:7A:61:56:CC:F2:12:AF:0C:33:77:A3:F2:D3:E9 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0BC0 Signing time: Tue 12 May 2026 19:03:38 +0000 Manifest this update: Tue 12 May 2026 19:03:38 +0000 Manifest next update: Tue 19 May 2026 19:03:38 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: PE2hfj/di10ETHB7QOXIUiitjT4Vsbgi1IA+Hz6RRfE=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: May 12 19:03:38 2026 GMT Not After : May 19 19:03:38 2026 GMT Subject: CN=6a03798a-0cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:e8:8d:72:1a:23:f6:76:e8:e2:91:bf:f4: eb:53:d4:e7:3b:30:d8:36:2c:8f:72:a7:a3:8a:96: 81:b1:5c:c6:04:90:f4:91:8b:ca:33:88:cc:da:3a: 75:a3:f7:8d:cd:a7:14:fb:5c:a5:0a:25:af:cf:03: a2:30:7d:d4:1f:a8:99:05:d2:da:7b:99:97:b3:fa: f9:51:c4:75:f4:3a:a3:0a:f9:60:63:6b:f1:e7:67: 09:9a:b6:de:c2:40:e6:04:19:df:3c:67:a5:d9:d7: a2:1b:3b:95:b4:ec:82:1c:17:6a:5f:e7:83:7f:29: 25:4c:6e:92:2e:77:eb:2b:c2:87:7a:fc:ee:e7:01: 54:4a:a9:24:67:75:b6:52:60:87:39:04:05:4e:f5: c4:23:70:42:e2:50:52:29:b2:03:dd:bc:c3:da:a2: 62:8e:31:84:cf:16:b3:2f:93:81:74:e3:6b:cf:85: 4b:99:70:49:95:d7:10:3c:1c:8a:97:b1:65:aa:5d: ae:fc:6b:b9:90:d5:bd:26:0e:71:e8:b0:6a:7f:69: ac:91:bc:35:bd:93:75:8e:46:cd:fa:dd:6e:bc:f6: b4:e8:71:a4:f5:13:ba:9f:ac:19:48:ab:0b:8d:cb: 74:66:60:64:8e:da:25:f9:d6:6c:09:9c:d9:48:bd: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EC:8B:7A:0B:2E:7A:61:56:CC:F2:12:AF:0C:33:77:A3:F2:D3:E9 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:30:0b:ef:7e:cf:9d:61:48:d9:00:2d:4a:5c:a1:55:20:3c: eb:6b:dc:89:e0:e2:52:8f:4d:40:1d:eb:84:4a:03:1d:31:86: 5a:fb:28:0a:cb:b3:98:e6:66:59:21:f5:61:ea:36:1b:7e:b8: 24:88:28:ed:48:f2:ff:5a:49:9d:7f:78:7c:ae:cc:25:d5:ee: 29:46:b6:55:91:80:83:fe:60:0c:c5:a9:e7:08:ac:68:8e:de: 9a:22:7c:64:cc:36:81:34:cd:8d:2e:38:27:2a:eb:45:ca:0c: 84:61:a1:34:bf:56:d4:36:ad:16:49:c3:49:92:f5:1e:c9:07: c4:02:37:57:da:df:38:28:0d:cc:0a:12:6b:70:2f:d9:11:0e: d3:f8:02:a4:90:02:5e:49:94:9d:ed:13:f6:ab:a9:7d:dc:91: 5c:99:e6:8c:97:33:27:50:00:95:e4:88:41:26:4b:57:c6:db: 53:8b:84:d0:f1:5a:ab:83:0f:4b:d3:44:77:74:7a:70:48:8a: 08:30:4b:11:bd:45:b2:e3:d8:70:60:3f:ff:a8:f0:35:6e:d1: 9d:27:9c:e7:64:bd:56:02:37:76:82:af:3f:64:20:b7:91:57: 2e:c4:01:9e:b6:c6:48:d5:c4:ef:36:82:6f:ae:b2:c4:a1:3e: 34:43:ee:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjYwNTEyMTkwMzM4WhcNMjYwNTE5MTkwMzM4WjAYMRYwFAYD VQQDEw02YTAzNzk4YS0wY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLDojXIaI/Z26OKRv/TrU9TnOzDYNiyPcqejipaBsVzGBJD0kYvKM4jM2jp1 o/eNzacU+1ylCiWvzwOiMH3UH6iZBdLae5mXs/r5UcR19DqjCvlgY2vx52cJmrbe wkDmBBnfPGel2deiGzuVtOyCHBdqX+eDfyklTG6SLnfrK8KHevzu5wFUSqkkZ3W2 UmCHOQQFTvXEI3BC4lBSKbID3bzD2qJijjGEzxazL5OBdONrz4VLmXBJldcQPByK l7Flql2u/Gu5kNW9Jg5x6LBqf2mskbw1vZN1jkbN+t1uvPa06HGk9RO6n6wZSKsL jct0ZmBkjtol+dZsCZzZSL3F8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHsi3oL LnphVszyEq8MM3ej8tPpMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABzAL737PnWFI2QAtSlyhVSA862vcieDiUo9NQB3rhEoDHTGGWvsoCsuzmOZm WSH1Yeo2G364JIgo7Ujy/1pJnX94fK7MJdXuKUa2VZGAg/5gDMWp5wisaI7emiJ8 ZMw2gTTNjS44JyrrRcoMhGGhNL9W1DatFknDSZL1HskHxAI3V9rfOCgNzAoSa3Av 2REO0/gCpJACXkmUne0T9qupfdyRXJnmjJczJ1AAleSIQSZLV8bbU4uE0PFaq4MP S9NEd3R6cEiKCDBLEb1FsuPYcGA//6jwNW7RnSec52S9VgI3doKvP2Qgt5FXLsQB nrbGSNXE7zaCb66yxKE+NEPuXQ== -----END CERTIFICATE-----Generated at Wed May 13 03:30:10 2026 by rpki-client