$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: hrRVP3wFa6cPTd5qqrCRqfHig11e8vdWVuQlfFMEm28= Subject key identifier: A1:02:44:6D:87:BA:58:87:91:D4:08:DC:AB:E9:54:D1:42:47:59:E4 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0B29 Signing time: Tue 12 May 2026 19:21:04 +0000 Manifest this update: Tue 12 May 2026 19:21:04 +0000 Manifest next update: Tue 19 May 2026 19:21:04 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: fi/wpcjWSLd7OKFvkBzbpeF9QXw0MAAcFdsmo0+Z/pE=) 2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: May 12 19:21:04 2026 GMT Not After : May 19 19:21:04 2026 GMT Subject: CN=6a037da0-576d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:d2:e7:fd:4a:46:8a:0e:c9:c0:60:5c:54: f0:d2:76:45:48:81:79:fd:a9:a4:17:c8:fa:f4:45: 70:0a:3d:87:fb:7c:c7:6e:c2:ca:dd:4c:da:cb:f6: 5d:23:af:31:32:21:1c:a3:1d:db:56:8a:79:76:db: a1:7b:9c:69:5d:03:63:a1:cf:d4:ed:0f:46:28:86: 68:75:66:db:72:98:39:23:5e:44:9c:d5:10:0d:ac: 55:4f:b2:a9:7b:64:cd:ab:0e:33:a1:77:d8:d4:b0: 52:23:4a:8d:01:b1:b7:a7:24:16:5c:75:00:ca:1a: c6:6e:76:ea:60:c0:bd:1c:7b:1d:54:1d:33:c9:6e: 7f:41:54:bf:e4:a4:3b:2d:5f:fc:47:b1:f8:07:21: 59:4d:90:a8:a8:95:a4:a9:d1:8f:65:b1:93:8f:01: dc:8b:23:11:1a:dc:0b:4f:15:47:66:70:f3:32:30: 2c:c6:86:97:7e:a9:ce:68:61:09:63:ad:f3:21:f7: 04:97:3f:d1:ff:4b:55:a5:1f:78:3c:e8:bf:dd:a7: 5f:a4:67:4b:67:a7:97:82:06:e0:01:a1:36:da:14: 3b:d0:3d:9b:ba:88:1b:3d:c4:81:e8:78:b7:9c:5f: f9:5a:41:7d:30:a8:0c:5c:70:f1:ff:0c:62:3d:1f: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:44:6D:87:BA:58:87:91:D4:08:DC:AB:E9:54:D1:42:47:59:E4 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9e:4c:b1:4f:1c:11:a9:9e:5a:30:50:91:1d:a3:ed:da:1e: 6e:f2:d0:9f:27:3b:ad:71:e4:a2:62:91:f2:87:f1:c6:ae:9a: aa:e8:45:c8:d7:6e:28:a9:c5:4e:5c:3f:fd:a5:e9:da:0d:52: 2a:c1:b9:c8:bd:b5:6d:b0:81:5d:4b:02:42:b3:e3:6f:0f:3c: a7:f9:be:e5:5e:06:10:5e:c8:ba:3a:13:39:b3:3b:be:f1:66: 38:12:57:2e:c7:ca:42:e7:2a:47:86:90:17:62:9f:44:26:6a: 7d:41:1f:21:aa:fc:24:32:32:36:45:a9:3f:85:6b:50:b7:6c: b2:ec:55:17:6c:6f:42:8e:53:2f:21:a0:12:4a:a3:85:6d:00: f4:3e:e7:00:e5:06:a3:08:bd:fc:a0:44:f2:08:06:11:d4:b0: a7:d9:c0:17:91:bd:1d:20:80:ec:04:98:13:06:1a:7b:42:86: ee:d9:0c:cb:b4:78:4e:07:71:ca:9a:d9:c7:c2:aa:c3:83:e2: 35:2a:be:28:76:88:81:f7:90:33:b7:63:27:f4:d0:d3:c0:59: 4c:86:4d:2d:eb:75:65:5f:fe:18:3f:15:42:ae:58:a3:38:dd: 46:57:c1:15:dc:85:60:a4:28:c2:95:9b:c2:18:58:9d:12:d9: 08:cf:a5:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwNTEyMTkyMTA0WhcNMjYwNTE5MTkyMTA0WjAYMRYwFAYD VQQDEw02YTAzN2RhMC01NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMPS5/1KRooOycBgXFTw0nZFSIF5/amkF8j69EVwCj2H+3zHbsLK3Uzay/Zd I68xMiEcox3bVop5dtuhe5xpXQNjoc/U7Q9GKIZodWbbcpg5I15EnNUQDaxVT7Kp e2TNqw4zoXfY1LBSI0qNAbG3pyQWXHUAyhrGbnbqYMC9HHsdVB0zyW5/QVS/5KQ7 LV/8R7H4ByFZTZCoqJWkqdGPZbGTjwHciyMRGtwLTxVHZnDzMjAsxoaXfqnOaGEJ Y63zIfcElz/R/0tVpR94POi/3adfpGdLZ6eXggbgAaE22hQ70D2buogbPcSB6Hi3 nF/5WkF9MKgMXHDx/wxiPR/XrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKECRG2H uliHkdQI3KvpVNFCR1nkMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArJ5MsU8cEameWjBQkR2j7doebvLQnyc7rXHkomKR8ofxxq6aquhFyNduKKnF Tlw//aXp2g1SKsG5yL21bbCBXUsCQrPjbw88p/m+5V4GEF7IujoTObM7vvFmOBJX LsfKQucqR4aQF2KfRCZqfUEfIar8JDIyNkWpP4VrULdssuxVF2xvQo5TLyGgEkqj hW0A9D7nAOUGowi9/KBE8ggGEdSwp9nAF5G9HSCA7ASYEwYae0KG7tkMy7R4Tgdx yprZx8Kqw4PiNSq+KHaIgfeQM7djJ/TQ08BZTIZNLet1ZV/+GD8VQq5YozjdRlfB FdyFYKQowpWbwhhYnRLZCM+l4g== -----END CERTIFICATE-----Generated at Wed May 13 17:34:00 2026 by rpki-client