$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: 6D91qKc0n/WaZkMjgpFyrFVBBTMBKEx/InQEIxvHP60= Subject key identifier: 7D:96:7D:D1:12:51:B9:1E:D8:D0:A5:26:52:32:CC:12:FD:CB:B6:00 Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0C59 Signing time: Wed 20 May 2026 18:44:26 +0000 Manifest this update: Wed 20 May 2026 18:44:26 +0000 Manifest next update: Wed 27 May 2026 18:44:26 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: BAAJYJMEIKqB4qrwSa5lNO4G2nB6qp4tC+RvjR/sKLU=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: XTpbQflqD7TFkHQJp5BXjyAKD1uJrQHdMU7baBo5Omg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: May 20 18:44:26 2026 GMT Not After : May 27 18:44:26 2026 GMT Subject: CN=6a0e010a-7829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c0:fd:0c:93:aa:1f:cf:67:71:1e:58:0d:df: eb:04:63:a8:e5:36:57:23:d9:65:5d:d8:07:63:de: 58:22:e7:d1:78:6f:82:5c:8e:d1:95:0a:08:2c:a7: 61:84:c6:6f:d6:a6:d8:c9:ce:44:1c:ad:56:50:dc: e8:e9:9a:a5:4f:98:18:6d:a6:2d:11:74:6c:99:b2: 81:44:1d:ca:ff:65:b7:33:9b:3c:4e:ce:9b:9e:38: a3:71:d0:3d:cd:26:3c:80:67:9a:44:5c:bd:a2:cd: db:7b:1a:6e:92:e9:2b:53:0e:11:56:a2:7f:a4:bb: dd:36:02:7b:5d:72:6a:ab:81:bd:2c:56:f8:ce:05: 96:e3:f8:10:95:a0:b0:d3:01:79:03:56:2d:88:c5: 0c:65:02:14:a5:f7:04:23:b5:ce:68:7b:71:5e:2a: eb:2c:79:9f:a9:ce:a0:ef:9a:44:08:37:12:58:43: 79:a9:b9:85:76:0b:3f:a8:d3:a7:cd:cb:a3:c8:60: de:7d:c7:05:16:c3:7f:cc:04:d1:c1:a2:9e:7c:66: a5:82:69:98:fb:54:a2:83:30:8c:b6:25:c1:e0:50: c5:10:ab:27:c3:04:1f:bc:8b:6e:4a:b1:65:f5:e1: 48:90:13:59:e0:fa:34:32:9e:cd:df:bd:c9:0f:cf: 35:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:7D:D1:12:51:B9:1E:D8:D0:A5:26:52:32:CC:12:FD:CB:B6:00 X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a5:c9:48:09:84:0f:da:76:ce:cd:67:db:2c:c0:1f:65:54: 12:12:fb:f4:06:c6:05:50:47:5c:71:ad:a2:4a:09:16:80:2a: e7:0a:84:f0:f9:5d:41:df:b9:f2:b7:bd:92:32:e4:84:33:e0: f1:40:a5:15:14:c4:7a:4e:38:b2:b0:e3:1f:5b:48:f4:e5:ce: 9c:59:df:ee:a6:67:de:05:52:7f:99:2c:5f:18:b7:6d:bf:69: 5a:9f:50:f7:f9:2d:6c:76:c4:c9:09:4c:34:a4:39:33:a5:b4: 5b:27:45:fb:e5:a2:06:7e:7f:b4:06:b5:e6:2f:df:44:8d:2f: a5:41:a5:42:9c:ac:f8:55:e1:cf:95:d4:27:ab:c0:e1:ee:da: e8:c0:d5:31:1c:be:ac:26:ce:50:4a:a7:c8:b0:a9:0d:cf:80: 6e:2e:d4:e3:b2:64:9a:bf:cb:82:fc:26:0e:59:b7:3d:3b:6a: ca:87:c6:96:81:59:34:0d:b2:9b:1e:bb:83:b9:c4:b0:c7:70: da:3a:81:a6:dd:d3:7b:cf:04:2a:f2:9a:51:cc:d7:7c:e5:57: 38:bb:02:60:8f:09:9d:41:93:47:fc:f1:17:26:0c:a9:b5:70: ea:4e:a6:40:0b:f5:e6:2f:71:f2:a4:ba:b1:e3:69:68:34:52: d1:b5:42:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjYwNTIwMTg0NDI2WhcNMjYwNTI3MTg0NDI2WjAYMRYwFAYD VQQDEw02YTBlMDEwYS03ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MD9DJOqH89ncR5YDd/rBGOo5TZXI9llXdgHY95YIufReG+CXI7RlQoILKdh hMZv1qbYyc5EHK1WUNzo6ZqlT5gYbaYtEXRsmbKBRB3K/2W3M5s8Ts6bnjijcdA9 zSY8gGeaRFy9os3bexpukukrUw4RVqJ/pLvdNgJ7XXJqq4G9LFb4zgWW4/gQlaCw 0wF5A1YtiMUMZQIUpfcEI7XOaHtxXirrLHmfqc6g75pECDcSWEN5qbmFdgs/qNOn zcujyGDefccFFsN/zATRwaKefGalgmmY+1SigzCMtiXB4FDFEKsnwwQfvItuSrFl 9eFIkBNZ4Po0Mp7N373JD881gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2WfdES Ubke2NClJlIyzBL9y7YAMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADqXJSAmED9p2zs1n2yzAH2VUEhL79AbGBVBHXHGtokoJFoAq5wqE8PldQd+5 8re9kjLkhDPg8UClFRTEek44srDjH1tI9OXOnFnf7qZn3gVSf5ksXxi3bb9pWp9Q 9/ktbHbEyQlMNKQ5M6W0WydF++WiBn5/tAa15i/fRI0vpUGlQpys+FXhz5XUJ6vA 4e7a6MDVMRy+rCbOUEqnyLCpDc+Abi7U47Jkmr/LgvwmDlm3PTtqyofGloFZNA2y mx67g7nEsMdw2jqBpt3Te88EKvKaUczXfOVXOLsCYI8JnUGTR/zxFyYMqbVw6k6m QAv15i9x8qS6seNpaDRS0bVCrw== -----END CERTIFICATE-----Generated at Thu May 21 09:39:20 2026 by rpki-client