$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: CFr1oquJK0Q95lNrgbjcJXNMUOj8eGE8Gxz/ewzkHW0= Subject key identifier: 78:51:F5:C2:A9:B9:03:DE:7E:F0:F8:78:BA:79:0C:A8:CE:64:9C:EB Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 014A Signing time: Tue 05 May 2026 05:11:04 +0000 Manifest this update: Tue 05 May 2026 05:11:03 +0000 Manifest next update: Tue 12 May 2026 05:11:03 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: tfQvVZGayrzot0f6BWCmADaIsDRJgkRbK+ADnpoADKo=) 2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: kiewIghlA3eSE6JqoPitcKxULZmtrJbpqxq8AfoM0zA=) 3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: IiOfuavzgr4udhdI2026QD5t6vsu21nW0i15GhoklvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 May 2026 05:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: May 5 05:11:03 2026 GMT Not After : May 12 05:11:03 2026 GMT Subject: CN=69f97be8-8014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:45:09:dc:8a:0d:46:8c:31:4b:8d:49:2a: ce:fe:c1:d2:50:0f:04:60:5f:01:a9:67:68:b3:dc: e0:32:02:4a:08:3e:9b:6f:4a:12:95:f3:c5:07:49: 47:51:a4:dd:0b:ca:db:70:7c:b0:d4:0d:46:bd:6a: eb:ec:78:d2:71:69:b2:0a:e5:da:89:64:3e:2e:ee: 24:d1:e9:92:c3:88:a1:7b:0c:c1:84:78:ab:cf:01: fc:4d:9d:29:79:ba:21:ba:b5:20:bf:5b:10:0f:aa: 18:91:b4:49:d7:c4:d9:a4:3a:ed:4f:67:fe:92:43: 9d:c0:2d:a2:73:01:3b:04:0e:02:76:f7:88:24:b3: a2:cf:a9:fd:fd:b9:63:26:71:39:4d:16:d9:3d:cf: 5b:0f:49:e0:a4:7d:22:46:99:09:b6:59:ac:c5:40: 4a:3c:73:73:09:41:df:12:a3:3d:cb:cb:34:92:f7: f6:b5:12:79:b3:a5:89:4e:f2:b6:9e:c0:7d:41:66: a9:49:54:92:29:e9:1c:82:44:15:fd:a4:57:73:13: ae:30:71:2d:5b:4e:3f:e0:c4:d0:3a:00:63:72:98: bc:fe:00:7e:3f:f3:1c:35:17:d9:29:18:9f:a3:e6: 6f:f2:cc:9e:c3:7d:f6:a6:ce:60:8f:f5:47:08:db: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:51:F5:C2:A9:B9:03:DE:7E:F0:F8:78:BA:79:0C:A8:CE:64:9C:EB X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:7b:0c:13:da:34:6f:8b:b8:23:fe:8a:7a:0f:57:c9:d3: 9a:24:d3:4c:4b:28:7a:62:bb:88:d4:72:08:2c:41:46:05:72: 6b:93:6b:61:53:62:8d:ac:47:98:05:7e:e7:fe:f8:d2:c6:6f: fe:76:ec:43:6f:57:56:b4:a1:2f:95:70:e0:8c:b3:74:52:7d: 44:ff:19:de:02:3a:a6:4f:39:62:fb:63:16:d2:43:b5:ff:5a: 09:c4:76:c8:d9:f7:26:df:b7:7d:1b:51:2c:4c:c6:b6:bd:72: 2d:46:91:ee:6b:ee:95:d0:4b:8f:30:79:21:f0:a9:61:bd:19: f1:fc:2c:2c:c4:75:29:f2:3e:82:40:00:ca:2f:92:da:32:3d: 8b:52:8a:48:9e:70:ce:b7:50:cd:b6:90:6c:a1:5d:53:14:76: 40:9a:5a:40:5c:a6:14:20:ee:41:63:61:4f:64:85:c4:f1:c6: c6:bc:65:2f:24:8a:88:46:2d:f3:7b:6a:cf:11:84:f4:29:d7: 37:6e:90:64:4d:b2:e4:46:07:74:ce:21:87:f6:41:54:41:83: 6b:8f:b8:7f:21:a6:db:8c:06:82:cd:ab:45:61:8b:dc:dc:e4: 6d:62:62:7c:fa:03:1a:dc:71:46:4d:3e:06:40:d8:4e:4c:9b: 72:77:c2:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjYwNTA1MDUxMTAzWhcNMjYwNTEyMDUxMTAzWjAYMRYwFAYD VQQDEw02OWY5N2JlOC04MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkfRFCdyKDUaMMUuNSSrO/sHSUA8EYF8BqWdos9zgMgJKCD6bb0oSlfPFB0lH UaTdC8rbcHyw1A1GvWrr7HjScWmyCuXaiWQ+Lu4k0emSw4ihewzBhHirzwH8TZ0p ebohurUgv1sQD6oYkbRJ18TZpDrtT2f+kkOdwC2icwE7BA4CdveIJLOiz6n9/blj JnE5TRbZPc9bD0ngpH0iRpkJtlmsxUBKPHNzCUHfEqM9y8s0kvf2tRJ5s6WJTvK2 nsB9QWapSVSSKekcgkQV/aRXcxOuMHEtW04/4MTQOgBjcpi8/gB+P/McNRfZKRif o+Zv8syew332ps5gj/VHCNvdCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhR9cKp uQPefvD4eLp5DKjOZJzrMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAizh7DBPaNG+LuCP+inoPV8nTmiTTTEsoemK7iNRyCCxBRgVya5NrYVNijaxH mAV+5/740sZv/nbsQ29XVrShL5Vw4IyzdFJ9RP8Z3gI6pk85YvtjFtJDtf9aCcR2 yNn3Jt+3fRtRLEzGtr1yLUaR7mvuldBLjzB5IfCpYb0Z8fwsLMR1KfI+gkAAyi+S 2jI9i1KKSJ5wzrdQzbaQbKFdUxR2QJpaQFymFCDuQWNhT2SFxPHGxrxlLySKiEYt 83tqzxGE9CnXN26QZE2y5EYHdM4hh/ZBVEGDa4+4fyGm24wGgs2rRWGL3NzkbWJi fPoDGtxxRk0+BkDYTkybcnfCcg== -----END CERTIFICATE-----Generated at Thu May 7 06:32:05 2026 by rpki-client