$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: 3BmY2bBqt1G4z1o9h4kLjXjAMi5SxuemhTs8CfKBQWQ= Subject key identifier: BA:2C:F5:03:D8:A6:04:74:40:E6:81:C1:1B:63:51:94:49:74:DF:D7 Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 90 Signing time: Tue 19 May 2026 07:20:14 +0000 Manifest this update: Tue 19 May 2026 07:20:14 +0000 Manifest next update: Tue 26 May 2026 07:20:14 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: KNwxuIXXsgdIC2G8csanjqnfouJKH1pisWpWNpB+59g=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 5kreoxgcCJUQZsNMEHK/Y4fOtdmTmyIsApDfpOqWQVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 07:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: May 19 07:20:14 2026 GMT Not After : May 26 07:20:14 2026 GMT Subject: CN=6a0c0f2e-7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:db:33:c3:ba:aa:f2:90:da:3c:1a:aa:e9: b0:b2:9d:68:91:13:67:6a:ad:62:ad:96:36:d2:46: 19:32:0e:32:fa:ea:bb:b3:c0:3c:3f:bc:ae:63:ab: 0f:a3:02:cb:68:fc:56:d6:15:7f:4d:fb:86:d8:c4: 88:74:1e:6f:26:38:21:1f:76:af:4f:b0:64:ec:12: a4:34:33:ce:38:b5:9c:c7:10:03:38:58:aa:c4:b6: fe:a6:63:fc:f4:ea:80:24:7f:b4:cb:27:c3:e1:d7: 5f:7f:27:6c:b6:55:ba:0e:26:32:8e:b6:94:5a:9d: 65:bb:6a:5b:24:eb:70:ab:84:a2:4f:15:db:0a:bf: 29:30:6f:84:0f:fa:e3:fc:5b:2d:60:83:12:a3:8e: 02:df:69:6a:11:6f:d4:11:2c:bd:c8:6f:c4:91:ae: 73:b1:c4:79:17:ef:8b:cf:07:9f:ef:cc:b5:99:bd: bd:fd:3e:73:f7:7a:f3:43:d0:cc:2e:57:c6:85:97: c2:07:82:13:0a:81:f8:81:82:59:ba:83:29:34:5b: c0:0b:73:e3:55:2f:f2:f1:09:1d:2d:cd:b6:69:14: 85:20:be:46:84:b1:54:e2:6e:cd:73:6e:aa:ff:80: 99:e2:50:80:14:05:76:6c:79:92:8e:8b:c4:3b:94: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:F5:03:D8:A6:04:74:40:E6:81:C1:1B:63:51:94:49:74:DF:D7 X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:68:ec:a8:2e:eb:fa:f8:8b:f5:62:3e:a6:06:5a:b1:d3:2f: 76:7d:34:a2:d3:85:42:30:b4:ef:19:1e:61:06:98:d5:a3:7b: 39:78:83:7f:70:fd:34:f3:a4:42:6b:09:78:c7:71:24:74:af: 29:55:df:9b:82:b1:e5:ee:7b:50:bd:09:36:e4:15:51:b3:bc: 25:80:ea:87:02:f1:b7:cf:ab:ec:19:9b:49:74:56:1f:fa:36: bf:12:85:df:8c:a4:81:23:d7:00:d4:42:e8:37:f2:6a:85:28: 4b:88:c4:d3:b8:66:71:d5:39:3b:f3:bf:7d:57:f7:6f:20:45: e2:66:89:25:b0:4b:8e:9a:b2:58:2f:6f:c0:46:fd:1f:1a:16: 0a:a1:fe:db:3b:31:b1:84:a9:5d:43:e8:23:4c:d7:03:01:e3: e4:8a:f0:f0:13:3d:6d:c6:fd:78:73:67:d8:49:c3:75:b2:ba: 1d:4a:bf:2e:43:4a:44:be:2b:56:e7:b3:04:8d:e0:d5:4f:ba: 9b:c8:2c:42:dd:ad:92:02:b0:cd:9d:55:87:1c:ee:d5:ea:92: c8:6e:29:6e:bb:41:d5:08:97:58:ab:bb:4f:9f:29:bb:d2:5f: 0c:24:8f:e8:37:a0:ed:3c:20:e5:47:c5:0f:5d:c2:ce:2f:6f: 41:3e:60:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVEREExMTAvBgNVBAUTKEU1MTAyMDhGRDM5MDQyRTMzNjYyMTMwQTQyQThGODNG RUVDRkJFNzQwHhcNMjYwNTE5MDcyMDE0WhcNMjYwNTI2MDcyMDE0WjAYMRYwFAYD VQQDEw02YTBjMGYyZS03NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4fbM8O6qvKQ2jwaqumwsp1okRNnaq1irZY20kYZMg4y+uq7s8A8P7yuY6sP owLLaPxW1hV/TfuG2MSIdB5vJjghH3avT7Bk7BKkNDPOOLWcxxADOFiqxLb+pmP8 9OqAJH+0yyfD4ddffydstlW6DiYyjraUWp1lu2pbJOtwq4SiTxXbCr8pMG+ED/rj /FstYIMSo44C32lqEW/UESy9yG/Eka5zscR5F++Lzwef78y1mb29/T5z93rzQ9DM LlfGhZfCB4ITCoH4gYJZuoMpNFvAC3PjVS/y8QkdLc22aRSFIL5GhLFU4m7Nc26q /4CZ4lCAFAV2bHmSjovEO5QnGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLos9QPY pgR0QOaBwRtjUZRJdN/XMB8GA1UdIwQYMBaAFOUQII/TkELjNmITCkKo+D/uz750 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUREQS84MEFDMDk4Njc5 NkUxMUYwOEZDNTE3NzRDNEY5QUUwMi81UkFnajlPUVF1TTJZaE1LUXFqNFAtN1B2 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUREQS84MEFDMDk4Njc5NkUxMUYwOEZDNTE3NzRDNEY5QUUwMi81UkFnajlPUVF1 TTJZaE1LUXFqNFAtN1B2blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB2jsqC7r+viL9WI+pgZasdMvdn00otOFQjC07xkeYQaY1aN7OXiDf3D9NPOk QmsJeMdxJHSvKVXfm4Kx5e57UL0JNuQVUbO8JYDqhwLxt8+r7BmbSXRWH/o2vxKF 34ykgSPXANRC6DfyaoUoS4jE07hmcdU5O/O/fVf3byBF4maJJbBLjpqyWC9vwEb9 HxoWCqH+2zsxsYSpXUPoI0zXAwHj5Irw8BM9bcb9eHNn2EnDdbK6HUq/LkNKRL4r VuezBI3g1U+6m8gsQt2tkgKwzZ1Vhxzu1eqSyG4pbrtB1QiXWKu7T58pu9JfDCSP 6Deg7Twg5UfFD13Czi9vQT5gLA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:23 2026 by rpki-client