$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: /I+/FcfyjT+xDr5YdQlRNeUNlFnf7oBcYZW1okmnXdc= Subject key identifier: 24:B9:55:B8:38:E1:7C:7D:B5:2C:12:CB:99:79:F2:F5:06:08:98:FD Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 01DF Signing time: Fri 15 May 2026 03:35:01 +0000 Manifest this update: Fri 15 May 2026 03:35:01 +0000 Manifest next update: Fri 22 May 2026 03:35:01 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: tWAsL1dxDDOUW2iyxW0lqK/wkPehS+/njLRq+yWb5t0=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: L3P+vRozuZM4KUNk6105/r7juMnJomgd4sf8WLIhiGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 03:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: May 15 03:35:01 2026 GMT Not After : May 22 03:35:01 2026 GMT Subject: CN=6a069465-def3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:54:6f:e9:26:c8:c9:3f:24:64:cf:cf:8f: 7f:4a:25:00:ff:f4:aa:e8:72:a7:f3:bf:be:02:44: 7a:25:9a:e1:00:88:cd:3e:27:fa:a4:9a:a5:82:70: d7:58:e2:6b:d3:de:c7:2f:7c:83:4a:e8:6b:81:4f: 03:fc:ec:02:f2:c8:a4:fa:c4:c0:17:15:ca:66:94: 57:e5:ad:85:d5:ce:cc:01:e1:4a:be:3e:fe:f7:54: 93:49:b4:33:28:0c:d4:dd:76:bb:d9:79:7f:84:7b: 42:7f:c1:ec:2e:25:b8:0f:55:cd:e9:cc:57:98:3f: db:f6:a9:50:87:b4:0a:8f:22:dd:7b:bd:63:86:ff: 62:4f:83:05:6d:3a:64:1b:8b:fd:1a:41:da:82:36: 58:1d:80:f3:a5:52:dd:af:35:1c:35:39:74:1b:25: 19:c6:f5:e6:64:a6:3b:c9:50:59:be:5c:6f:7c:25: 83:a0:76:63:44:fa:45:ff:d2:1c:f5:05:bc:f1:e0: 22:4e:8f:ef:ed:fa:78:6d:73:b1:c5:73:3e:1b:d0: b7:86:f1:10:6d:57:ad:68:c8:23:1d:b5:a4:3d:c0: af:60:89:12:58:e3:0c:91:fa:10:cc:45:45:34:d6: 71:09:4e:c0:1a:27:ef:d6:7d:a4:fc:d4:84:df:6e: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B9:55:B8:38:E1:7C:7D:B5:2C:12:CB:99:79:F2:F5:06:08:98:FD X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:5d:76:69:c0:91:b2:a7:ec:15:5c:83:62:61:e6:d5:13:b9: ef:ed:87:73:8c:62:58:0d:49:71:2e:aa:44:d0:e0:66:f9:c9: ca:97:3e:d6:9e:1d:f3:d9:e5:4f:63:c4:96:5a:34:28:25:c9: 13:25:e4:2a:3e:a2:48:d8:a4:79:8a:1c:aa:e8:9e:05:91:74: d6:36:61:07:39:3e:4d:7e:c5:a4:f6:b7:4c:10:cc:9c:ee:26: 9d:9e:3d:3d:dc:b7:b7:a2:c0:57:c0:bc:7d:57:50:cf:6d:c8: 3a:e4:58:e5:7e:b1:da:eb:d0:c9:b8:02:8e:8d:d8:bd:f0:40: 7d:7f:b2:fa:9d:bf:c3:de:7d:15:f1:0d:c7:bc:e0:de:70:e2: 82:99:63:7b:24:93:83:c0:b6:42:5a:16:80:88:c1:4f:c7:83: d7:bc:f8:6b:b2:2f:02:9c:f7:fa:06:56:ec:19:3d:50:e4:c1: fa:5a:f9:c5:b2:d8:c3:cd:75:f2:aa:08:f4:ad:6c:dc:bd:ce: 72:0f:53:66:ea:02:41:65:6a:ec:47:00:39:ba:3d:6b:8f:2d: 15:44:fb:35:7d:c5:39:e1:36:16:85:90:b6:f6:e8:5e:50:07: 5c:d7:87:9f:d5:c2:53:30:e2:9c:4b:c5:cd:85:32:ba:b0:79: b9:2f:9f:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjYwNTE1MDMzNTAxWhcNMjYwNTIyMDMzNTAxWjAYMRYwFAYD VQQDEw02YTA2OTQ2NS1kZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv9Ub+kmyMk/JGTPz49/SiUA//Sq6HKn87++AkR6JZrhAIjNPif6pJqlgnDX WOJr097HL3yDSuhrgU8D/OwC8sik+sTAFxXKZpRX5a2F1c7MAeFKvj7+91STSbQz KAzU3Xa72Xl/hHtCf8HsLiW4D1XN6cxXmD/b9qlQh7QKjyLde71jhv9iT4MFbTpk G4v9GkHagjZYHYDzpVLdrzUcNTl0GyUZxvXmZKY7yVBZvlxvfCWDoHZjRPpF/9Ic 9QW88eAiTo/v7fp4bXOxxXM+G9C3hvEQbVetaMgjHbWkPcCvYIkSWOMMkfoQzEVF NNZxCU7AGifv1n2k/NSE327h1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCS5Vbg4 4Xx9tSwSy5l58vUGCJj9MB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVF12acCRsqfsFVyDYmHm1RO57+2Hc4xiWA1JcS6qRNDgZvnJypc+1p4d89nl T2PEllo0KCXJEyXkKj6iSNikeYocquieBZF01jZhBzk+TX7FpPa3TBDMnO4mnZ49 Pdy3t6LAV8C8fVdQz23IOuRY5X6x2uvQybgCjo3YvfBAfX+y+p2/w959FfENx7zg 3nDigpljeySTg8C2QloWgIjBT8eD17z4a7IvApz3+gZW7Bk9UOTB+lr5xbLYw811 8qoI9K1s3L3Ocg9TZuoCQWVq7EcAObo9a48tFUT7NX3FOeE2FoWQtvboXlAHXNeH n9XCUzDinEvFzYUyurB5uS+fpA== -----END CERTIFICATE-----Generated at Sun May 17 03:01:25 2026 by rpki-client