$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: EGWhLq7jyQFtAp8Jf1VVxMXwsAcGaIbA/n7TnSVIl6c= Subject key identifier: 13:A5:52:7B:4E:D7:61:92:17:84:8D:B2:05:EF:F1:93:38:CA:7E:8D Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 0985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 0973 Signing time: Tue 12 May 2026 20:08:23 +0000 Manifest this update: Tue 12 May 2026 20:08:22 +0000 Manifest next update: Tue 19 May 2026 20:08:22 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: 4N3uQa9xsLETDUZKcVfoXGZOAY8xVB5J5MthhZxe/7M=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2437 (0x985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: May 12 20:08:22 2026 GMT Not After : May 19 20:08:22 2026 GMT Subject: CN=6a0388b7-344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:33:b1:a1:83:92:e8:c9:e9:32:e4:04:34: 63:59:29:4d:47:48:79:b2:67:ff:63:93:f8:2d:91: c6:ea:79:b7:f5:b2:54:12:d0:0c:37:c3:96:18:89: b3:13:d8:1e:c8:5e:18:56:56:d0:d9:39:fa:84:13: 80:91:19:d8:fc:46:2e:07:f1:a2:60:c3:a9:f8:ba: f9:ac:cc:43:9e:62:3a:7a:c7:21:b6:c6:52:f9:8b: 9d:ad:b7:0c:c7:f4:f1:8d:89:fd:74:f0:c9:dc:33: 9b:41:3c:2d:21:b4:82:40:2b:db:3e:30:cd:e6:bb: ad:c7:e1:9e:b8:38:18:54:54:0d:7e:77:a7:ef:4b: 8c:c1:85:31:b7:c8:1d:84:bf:16:d4:bb:87:3e:6b: 43:90:0a:ff:54:c6:c4:2f:4c:93:d8:64:c2:df:6d: f0:7b:eb:c4:92:84:0e:de:8f:d2:8c:9f:57:a3:38: 7e:99:51:89:bf:51:66:89:76:9d:d3:68:3f:75:ba: cc:71:91:78:9f:29:d6:97:a0:1c:51:b6:5b:ae:45: 05:f6:4f:b6:00:79:82:11:51:57:a4:3d:be:6a:ae: f0:e6:e1:02:d0:41:99:58:ec:a2:22:91:07:30:08: 3c:07:b5:c3:56:d5:0c:e5:d8:57:0a:51:2f:8e:13: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A5:52:7B:4E:D7:61:92:17:84:8D:B2:05:EF:F1:93:38:CA:7E:8D X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:39:ad:77:e7:ff:dd:ac:2a:b2:6e:f2:e8:05:42:40:3c:c4: e5:33:55:4e:bd:7f:ad:41:29:55:0d:95:58:25:fc:75:30:15: d0:1f:dc:e3:2f:0c:a6:03:a6:07:9a:11:05:48:b1:0c:df:20: 65:b2:b9:eb:28:41:ac:5a:25:a8:63:6c:e9:d7:a0:58:d4:dd: 93:ee:41:2d:db:46:90:77:41:ed:cb:8b:44:da:3b:3f:c4:98: 0c:a6:77:09:87:d8:c0:f5:5e:1a:07:cb:e1:5d:e9:b7:cb:2e: 99:7c:8b:b1:d1:5e:11:01:00:e3:f4:fb:56:3f:83:48:3c:8f: ac:f0:e8:a5:0d:e4:7b:c6:aa:2d:50:70:ef:1a:74:28:e2:d8: 3d:e7:8d:a7:6b:72:ab:55:55:02:3b:e2:0c:2f:e2:15:39:45: d8:d5:f8:f1:2a:89:eb:6a:72:90:6a:85:7b:64:a7:96:3e:98: cc:62:18:74:8b:b9:8c:5d:d3:57:24:fd:cf:55:52:47:84:7b: 6f:4c:2b:51:2d:2d:85:45:a1:14:f3:9e:68:f0:07:71:a0:8d: 76:f4:01:39:f7:2c:2d:e1:9b:43:29:63:2e:05:19:25:cf:3e: ca:d8:15:68:9e:68:8d:47:fb:d0:b4:62:17:2d:cd:5d:70:09: 5a:21:34:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjYwNTEyMjAwODIyWhcNMjYwNTE5MjAwODIyWjAYMRYwFAYD VQQDEw02YTAzODhiNy0zNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1QzsaGDkujJ6TLkBDRjWSlNR0h5smf/Y5P4LZHG6nm39bJUEtAMN8OWGImz E9geyF4YVlbQ2Tn6hBOAkRnY/EYuB/GiYMOp+Lr5rMxDnmI6eschtsZS+YudrbcM x/TxjYn9dPDJ3DObQTwtIbSCQCvbPjDN5rutx+GeuDgYVFQNfnen70uMwYUxt8gd hL8W1LuHPmtDkAr/VMbEL0yT2GTC323we+vEkoQO3o/SjJ9Xozh+mVGJv1FmiXad 02g/dbrMcZF4nynWl6AcUbZbrkUF9k+2AHmCEVFXpD2+aq7w5uEC0EGZWOyiIpEH MAg8B7XDVtUM5dhXClEvjhO6rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOlUntO 12GSF4SNsgXv8ZM4yn6NMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTmtd+f/3awqsm7y6AVCQDzE5TNVTr1/rUEpVQ2VWCX8dTAV0B/c4y8MpgOm B5oRBUixDN8gZbK56yhBrFolqGNs6degWNTdk+5BLdtGkHdB7cuLRNo7P8SYDKZ3 CYfYwPVeGgfL4V3pt8sumXyLsdFeEQEA4/T7Vj+DSDyPrPDopQ3ke8aqLVBw7xp0 KOLYPeeNp2tyq1VVAjviDC/iFTlF2NX48SqJ62pykGqFe2Snlj6YzGIYdIu5jF3T VyT9z1VSR4R7b0wrUS0thUWhFPOeaPAHcaCNdvQBOfcsLeGbQyljLgUZJc8+ytgV aJ5ojUf70LRiFy3NXXAJWiE0Ig== -----END CERTIFICATE-----Generated at Wed May 13 13:36:05 2026 by rpki-client