$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: xkjZYTdptT1YgJlE5+qnGul9NfX8OLaTtZonoevw3kM= Subject key identifier: 5F:27:E7:DB:B9:1B:0F:A0:0A:F6:86:F2:1C:F5:33:1E:A8:D0:C7:CC Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0D42 Signing time: Tue 12 May 2026 18:09:37 +0000 Manifest this update: Tue 12 May 2026 18:09:36 +0000 Manifest next update: Tue 19 May 2026 18:09:36 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: FWg8wiLUal09mzh9XkjZyboUxp0ZyEUvIvpKguEqbHk=) 2: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: 9eVW8q201teZAFGXXlr75mIPBbOGURlsiVyxRbpYboo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: May 12 18:09:36 2026 GMT Not After : May 19 18:09:36 2026 GMT Subject: CN=6a036ce1-10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:4a:de:aa:cd:39:94:38:98:d0:21:fe:9a: 33:29:c6:dc:3c:c0:bf:bf:bd:04:66:ab:20:5e:18: a1:81:f2:4f:0d:a3:5d:51:19:11:b9:f8:9e:0c:32: bc:b6:61:ba:6d:6e:bf:56:cb:ce:01:02:ea:d7:ab: 33:27:06:d4:44:08:1f:41:33:be:77:45:7a:fb:40: a1:37:d4:b3:0e:85:86:2f:dd:8c:d4:b7:2a:80:ee: e5:1b:b9:4b:1c:b0:0d:5e:09:7d:91:0e:a4:90:75: a3:f0:a2:70:da:39:9f:79:55:fc:89:3f:f3:36:3e: f3:32:8d:a8:ca:a2:13:d8:cd:f0:9c:ca:90:2c:a5: 59:9d:ef:ff:4d:2e:22:22:2e:f1:60:cf:10:1d:50: 69:ed:a6:7e:bf:d6:d4:f8:fc:43:83:f9:47:e2:a1: 09:b8:48:d1:51:c7:8b:4d:9e:c9:48:bc:7e:c0:36: f1:3f:8a:b0:d0:b8:18:14:8f:82:56:e4:f9:9f:54: 1a:63:c4:9c:9e:c6:ae:b1:dd:d3:c3:bd:32:d0:28: 57:41:b4:dd:7b:4e:c2:14:45:2b:02:32:69:d5:65: 54:04:94:22:d5:78:2d:e5:ba:06:80:4c:4c:9f:26: c6:ea:e4:76:a7:3e:8c:a5:0c:eb:71:82:e2:04:d2: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:27:E7:DB:B9:1B:0F:A0:0A:F6:86:F2:1C:F5:33:1E:A8:D0:C7:CC X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6b:86:f1:b9:5a:78:1d:ff:a1:76:62:8b:13:da:76:fe:2d: c6:4e:66:21:9d:56:32:87:d7:f5:1f:92:ed:08:cd:7d:d8:8d: ef:f5:18:2e:cd:88:2d:5c:d6:bb:ca:5f:79:12:25:88:b7:2d: 8a:79:5b:c0:52:b8:89:6f:fa:19:16:ec:cd:89:bb:c3:5a:d8: 6c:13:bc:d5:18:7d:f4:9f:80:08:b6:97:03:da:ba:1f:d0:db: d3:80:6c:7b:93:48:46:ae:04:d8:55:21:d7:75:de:e4:c8:5f: c5:95:76:d6:e9:89:72:07:ff:aa:83:d4:82:10:26:37:49:4a: 22:bb:ab:bf:3d:d3:f4:dc:15:c9:65:c0:d6:35:46:3d:33:b1: e1:10:e7:69:22:e7:19:31:b1:83:f4:2f:c3:47:60:ad:ae:e8: 0e:80:80:53:37:ee:3c:01:c4:d5:10:16:de:6d:47:6e:16:77: 6e:db:4e:b6:c5:7d:40:c2:f7:3f:e5:9b:93:e3:8c:f1:f9:6c: f1:be:cc:20:cc:1e:95:03:b7:67:a5:33:23:43:1f:4c:93:c4: 81:08:78:d8:0e:f7:a9:04:38:f0:c3:89:84:90:bd:87:a4:1e: ed:48:e1:3d:a5:bf:6a:2a:94:b6:43:99:ef:c1:fb:fc:9a:92: 7a:65:77:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjYwNTEyMTgwOTM2WhcNMjYwNTE5MTgwOTM2WjAYMRYwFAYD VQQDEw02YTAzNmNlMS0xMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqVK3qrNOZQ4mNAh/pozKcbcPMC/v70EZqsgXhihgfJPDaNdURkRufieDDK8 tmG6bW6/VsvOAQLq16szJwbURAgfQTO+d0V6+0ChN9SzDoWGL92M1LcqgO7lG7lL HLANXgl9kQ6kkHWj8KJw2jmfeVX8iT/zNj7zMo2oyqIT2M3wnMqQLKVZne//TS4i Ii7xYM8QHVBp7aZ+v9bU+PxDg/lH4qEJuEjRUceLTZ7JSLx+wDbxP4qw0LgYFI+C VuT5n1QaY8Scnsausd3Tw70y0ChXQbTde07CFEUrAjJp1WVUBJQi1Xgt5boGgExM nybG6uR2pz6MpQzrcYLiBNJCMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8n59u5 Gw+gCvaG8hz1Mx6o0MfMMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHmuG8blaeB3/oXZiixPadv4txk5mIZ1WMofX9R+S7QjNfdiN7/UYLs2ILVzW u8pfeRIliLctinlbwFK4iW/6GRbszYm7w1rYbBO81Rh99J+ACLaXA9q6H9Db04Bs e5NIRq4E2FUh13Xe5MhfxZV21umJcgf/qoPUghAmN0lKIrurvz3T9NwVyWXA1jVG PTOx4RDnaSLnGTGxg/Qvw0dgra7oDoCAUzfuPAHE1RAW3m1HbhZ3bttOtsV9QML3 P+Wbk+OM8fls8b7MIMwelQO3Z6UzI0MfTJPEgQh42A73qQQ48MOJhJC9h6Qe7Ujh PaW/aiqUtkOZ78H7/JqSemV3MQ== -----END CERTIFICATE-----Generated at Wed May 13 13:12:31 2026 by rpki-client