$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: LYhlNp0FWk+nVSPCOxmfcnOw4KM5vsX2tJPUd1r0AZE= Subject key identifier: E4:FD:16:DC:8D:EF:A7:74:12:DB:F0:43:68:B6:D4:D4:06:DC:DF:B9 Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 02D3 Signing time: Thu 21 May 2026 01:28:45 +0000 Manifest this update: Thu 21 May 2026 01:28:44 +0000 Manifest next update: Thu 28 May 2026 01:28:44 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: ijBC0w8VkCOwCl2el3I4oyhoUNQIjjpLWzgOAZ63UIE=) 2: C11EB2BACB5911F0BEAC2433C4F9AE02.roa (hash: AyFWVAjP0bY1LUKkTu0jDgulxPnrUezSws8ZVyn0wzU=) 3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 2Jv9MG7xi06P5kcDDPgdjuTC+iMwAJuA2IsIX/ADqHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: May 21 01:28:44 2026 GMT Not After : May 28 01:28:44 2026 GMT Subject: CN=6a0e5fcc-b6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:c2:8c:0e:6a:9d:8c:80:d1:44:1f:11:c0: f7:a5:c5:10:8d:4d:f0:28:78:98:55:9d:e0:cd:df: 85:dc:7c:0a:b5:7a:c3:36:ff:f9:05:8d:2d:73:1f: db:40:be:9a:73:3e:2c:82:0f:a3:93:6a:2b:79:55: a3:46:46:a6:11:66:86:c5:7e:cf:54:80:be:ab:54: 67:e9:ba:8f:38:c6:24:0b:78:30:e6:b1:a3:35:d5: 36:eb:9e:ee:e9:38:09:83:80:c9:0f:bf:84:5a:a7: ab:a6:75:8b:4b:26:f8:a7:4e:b9:8c:91:16:ec:99: 06:af:9d:ca:e3:22:56:65:97:21:4b:f5:99:b0:cc: 07:7d:30:63:e5:01:f7:f9:28:d8:ed:a8:fc:c2:f5: f1:4d:eb:41:5d:36:0f:b8:f5:b7:7e:33:e3:44:cc: 23:e0:a0:21:4c:41:71:b9:4b:6d:6f:93:9e:f2:42: eb:01:ff:4b:7d:58:5c:29:f3:02:e2:ee:26:ac:a5: bd:e1:fc:9d:a4:d6:47:83:1a:2d:3a:08:3e:5c:72: 55:29:6a:f3:8f:cc:81:40:ed:8a:78:8c:f7:5d:ba: 1e:5e:4b:e8:91:8c:d2:c6:d2:53:f0:a7:ad:90:2d: ed:fc:44:b7:1a:2b:ef:33:32:cc:0f:d2:4b:ee:2a: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FD:16:DC:8D:EF:A7:74:12:DB:F0:43:68:B6:D4:D4:06:DC:DF:B9 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6b:d0:8e:5d:5e:63:1f:a3:95:80:77:42:96:c7:eb:a7:69: 27:1a:e6:c5:69:83:08:ac:93:d0:98:a6:42:f9:5b:31:b5:ac: 7c:64:e9:ca:88:a6:45:9a:f3:38:89:76:3e:e0:95:b3:f9:83: 5e:f3:ee:77:88:6f:90:98:41:fe:ba:3b:82:a8:aa:91:2e:47: fd:b9:90:14:08:55:bc:62:1f:a4:37:b3:6f:74:4b:78:6c:a1: 36:58:d4:b1:42:e1:82:a6:ea:ee:2e:4a:5c:fe:d1:01:07:3f: 57:84:46:83:f7:05:f2:6c:22:fb:60:37:02:a2:15:21:47:e4: 06:1a:b7:f5:36:78:cd:64:be:cb:5a:9e:46:5a:dd:0f:6c:5b: 00:c8:d3:29:dc:07:06:f0:ca:43:10:9e:31:02:21:60:07:59: 3a:8d:27:11:fb:f2:60:30:3f:72:e8:67:ad:79:76:e2:fe:f8: 34:59:db:83:8c:9f:49:4f:5a:45:4e:a4:95:24:82:03:c3:e2: 54:07:e6:51:55:01:3e:61:db:69:f7:5f:53:3d:d7:90:37:23: 46:02:5f:ea:3f:bc:88:07:80:5b:09:d6:d6:fe:19:14:d0:18: 25:d1:9e:2e:d2:3a:d0:a2:00:87:80:b3:56:01:16:b1:84:34: 80:dc:d1:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjYwNTIxMDEyODQ0WhcNMjYwNTI4MDEyODQ0WjAYMRYwFAYD VQQDEw02YTBlNWZjYy1iNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynHCjA5qnYyA0UQfEcD3pcUQjU3wKHiYVZ3gzd+F3HwKtXrDNv/5BY0tcx/b QL6acz4sgg+jk2oreVWjRkamEWaGxX7PVIC+q1Rn6bqPOMYkC3gw5rGjNdU2657u 6TgJg4DJD7+EWqerpnWLSyb4p065jJEW7JkGr53K4yJWZZchS/WZsMwHfTBj5QH3 +SjY7aj8wvXxTetBXTYPuPW3fjPjRMwj4KAhTEFxuUttb5Oe8kLrAf9LfVhcKfMC 4u4mrKW94fydpNZHgxotOgg+XHJVKWrzj8yBQO2KeIz3XboeXkvokYzSxtJT8Ket kC3t/ES3GivvMzLMD9JL7ioPwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOT9FtyN 76d0EtvwQ2i21NQG3N+5MB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHmvQjl1eYx+jlYB3QpbH66dpJxrmxWmDCKyT0JimQvlbMbWsfGTpyoimRZrz OIl2PuCVs/mDXvPud4hvkJhB/ro7gqiqkS5H/bmQFAhVvGIfpDezb3RLeGyhNljU sULhgqbq7i5KXP7RAQc/V4RGg/cF8mwi+2A3AqIVIUfkBhq39TZ4zWS+y1qeRlrd D2xbAMjTKdwHBvDKQxCeMQIhYAdZOo0nEfvyYDA/cuhnrXl24v74NFnbg4yfSU9a RU6klSSCA8PiVAfmUVUBPmHbafdfUz3XkDcjRgJf6j+8iAeAWwnW1v4ZFNAYJdGe LtI60KIAh4CzVgEWsYQ0gNzR8A== -----END CERTIFICATE-----Generated at Thu May 21 13:23:19 2026 by rpki-client