$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: FjGxVCY0B3NCj02fI6KTsMWT3V6RwhAAef8r779f91Y= Subject key identifier: 3A:25:07:49:C8:68:3E:A4:62:8C:04:EF:AF:D4:10:C3:AE:63:39:32 Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 0726 Signing time: Wed 20 May 2026 21:55:07 +0000 Manifest this update: Wed 20 May 2026 21:55:07 +0000 Manifest next update: Wed 27 May 2026 21:55:07 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: +UcYi9wOCwz/85PCD9zWJ0oKRLUNCndG3jepQ1wZpNo=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: CxI7KYu4pZe63vL/eoc29VD/jD6Ot+ag5XgopheyhjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: May 20 21:55:07 2026 GMT Not After : May 27 21:55:07 2026 GMT Subject: CN=6a0e2dbb-4d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:fe:e1:c4:0a:20:bc:f8:92:4b:a9:e1:4c: bb:a4:26:d1:83:e1:7b:32:08:9a:ce:00:07:91:91: 5a:ca:c5:86:a6:a4:27:f0:33:dc:b9:a6:c7:37:37: 86:61:62:f6:86:1b:32:a9:c9:95:83:ff:f5:07:29: a1:74:4b:d3:da:5c:a0:a4:75:0c:44:5b:3b:fa:5f: 8c:59:ca:01:67:05:88:bb:36:d9:c4:f8:d1:5e:0a: da:04:64:b3:a7:8b:59:f3:c0:5d:cd:09:97:fc:ed: 3d:ab:05:3d:2c:c5:81:7d:41:27:2b:82:c6:5a:32: 93:cc:0d:00:ae:ea:5b:70:49:25:aa:84:7c:41:ae: 64:7e:f8:61:b2:11:cf:87:9b:65:19:24:d3:87:ee: 7c:42:4a:53:e6:30:77:14:ce:c4:0d:f6:02:09:bf: 51:1b:1d:fd:54:87:97:eb:8f:4d:3e:b5:68:a0:37: b0:40:d6:44:ad:60:93:8b:a9:b2:eb:52:0b:d0:da: b0:32:e4:57:6e:55:b2:b7:28:6b:89:ff:98:c8:f0: a9:a4:9e:48:38:43:ca:5f:4c:86:cc:98:fb:59:6a: 66:e1:36:ac:41:19:58:43:35:4b:39:67:3a:a2:90: 21:ef:72:a5:4c:5e:3c:90:d2:e7:ae:83:81:c4:19: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:25:07:49:C8:68:3E:A4:62:8C:04:EF:AF:D4:10:C3:AE:63:39:32 X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ca:1c:81:d7:d0:69:48:cf:ad:f4:9f:6f:0f:f3:a2:0b:6e: de:88:28:85:cf:e2:7f:54:dc:27:6c:41:c4:a7:9d:58:da:31: 2a:57:4e:99:a8:ba:db:9d:a5:d0:e9:89:1e:b0:1a:96:9f:90: cb:79:18:39:f5:55:93:60:d6:d5:03:58:4e:75:22:b4:15:ec: 89:f5:f7:ab:59:33:47:77:cd:53:9a:d0:a0:31:ed:6c:4e:b7: c5:d1:1d:cd:db:06:28:f1:5f:4f:bc:54:94:ff:f5:b1:ae:89: 15:95:08:ef:bf:d2:fe:c6:18:5e:33:5f:23:e5:2c:66:0d:8f: e8:2c:dc:c8:54:93:d1:bd:0b:a9:06:86:2c:a8:f5:b5:c4:60: ee:4d:53:2a:fe:3a:1e:b4:7b:12:8e:97:a6:d3:10:45:33:c6: e4:e4:93:9e:69:74:7c:32:79:cc:48:c5:79:19:78:16:3d:e6: b8:e3:b7:25:f0:25:3b:ab:60:8e:27:7d:dd:6b:e8:44:3a:d9: dc:10:bb:85:13:18:d7:09:9c:dd:4b:22:da:fa:b5:fb:54:0f: 86:de:e8:05:e8:e5:d5:a7:5f:78:e7:47:ff:11:c3:e2:61:7a: 97:39:a2:28:05:73:6a:45:3e:14:b8:23:41:11:81:a4:72:33: 85:96:34:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjYwNTIwMjE1NTA3WhcNMjYwNTI3MjE1NTA3WjAYMRYwFAYD VQQDEw02YTBlMmRiYi00ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6P+4cQKILz4kkup4Uy7pCbRg+F7MgiazgAHkZFaysWGpqQn8DPcuabHNzeG YWL2hhsyqcmVg//1BymhdEvT2lygpHUMRFs7+l+MWcoBZwWIuzbZxPjRXgraBGSz p4tZ88BdzQmX/O09qwU9LMWBfUEnK4LGWjKTzA0ArupbcEklqoR8Qa5kfvhhshHP h5tlGSTTh+58QkpT5jB3FM7EDfYCCb9RGx39VIeX649NPrVooDewQNZErWCTi6my 61IL0NqwMuRXblWytyhrif+YyPCppJ5IOEPKX0yGzJj7WWpm4TasQRlYQzVLOWc6 opAh73KlTF48kNLnroOBxBlabwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDolB0nI aD6kYowE76/UEMOuYzkyMB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABMocgdfQaUjPrfSfbw/zogtu3ogohc/if1TcJ2xBxKedWNoxKldOmai6252l 0OmJHrAalp+Qy3kYOfVVk2DW1QNYTnUitBXsifX3q1kzR3fNU5rQoDHtbE63xdEd zdsGKPFfT7xUlP/1sa6JFZUI77/S/sYYXjNfI+UsZg2P6CzcyFST0b0LqQaGLKj1 tcRg7k1TKv46HrR7Eo6XptMQRTPG5OSTnml0fDJ5zEjFeRl4Fj3muOO3JfAlO6tg jid93WvoRDrZ3BC7hRMY1wmc3Usi2vq1+1QPht7oBejl1adfeOdH/xHD4mF6lzmi KAVzakU+FLgjQRGBpHIzhZY0mg== -----END CERTIFICATE-----Generated at Thu May 21 10:15:15 2026 by rpki-client