$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: GbgdbfHpt/IM5gU+0wIqTvpOFL6gUtFCZaH9mFLp4NE= Subject key identifier: C3:1F:7E:AD:04:4D:B0:B6:54:68:1F:36:CC:B9:CD:4E:EC:51:1B:FD Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 04E8 Signing time: Wed 20 May 2026 23:51:38 +0000 Manifest this update: Wed 20 May 2026 23:51:38 +0000 Manifest next update: Wed 27 May 2026 23:51:38 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: YCn8p7GkuAQNNhJJpL3xKqFrPpjwYm4EbBec4WUPg0Q=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: May 20 23:51:38 2026 GMT Not After : May 27 23:51:38 2026 GMT Subject: CN=6a0e490a-01a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:87:33:a6:77:cf:5e:d4:35:35:e3:bf:27: b5:53:76:4b:78:37:af:f6:2f:54:69:8d:72:f8:1c: 55:bf:24:40:71:25:8b:d1:87:7f:f9:0a:3c:d7:8e: 2a:08:9d:27:a1:cd:1c:9a:c4:4d:79:94:7e:4b:f7: 3f:0a:48:57:cc:0f:8e:97:ca:30:4d:77:3f:92:03: 9c:ea:78:b6:f9:6f:46:f9:ac:d8:bd:d5:1a:00:19: 9a:15:d7:11:12:79:63:cf:cb:ab:3b:c4:4b:b4:ad: 66:91:c5:0c:3d:4c:c3:05:4a:ae:5a:c5:fb:f2:f5: bf:de:cf:02:b6:29:1c:4f:b9:b2:39:88:9f:30:d9: 1b:e0:6c:d5:da:6a:f6:da:19:b6:fa:97:6c:d6:04: 3e:fa:38:5c:6a:92:a0:04:a9:bb:4d:8c:dd:fd:12: fa:c5:96:47:af:64:6c:8a:10:59:ea:e4:2f:e0:64: 9d:5c:65:e7:99:f3:57:5b:66:6c:10:73:ec:80:29: 2d:6d:f0:25:09:84:07:b1:0b:dc:86:78:e7:5b:88: 6e:d4:12:88:cf:f4:ef:0e:12:6f:5e:0d:c9:f9:a3: 77:5c:b8:49:df:b0:cc:21:d9:3d:91:7d:39:d5:c4: 77:83:07:89:b1:55:d0:e4:4e:fc:57:76:ac:8f:eb: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1F:7E:AD:04:4D:B0:B6:54:68:1F:36:CC:B9:CD:4E:EC:51:1B:FD X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:29:0e:ef:bd:ca:80:cc:fb:54:01:1b:2e:9d:a6:12:07:40: 59:42:69:fa:8c:94:6a:82:c1:95:4a:96:1a:5f:62:35:23:e9: ab:cd:83:74:5e:07:88:6c:2a:21:02:8a:45:cb:7a:c2:97:be: 28:00:8b:61:e2:97:8c:ab:0a:8d:2d:96:9a:14:d8:7b:bd:a4: 9b:8a:7f:47:d5:c6:ec:91:59:85:04:75:50:1c:2e:44:a0:e1: f1:3a:1b:59:f9:1a:52:b3:8d:76:2e:2b:89:57:be:28:a4:c7: 92:e7:54:41:97:17:8e:f8:b8:a6:2d:11:5e:a1:d5:6e:c5:6f: 6c:15:ab:5d:01:28:3e:78:96:b7:94:a8:4d:9f:4a:d4:66:91: 98:ba:4f:e4:56:9d:53:14:9b:0e:1b:47:bb:f0:61:ee:69:a1: ea:df:49:b9:d0:f5:55:f6:10:e8:f0:bd:17:fb:62:ba:34:b7: cc:a7:9b:4f:6a:36:bb:6d:f5:cb:1f:47:49:76:74:34:98:97: ec:a5:e3:b2:a4:1e:62:88:39:09:50:90:48:b0:89:63:58:ee: 8d:c3:a0:92:5c:2a:81:db:10:32:f2:76:ee:ac:0d:ba:d0:ec: 17:2b:f7:f3:d6:6d:8d:4c:85:6a:a4:72:6c:c0:a6:8d:9e:94: c0:45:a0:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjYwNTIwMjM1MTM4WhcNMjYwNTI3MjM1MTM4WjAYMRYwFAYD VQQDEw02YTBlNDkwYS0wMWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSuHM6Z3z17UNTXjvye1U3ZLeDev9i9UaY1y+BxVvyRAcSWL0Yd/+Qo8144q CJ0noc0cmsRNeZR+S/c/CkhXzA+Ol8owTXc/kgOc6ni2+W9G+azYvdUaABmaFdcR Enljz8urO8RLtK1mkcUMPUzDBUquWsX78vW/3s8CtikcT7myOYifMNkb4GzV2mr2 2hm2+pds1gQ++jhcapKgBKm7TYzd/RL6xZZHr2RsihBZ6uQv4GSdXGXnmfNXW2Zs EHPsgCktbfAlCYQHsQvchnjnW4hu1BKIz/TvDhJvXg3J+aN3XLhJ37DMIdk9kX05 1cR3gweJsVXQ5E78V3asj+urXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMffq0E TbC2VGgfNsy5zU7sURv9MB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArikO773KgMz7VAEbLp2mEgdAWUJp+oyUaoLBlUqWGl9iNSPpq82DdF4HiGwq IQKKRct6wpe+KACLYeKXjKsKjS2WmhTYe72km4p/R9XG7JFZhQR1UBwuRKDh8Tob WfkaUrONdi4riVe+KKTHkudUQZcXjvi4pi0RXqHVbsVvbBWrXQEoPniWt5SoTZ9K 1GaRmLpP5FadUxSbDhtHu/Bh7mmh6t9JudD1VfYQ6PC9F/tiujS3zKebT2o2u231 yx9HSXZ0NJiX7KXjsqQeYog5CVCQSLCJY1jujcOgklwqgdsQMvJ27qwNutDsFyv3 89ZtjUyFaqRybMCmjZ6UwEWgAg== -----END CERTIFICATE-----Generated at Thu May 21 10:23:59 2026 by rpki-client