$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: AQ3PvXxKG04jqJIqg02Zx3rFeFteFn6NPH77iFkygbY= Subject key identifier: 92:EC:48:45:9A:B6:EE:3D:51:38:0D:3D:69:5C:6C:3C:91:03:F1:B4 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 0183 Signing time: Wed 13 May 2026 04:39:39 +0000 Manifest this update: Wed 13 May 2026 04:39:38 +0000 Manifest next update: Wed 20 May 2026 04:39:38 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: xnc2Rg6aFarliW5rtBUOQhcpaYUh4sN4+E5vzxIoXls=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: 6+bY61LdDlam0PC7GuKMwEXRvre/3cSdh3l+aLkv2pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: May 13 04:39:38 2026 GMT Not After : May 20 04:39:38 2026 GMT Subject: CN=6a04008b-63f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:c2:5d:a1:c0:46:cf:8f:57:64:80:a6:57: ca:b2:3a:f5:e5:60:8a:06:91:9b:19:9a:b8:65:30: b9:90:ac:86:6d:93:94:b2:ec:66:8c:fb:45:21:81: 5a:91:40:10:9f:ae:25:e9:98:9d:2d:42:0b:e7:4e: 45:8f:0c:93:f2:f7:24:b1:58:8e:a1:a9:e6:bc:4b: 90:26:b2:ab:c8:4b:e1:b4:4e:3f:a2:69:ba:67:b3: e5:cc:88:30:88:8a:5f:ee:2c:19:64:59:e4:c9:f3: 20:c6:38:0c:ef:d9:59:fc:cb:89:00:4e:bc:1e:8e: 46:95:e6:5d:88:6b:41:31:9e:4b:ad:83:fd:ae:47: 44:08:16:8b:a9:a4:59:c3:5f:ad:87:24:07:8e:6d: d3:7f:56:63:17:65:58:a6:07:6a:b3:20:07:1a:79: 89:ff:ab:eb:8e:6c:c5:46:9b:56:43:10:91:a7:7f: e1:dd:ef:e7:5b:24:cb:77:7e:d7:b7:74:0c:6c:fa: 50:79:16:56:f3:7b:d0:3a:17:96:c5:61:cb:30:6d: 6a:ff:3d:93:ee:f4:b6:86:0d:27:b2:fa:ea:68:b5: ea:35:bb:4b:84:18:8e:41:14:26:bb:81:dc:84:a3: 8b:1a:fa:81:65:04:99:25:c6:86:2b:b2:da:4b:ce: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:48:45:9A:B6:EE:3D:51:38:0D:3D:69:5C:6C:3C:91:03:F1:B4 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bb:a4:a7:f2:92:54:6b:f7:09:17:2d:5f:9a:98:0d:cb:ad: e7:2c:6f:bc:93:7f:74:83:07:50:8c:8a:d9:81:96:6e:3f:d4: 28:d6:ce:63:bc:41:c2:9e:b7:57:96:e8:b2:ee:49:10:bd:17: e8:3e:26:a5:5b:25:e1:a5:4f:3e:fd:71:9a:38:ed:99:39:fd: e1:52:6b:21:e3:0c:af:20:6b:01:47:6e:95:42:fe:44:17:90: 8d:23:fd:eb:73:17:6c:f6:c2:53:6e:41:8a:45:97:99:35:fa: c3:09:89:fe:33:d5:ad:30:34:11:30:c3:00:13:d3:da:e8:78: c1:70:51:41:4e:17:bd:84:92:af:ce:d3:d6:10:9b:fa:a8:1c: 44:37:3d:da:bd:aa:b1:ec:97:b0:ea:18:6f:5b:e2:91:05:cb: 45:e7:d0:93:f9:49:25:d3:f0:3f:62:1c:e9:13:4a:12:a7:be: f6:c4:cb:63:e9:9a:44:3d:c4:4e:b4:eb:89:f7:cd:89:48:d5: 64:08:f2:84:45:c7:05:96:91:ed:17:c2:d1:6f:04:24:08:11: fb:ac:3d:da:a4:fd:bb:9c:6a:21:7e:70:3d:df:62:9c:9b:34: c3:7b:d8:3c:72:88:0f:42:1c:13:a4:34:fd:66:1b:78:ff:7d: ea:90:b9:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYwNTEzMDQzOTM4WhcNMjYwNTIwMDQzOTM4WjAYMRYwFAYD VQQDEw02YTA0MDA4Yi02M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktvCXaHARs+PV2SAplfKsjr15WCKBpGbGZq4ZTC5kKyGbZOUsuxmjPtFIYFa kUAQn64l6ZidLUIL505FjwyT8vcksViOoanmvEuQJrKryEvhtE4/omm6Z7PlzIgw iIpf7iwZZFnkyfMgxjgM79lZ/MuJAE68Ho5GleZdiGtBMZ5LrYP9rkdECBaLqaRZ w1+thyQHjm3Tf1ZjF2VYpgdqsyAHGnmJ/6vrjmzFRptWQxCRp3/h3e/nWyTLd37X t3QMbPpQeRZW83vQOheWxWHLMG1q/z2T7vS2hg0nsvrqaLXqNbtLhBiOQRQmu4Hc hKOLGvqBZQSZJcaGK7LaS85SiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLsSEWa tu49UTgNPWlcbDyRA/G0MB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmLukp/KSVGv3CRctX5qYDcut5yxvvJN/dIMHUIyK2YGWbj/UKNbOY7xBwp63 V5bosu5JEL0X6D4mpVsl4aVPPv1xmjjtmTn94VJrIeMMryBrAUdulUL+RBeQjSP9 63MXbPbCU25BikWXmTX6wwmJ/jPVrTA0ETDDABPT2uh4wXBRQU4XvYSSr87T1hCb +qgcRDc92r2qseyXsOoYb1vikQXLRefQk/lJJdPwP2Ic6RNKEqe+9sTLY+maRD3E TrTriffNiUjVZAjyhEXHBZaR7RfC0W8EJAgR+6w92qT9u5xqIX5wPd9inJs0w3vY PHKID0IcE6Q0/WYbeP996pC5dA== -----END CERTIFICATE-----Generated at Wed May 13 12:45:44 2026 by rpki-client