$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: pkzZHyejIngL0EIgAgqvlBGYkxvAS4JKTAI4e+j4yhM= Subject key identifier: C3:DD:E6:59:C6:7D:2F:5C:F4:4E:1A:29:49:A3:05:C2:E6:5F:6A:09 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 05A8 Signing time: Wed 20 May 2026 23:12:57 +0000 Manifest this update: Wed 20 May 2026 23:12:57 +0000 Manifest next update: Wed 27 May 2026 23:12:57 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: /kG02Tlq5R3MEzij0gFU1aZThZT2LWJwSNU0uPYRtNY=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: May 20 23:12:57 2026 GMT Not After : May 27 23:12:57 2026 GMT Subject: CN=6a0e3ff9-2dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:48:ba:66:23:1c:30:2d:66:2c:b2:9b:ee: d1:73:ff:31:6e:52:d7:89:37:e1:75:cc:10:03:68: 5b:2d:b9:51:69:4d:e0:9a:1c:55:ee:be:f9:6a:6c: 1f:93:be:fd:76:7c:db:87:db:a9:d3:7e:c1:70:27: 56:b2:e2:69:d6:07:7f:c1:97:20:fd:a5:69:5b:6a: 70:73:4d:aa:ed:42:ac:85:ed:0b:f8:0f:cc:d9:d9: c9:62:3a:6c:97:87:de:01:7d:7f:92:1a:4c:2a:b7: ec:99:ec:23:f8:a7:04:bc:5b:cd:0f:81:64:99:9d: ad:88:5c:36:18:d2:a8:d2:2f:9c:af:55:02:d3:91: ed:87:5a:5e:b4:ed:dc:88:9c:9d:66:90:94:94:81: 3a:e0:6f:2f:8e:55:d1:59:88:99:cd:2f:0d:68:62: 2b:16:14:81:67:de:e0:9d:07:e8:7e:1a:4c:e7:d8: cb:ec:3c:af:6b:ec:3e:0d:63:07:58:f0:cf:a6:27: ea:a3:c5:c8:a0:e6:03:f9:04:e9:84:67:e5:49:03: d7:61:7a:24:88:0c:20:db:c3:a9:ab:11:4a:6e:c9: 46:f1:7f:40:64:44:b2:2a:04:cc:0a:b7:cd:87:e2: b0:0b:13:dd:35:ad:46:14:1f:23:80:15:88:a2:34: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:E6:59:C6:7D:2F:5C:F4:4E:1A:29:49:A3:05:C2:E6:5F:6A:09 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:38:0f:d0:68:2f:37:a4:dc:4f:15:08:37:90:f6:4a:ba:3e: 17:a4:f4:db:b6:5e:03:d4:a8:38:d0:14:4c:a6:29:ef:b6:75: ee:d2:82:ca:cd:28:04:b3:92:13:09:1e:fa:02:9e:b9:35:37: 0a:5b:f2:7a:9d:09:b2:26:10:37:99:cb:2a:aa:0b:f3:7a:bb: e6:7d:74:ab:a5:ba:b1:59:6d:a4:66:56:ed:13:92:fa:c6:70: 6f:2e:62:8e:f9:cb:14:18:59:7e:57:b1:ae:0c:7f:8e:8b:92: 13:23:47:aa:19:8b:58:aa:05:e3:93:e3:e1:e7:f7:b2:a5:90: b7:f3:f8:f4:ed:e7:55:a8:f5:7d:98:46:40:89:e8:df:98:90: c1:62:5f:71:01:68:65:6a:4e:84:09:92:78:46:a2:14:df:ef: 2a:95:4a:e8:71:be:eb:48:7c:2b:d0:64:ff:6e:63:d8:f7:4a: dc:7e:2a:65:22:d0:90:3e:7f:97:3a:08:f1:74:09:d2:3c:b5: 0d:34:d7:10:56:04:6d:0b:c2:c8:8d:43:10:af:e0:b0:4f:de: c9:b3:99:9d:01:46:b7:77:a1:45:ae:f7:fd:3b:61:d9:3e:ca: b4:47:bf:dd:ab:74:c4:3c:5b:2d:02:c8:63:1c:d2:9c:7d:51: 8f:7a:15:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjYwNTIwMjMxMjU3WhcNMjYwNTI3MjMxMjU3WjAYMRYwFAYD VQQDEw02YTBlM2ZmOS0yZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MlIumYjHDAtZiyym+7Rc/8xblLXiTfhdcwQA2hbLblRaU3gmhxV7r75amwf k779dnzbh9up037BcCdWsuJp1gd/wZcg/aVpW2pwc02q7UKshe0L+A/M2dnJYjps l4feAX1/khpMKrfsmewj+KcEvFvND4FkmZ2tiFw2GNKo0i+cr1UC05Hth1petO3c iJydZpCUlIE64G8vjlXRWYiZzS8NaGIrFhSBZ97gnQfofhpM59jL7Dyva+w+DWMH WPDPpifqo8XIoOYD+QTphGflSQPXYXokiAwg28OpqxFKbslG8X9AZESyKgTMCrfN h+KwCxPdNa1GFB8jgBWIojTnlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPd5lnG fS9c9E4aKUmjBcLmX2oJMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmjgP0GgvN6TcTxUIN5D2Sro+F6T027ZeA9SoONAUTKYp77Z17tKCys0oBLOS Ewke+gKeuTU3Clvyep0JsiYQN5nLKqoL83q75n10q6W6sVltpGZW7ROS+sZwby5i jvnLFBhZflexrgx/jouSEyNHqhmLWKoF45Pj4ef3sqWQt/P49O3nVaj1fZhGQIno 35iQwWJfcQFoZWpOhAmSeEaiFN/vKpVK6HG+60h8K9Bk/25j2PdK3H4qZSLQkD5/ lzoI8XQJ0jy1DTTXEFYEbQvCyI1DEK/gsE/eybOZnQFGt3ehRa73/Tth2T7KtEe/ 3at0xDxbLQLIYxzSnH1Rj3oVYQ== -----END CERTIFICATE-----Generated at Thu May 21 10:29:03 2026 by rpki-client