$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json) Hash identifier: eF8U907ZQIhrcqNvAZ3K5iUM/1mVkGxs7cakS0oDLNQ= Subject key identifier: A8:36:90:35:90:35:4D:11:2F:26:5D:26:5D:97:BC:EF:C7:90:8E:98 Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Certificate serial: 0835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft Manifest number: 0828 Signing time: Wed 20 May 2026 21:05:41 +0000 Manifest this update: Wed 20 May 2026 21:05:40 +0000 Manifest next update: Wed 27 May 2026 21:05:40 +0000 Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: G+pJv4w1LrDVfxsqOmE/2nNOYP4j5R1s7AHj+HZxI8s=) 2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: yOuFWEMRjDuMVm01IbqIe3i9wqxDvbb8W9g8zqSmMx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Validity Not Before: May 20 21:05:40 2026 GMT Not After : May 27 21:05:40 2026 GMT Subject: CN=6a0e2225-67e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:ef:3f:c0:13:77:98:30:30:f7:ba:4b:a5: d2:c9:38:d6:9e:49:9b:f2:61:08:ab:9c:3a:80:b9: fb:f9:d6:c8:72:f3:07:82:2a:71:a4:d5:94:e2:e7: 46:1e:61:d7:c4:43:e1:c5:05:60:6f:12:03:65:35: 9e:9e:4b:a4:39:a5:7c:62:16:95:f6:bb:1b:08:6e: 4e:e3:21:96:10:32:02:cb:78:9c:0e:ff:80:fd:76: eb:ad:19:cd:d2:f1:fd:5b:93:f0:9e:ea:07:ba:b2: 25:16:ec:93:85:3d:0c:a5:63:9f:41:14:7e:34:be: cc:b5:fe:bc:88:b3:c5:16:09:95:4d:fb:20:cd:e6: c3:df:42:d5:d7:20:01:7c:63:77:93:3a:0c:7d:5d: b1:af:06:e5:df:0b:4e:1f:d2:37:e4:36:25:56:44: c5:f0:39:8b:1d:85:a5:25:fd:83:9d:61:c7:fd:7a: 85:2f:36:0a:e2:58:83:36:10:08:f7:2c:bd:11:50: 38:e1:b3:2f:01:a1:16:72:46:d2:3b:bf:12:11:45: 88:f7:cf:8d:d2:61:4c:3f:d3:66:ad:04:3e:cd:a4: c5:4e:9d:3c:20:e9:fe:a6:e7:48:24:73:14:83:50: 25:15:03:00:73:6b:cd:67:61:1c:f4:06:82:63:1b: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:90:35:90:35:4D:11:2F:26:5D:26:5D:97:BC:EF:C7:90:8E:98 X509v3 Authority Key Identifier: keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:99:f2:09:9c:0b:ef:79:3a:6b:e6:fd:24:e2:b6:eb:5b:e0: aa:3a:9a:ad:30:58:ef:17:fb:06:42:bd:f2:bb:7a:a6:c2:f4: f2:1c:d1:93:84:fd:b2:e7:6d:d7:c8:37:42:17:8f:77:4f:6a: e0:1d:b8:b5:f6:39:30:a4:4a:81:9e:47:02:a8:79:41:41:d6: 7b:a6:f7:97:01:c5:f6:78:d3:fb:ec:68:f2:3c:26:ed:0b:ea: eb:b1:19:78:fd:8e:2f:c8:2e:6d:c3:7c:bf:70:3e:d2:97:95: 00:14:0b:cb:2b:69:3b:af:06:ba:94:7a:0e:2b:e6:9d:52:85: b9:47:b4:04:0d:e9:1c:d9:a1:41:e8:31:63:df:c5:98:c2:57: 95:5a:81:1b:47:b9:88:96:34:7c:97:2e:18:96:23:f5:9f:97: a6:00:74:dc:35:d2:c3:9b:34:f0:13:44:f7:65:76:ce:3a:d2: 12:f8:10:a2:30:53:3e:b4:c4:56:f7:2d:11:4d:49:6a:cd:33: 40:32:cf:03:85:e3:7c:7f:98:bf:24:5f:29:21:eb:8b:43:6c: 31:ea:ac:54:3e:63:a0:ff:93:9a:5b:72:88:7c:2c:ce:27:a2: 05:af:30:70:b3:0b:14:3d:3e:7c:48:a1:e5:76:1d:cf:98:b4: 85:7d:38:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD QTNGNzlBNkIwHhcNMjYwNTIwMjEwNTQwWhcNMjYwNTI3MjEwNTQwWjAYMRYwFAYD VQQDEw02YTBlMjIyNS02N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJvvP8ATd5gwMPe6S6XSyTjWnkmb8mEIq5w6gLn7+dbIcvMHgipxpNWU4udG HmHXxEPhxQVgbxIDZTWenkukOaV8YhaV9rsbCG5O4yGWEDICy3icDv+A/XbrrRnN 0vH9W5PwnuoHurIlFuyThT0MpWOfQRR+NL7Mtf68iLPFFgmVTfsgzebD30LV1yAB fGN3kzoMfV2xrwbl3wtOH9I35DYlVkTF8DmLHYWlJf2DnWHH/XqFLzYK4liDNhAI 9yy9EVA44bMvAaEWckbSO78SEUWI98+N0mFMP9NmrQQ+zaTFTp08IOn+pudIJHMU g1AlFQMAc2vNZ2Ec9AaCYxtkjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg2kDWQ NU0RLyZdJl2XvO/HkI6YMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5 MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4 VzBXTlp1T2NZTW5LUDNtbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkJnyCZwL73k6a+b9JOK261vgqjqarTBY7xf7BkK98rt6psL08hzRk4T9sudt 18g3QhePd09q4B24tfY5MKRKgZ5HAqh5QUHWe6b3lwHF9njT++xo8jwm7Qvq67EZ eP2OL8gubcN8v3A+0peVABQLyytpO68GupR6DivmnVKFuUe0BA3pHNmhQegxY9/F mMJXlVqBG0e5iJY0fJcuGJYj9Z+XpgB03DXSw5s08BNE92V2zjrSEvgQojBTPrTE VvctEU1Jas0zQDLPA4XjfH+YvyRfKSHri0NsMeqsVD5joP+TmltyiHwszieiBa8w cLMLFD0+fEih5XYdz5i0hX04Qw== -----END CERTIFICATE-----Generated at Thu May 21 10:19:32 2026 by rpki-client