$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: ol1oeX13utzx23fRPIHgEUXmnPvaOh9IdzsYKoVvaeQ= Subject key identifier: F4:C6:BB:D9:DD:F4:F0:AF:72:18:9D:5B:A1:B4:F3:41:48:5D:BE:79 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 09F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 09D3 Signing time: Wed 20 May 2026 19:58:22 +0000 Manifest this update: Wed 20 May 2026 19:58:21 +0000 Manifest next update: Wed 27 May 2026 19:58:21 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: iqp2xSj5x17nh90BlwsSUZzglDJM6d+3U1tGIDl3+mk=) 2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=) 3: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: May 20 19:58:21 2026 GMT Not After : May 27 19:58:21 2026 GMT Subject: CN=6a0e125e-98a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:fc:75:5e:dc:e3:ba:e4:4f:ca:b6:f0:8a: 4c:74:52:52:64:8e:40:de:06:61:e9:36:fc:2f:c1: 08:04:3b:5e:20:0a:3a:92:8d:fe:6b:72:9a:74:98: 38:d6:c2:87:d3:59:37:cb:13:de:71:c5:9f:08:2c: fd:ef:64:a3:4c:cc:20:57:25:32:1a:da:25:8b:90: 59:9b:ab:01:e5:0e:4a:ff:bc:02:3e:b4:a3:78:b6: 6a:51:4d:b0:bc:34:1d:5e:e1:af:cc:cb:ad:22:da: e3:aa:5a:14:70:98:39:f2:cb:a4:d8:cd:71:eb:c1: ca:dc:a6:12:b2:20:16:8c:cb:da:43:a5:b7:2a:47: c8:ee:96:0a:8e:79:ed:c8:e4:9a:f3:0f:f7:e2:6b: d2:83:2c:41:80:12:5f:72:ea:25:a8:35:c9:8c:80: 62:7c:10:0f:a9:e7:08:08:0e:af:5b:00:62:9d:a4: ab:78:b4:dd:5f:ac:d2:76:62:bf:a9:25:ed:3e:d6: 8f:97:ed:31:d4:9d:f8:49:92:4f:89:e1:ef:a9:79: 8e:95:82:ec:2a:5f:db:63:32:07:17:db:7e:65:7c: 5c:4f:b9:5c:24:bc:de:b7:e6:82:ee:54:4a:6e:fc: 2e:97:e9:b3:a3:07:61:25:5e:82:de:32:75:dd:3b: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C6:BB:D9:DD:F4:F0:AF:72:18:9D:5B:A1:B4:F3:41:48:5D:BE:79 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:77:5c:ff:39:d8:44:c5:33:ce:92:bd:55:56:85:23:97:07: 2a:04:78:2f:1d:90:6c:d3:e9:5e:0c:2a:66:32:9f:a5:3b:a7: 8d:11:84:e7:c5:b3:37:17:a8:75:b2:93:f7:c8:bd:d6:dd:3a: 06:c4:79:84:47:f7:d9:b2:f6:42:b5:14:8c:cb:f7:e5:0d:05: 14:41:46:57:ee:b2:83:75:40:8c:89:61:16:c6:69:6f:f4:bb: 05:31:72:ff:0c:12:f2:ba:d4:68:ef:b9:8a:8a:9b:ad:f2:75: f5:62:7d:f1:10:e1:27:7f:b4:b1:55:bc:c5:45:7c:3e:24:b9: cd:8a:49:98:0c:8b:da:16:e3:e1:d0:1f:73:c3:ad:50:ba:f3: ac:29:61:0e:c5:e0:0d:f8:da:48:8a:ba:59:18:55:b6:d7:27: 43:02:9d:8e:8a:10:5b:47:89:5b:8c:f4:68:3f:bc:2f:28:17: 5e:49:cc:46:9a:d5:1a:1d:d6:69:bc:6f:1d:f8:e8:6f:fb:90: 3e:78:43:27:3b:45:ad:3c:d2:7f:ac:cb:cf:15:4c:52:4c:8f: 54:fc:ef:f4:a9:f2:67:34:cd:c2:23:3f:b2:6a:96:80:2e:f0: 99:3f:42:2c:d2:0a:30:20:15:dc:5b:d1:3c:0e:64:29:a7:28: af:42:ea:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjYwNTIwMTk1ODIxWhcNMjYwNTI3MTk1ODIxWjAYMRYwFAYD VQQDEw02YTBlMTI1ZS05OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ/8dV7c47rkT8q28IpMdFJSZI5A3gZh6Tb8L8EIBDteIAo6ko3+a3KadJg4 1sKH01k3yxPeccWfCCz972SjTMwgVyUyGtoli5BZm6sB5Q5K/7wCPrSjeLZqUU2w vDQdXuGvzMutItrjqloUcJg58suk2M1x68HK3KYSsiAWjMvaQ6W3KkfI7pYKjnnt yOSa8w/34mvSgyxBgBJfcuolqDXJjIBifBAPqecICA6vWwBinaSreLTdX6zSdmK/ qSXtPtaPl+0x1J34SZJPieHvqXmOlYLsKl/bYzIHF9t+ZXxcT7lcJLzet+aC7lRK bvwul+mzowdhJV6C3jJ13TuP6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTGu9nd 9PCvchidW6G080FIXb55MB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYXdc/znYRMUzzpK9VVaFI5cHKgR4Lx2QbNPpXgwqZjKfpTunjRGE58WzNxeo dbKT98i91t06BsR5hEf32bL2QrUUjMv35Q0FFEFGV+6yg3VAjIlhFsZpb/S7BTFy /wwS8rrUaO+5ioqbrfJ19WJ98RDhJ3+0sVW8xUV8PiS5zYpJmAyL2hbj4dAfc8Ot ULrzrClhDsXgDfjaSIq6WRhVttcnQwKdjooQW0eJW4z0aD+8LygXXknMRprVGh3W abxvHfjob/uQPnhDJztFrTzSf6zLzxVMUkyPVPzv9KnyZzTNwiM/smqWgC7wmT9C LNIKMCAV3FvRPA5kKacor0LqVA== -----END CERTIFICATE-----Generated at Thu May 21 09:29:12 2026 by rpki-client