$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: 9b9P+fqAcmfwAd8tWDx2utumAhTP+7grKniByW8hwJM= Subject key identifier: 3D:38:2A:B8:24:BE:F6:51:0B:EC:47:AC:FE:D3:F2:A1:F8:39:88:91 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 021D Signing time: Mon 11 May 2026 02:58:52 +0000 Manifest this update: Mon 11 May 2026 02:58:51 +0000 Manifest next update: Mon 18 May 2026 02:58:51 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: ++MHsRf/uo7r1Wje+0zJk3jb9W3QLEgC7MaZh9sy4Kw=) 2: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=) 3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: May 11 02:58:51 2026 GMT Not After : May 18 02:58:51 2026 GMT Subject: CN=6a0145ec-8054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e6:08:7e:18:e8:79:f4:82:cf:3c:1e:d4:85: 03:a4:76:cb:b7:a5:b7:b3:eb:6b:a0:c2:c5:5f:1c: f5:54:85:94:63:52:75:7b:39:c0:a4:53:3a:ed:73: 2e:79:cd:71:41:92:00:1e:1c:26:c8:7a:fd:3f:65: ee:5b:ac:33:7d:71:96:a6:73:36:14:7a:f8:cb:3b: 33:77:c3:f0:1e:6f:4c:f4:1b:40:53:2d:51:51:ea: 65:73:91:36:57:b3:76:ad:71:81:fa:56:39:f4:26: 8f:69:a5:8a:4e:f3:d8:af:a2:a9:19:69:8c:2f:ce: 58:0c:c7:6e:26:10:0f:59:5c:2f:83:3f:21:06:4f: 77:53:a3:5d:28:09:c1:8e:68:89:7f:c7:6b:b7:4b: 5c:8b:17:c2:27:78:e6:36:28:ca:0f:d8:85:a9:3f: 29:46:54:bc:75:1a:b5:d0:b2:f4:65:86:89:82:2b: 2d:8a:71:1f:c8:f9:66:33:d1:fe:17:4b:cc:fa:5a: d3:f0:cf:dd:3a:60:bd:2b:57:cb:a4:14:f6:9e:43: 53:fc:f6:81:40:90:85:3f:4c:b5:19:a1:8e:e6:c9: ba:de:15:59:da:d8:ef:0e:e7:e0:30:6a:c2:09:9e: 4d:1d:bf:a0:80:42:3d:bc:6a:98:87:95:c4:8b:bc: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:38:2A:B8:24:BE:F6:51:0B:EC:47:AC:FE:D3:F2:A1:F8:39:88:91 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c2:12:c4:c5:bb:5a:a2:38:52:bb:9c:de:d5:39:95:f8:f7: 53:2e:9f:03:4e:89:00:7b:2f:8b:f0:ee:29:c8:33:86:28:54: 18:ee:a3:22:c7:d4:c1:81:b9:8c:bd:5f:0f:aa:5a:5e:e2:27: c2:83:bf:ed:28:85:8b:99:07:6c:01:ac:fb:ca:1a:3e:07:40: 84:7d:94:a4:1d:60:ed:d0:1d:0e:2e:60:9f:c9:35:ca:82:c3: b8:cb:d8:42:25:f3:0c:21:e9:26:c4:bf:92:f2:5d:57:6e:0e: 5c:7a:4d:e0:cc:c5:3a:08:f1:5e:0d:4b:ae:59:72:18:a4:a7: ba:e1:ab:93:87:7a:d8:2e:f7:16:5f:fd:c9:62:a7:98:17:9c: 2f:8a:ea:2a:f2:a3:fc:dd:3f:22:e5:22:96:0b:13:55:cb:64: b9:09:41:52:3b:1e:bd:63:34:86:cc:89:47:68:56:78:54:b5: e1:50:39:77:44:bc:3c:98:9a:dd:0e:0c:05:ed:07:c1:41:df: 8d:9c:bc:95:80:68:3c:f9:2e:f5:67:3f:71:b9:98:c9:36:8e: a2:da:ef:c7:d1:0d:e9:d3:e9:30:9a:01:f7:98:a1:98:d2:78: 2d:91:50:81:7a:99:b5:8a:0b:e6:cd:94:81:46:17:b5:ec:32: c1:a7:2d:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjYwNTExMDI1ODUxWhcNMjYwNTE4MDI1ODUxWjAYMRYwFAYD VQQDEw02YTAxNDVlYy04MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uYIfhjoefSCzzwe1IUDpHbLt6W3s+troMLFXxz1VIWUY1J1eznApFM67XMu ec1xQZIAHhwmyHr9P2XuW6wzfXGWpnM2FHr4yzszd8PwHm9M9BtAUy1RUeplc5E2 V7N2rXGB+lY59CaPaaWKTvPYr6KpGWmML85YDMduJhAPWVwvgz8hBk93U6NdKAnB jmiJf8drt0tcixfCJ3jmNijKD9iFqT8pRlS8dRq10LL0ZYaJgistinEfyPlmM9H+ F0vM+lrT8M/dOmC9K1fLpBT2nkNT/PaBQJCFP0y1GaGO5sm63hVZ2tjvDufgMGrC CZ5NHb+ggEI9vGqYh5XEi7y5KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD04Krgk vvZRC+xHrP7T8qH4OYiRMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZsISxMW7WqI4Uruc3tU5lfj3Uy6fA06JAHsvi/DuKcgzhihUGO6jIsfUwYG5 jL1fD6paXuInwoO/7SiFi5kHbAGs+8oaPgdAhH2UpB1g7dAdDi5gn8k1yoLDuMvY QiXzDCHpJsS/kvJdV24OXHpN4MzFOgjxXg1LrllyGKSnuuGrk4d62C73Fl/9yWKn mBecL4rqKvKj/N0/IuUilgsTVctkuQlBUjsevWM0hsyJR2hWeFS14VA5d0S8PJia 3Q4MBe0HwUHfjZy8lYBoPPku9Wc/cbmYyTaOotrvx9EN6dPpMJoB95ihmNJ4LZFQ gXqZtYoL5s2UgUYXtewywactWA== -----END CERTIFICATE-----Generated at Wed May 13 00:55:55 2026 by rpki-client