$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: zwz304Cv3ivkN253ase5DvrA2ba8yD4GcpbdQKhToAU= Subject key identifier: 1B:0E:78:03:58:E7:88:79:D4:3F:CC:41:64:7C:2B:D3:69:8C:7F:46 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0223 Signing time: Thu 21 May 2026 02:47:58 +0000 Manifest this update: Thu 21 May 2026 02:47:57 +0000 Manifest next update: Thu 28 May 2026 02:47:57 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: jTy1IVEVbo6MlsUTgm/vEC8pPiHog5MfpZibU7T98qs=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: May 21 02:47:57 2026 GMT Not After : May 28 02:47:57 2026 GMT Subject: CN=6a0e725e-3ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:81:38:88:d9:0e:00:66:ba:9d:8e:04:67: 8b:8b:99:81:7e:e5:c3:7f:9e:2c:69:6e:9f:ad:0d: e2:e8:f4:66:15:a3:c7:4d:f9:20:29:ec:ae:e0:6d: 67:81:8d:73:9d:17:5d:82:47:4d:af:6c:24:05:64: 6d:40:49:14:bf:fc:3c:d6:09:c0:73:2f:05:d7:c2: a4:4c:82:95:7a:7b:48:54:a9:7d:d7:1e:26:50:d9: 29:07:9c:24:5a:6d:56:b5:db:37:23:b9:78:7d:ea: 52:23:3e:99:0e:04:fd:90:9c:9e:f9:ca:74:db:17: 5f:07:2a:10:10:86:58:29:0f:5a:d2:7b:21:98:f1: 45:0c:3f:5c:f6:0f:61:c7:24:a6:be:a0:70:1a:65: d6:43:29:45:49:94:ad:94:ad:62:1e:f1:ad:ca:8f: 35:59:7e:70:2a:82:21:69:5d:1e:13:b5:cd:9d:66: 86:10:af:85:56:3a:cc:20:db:2b:63:17:49:f9:bb: f0:e7:50:28:d9:a3:86:90:f4:73:72:c6:5c:ff:c8: 9a:7f:83:52:69:7f:c2:1b:c2:ce:61:06:0d:e8:09: 1d:9f:19:62:08:0b:18:02:34:c0:74:7b:c4:17:5e: a8:2c:a2:a7:c3:df:d5:a2:42:c5:2a:c8:83:d7:a5: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0E:78:03:58:E7:88:79:D4:3F:CC:41:64:7C:2B:D3:69:8C:7F:46 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:7f:7d:c9:ed:1d:3c:f7:bb:d1:d8:d0:5a:f5:a7:87:d9:85: 3e:0a:45:f9:8a:da:5d:ec:10:88:61:67:1d:c5:4f:92:56:06: 31:c8:df:0c:cf:c9:ca:ce:b0:25:75:90:76:71:28:ef:c6:c0: 18:55:b0:bf:49:aa:a6:ba:84:00:e4:0e:88:24:59:be:08:fc: c9:f2:a2:05:7d:98:32:0d:5c:07:f3:e3:f0:49:4c:f9:81:44: ea:e0:02:64:de:57:b5:bf:d1:7e:87:96:d5:ae:dc:3b:97:6d: 5c:b6:ee:54:5f:e9:59:f8:a3:f0:3e:34:26:60:9e:ae:34:99: 04:dd:10:cd:8d:b5:7c:2c:1c:fd:11:d7:66:dc:9f:e9:3a:b9: fd:70:f1:9a:17:56:aa:01:fb:07:8f:0f:9c:62:69:a1:34:6e: 52:c4:cb:c8:5b:c9:c8:ee:f1:15:3b:74:48:57:36:52:56:ce: ab:0a:4a:e1:9f:01:5d:33:9a:b9:74:83:7f:eb:97:62:ef:7f: 98:75:1f:cf:81:78:cd:76:a1:83:67:73:fb:9c:49:8d:dc:b7: 75:d9:23:56:c5:d6:d3:90:b8:39:62:40:94:46:d7:3a:cc:ec: 25:d9:6b:dc:23:fe:85:94:f9:6c:40:9c:31:03:d7:43:3d:ea: 0b:f3:1a:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjYwNTIxMDI0NzU3WhcNMjYwNTI4MDI0NzU3WjAYMRYwFAYD VQQDEw02YTBlNzI1ZS0zZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWuBOIjZDgBmup2OBGeLi5mBfuXDf54saW6frQ3i6PRmFaPHTfkgKeyu4G1n gY1znRddgkdNr2wkBWRtQEkUv/w81gnAcy8F18KkTIKVentIVKl91x4mUNkpB5wk Wm1Wtds3I7l4fepSIz6ZDgT9kJye+cp02xdfByoQEIZYKQ9a0nshmPFFDD9c9g9h xySmvqBwGmXWQylFSZStlK1iHvGtyo81WX5wKoIhaV0eE7XNnWaGEK+FVjrMINsr YxdJ+bvw51Ao2aOGkPRzcsZc/8iaf4NSaX/CG8LOYQYN6AkdnxliCAsYAjTAdHvE F16oLKKnw9/VokLFKsiD16WL/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsOeANY 54h51D/MQWR8K9NpjH9GMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgn99ye0dPPe70djQWvWnh9mFPgpF+YraXewQiGFnHcVPklYGMcjfDM/Jys6w JXWQdnEo78bAGFWwv0mqprqEAOQOiCRZvgj8yfKiBX2YMg1cB/Pj8ElM+YFE6uAC ZN5Xtb/RfoeW1a7cO5dtXLbuVF/pWfij8D40JmCerjSZBN0QzY21fCwc/RHXZtyf 6Tq5/XDxmhdWqgH7B48PnGJpoTRuUsTLyFvJyO7xFTt0SFc2UlbOqwpK4Z8BXTOa uXSDf+uXYu9/mHUfz4F4zXahg2dz+5xJjdy3ddkjVsXW05C4OWJAlEbXOszsJdlr 3CP+hZT5bECcMQPXQz3qC/MaRw== -----END CERTIFICATE-----Generated at Thu May 21 09:38:59 2026 by rpki-client