$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json) Hash identifier: lHWjqD1aOSywd2JVgDMkbWulp0oc0sREzMPGHveJwFs= Subject key identifier: 44:24:E0:42:98:FD:FC:90:69:36:83:E3:54:49:34:F2:89:5E:06:01 Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Certificate serial: 0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft Manifest number: 0313 Signing time: Thu 21 May 2026 01:17:30 +0000 Manifest this update: Thu 21 May 2026 01:17:30 +0000 Manifest next update: Thu 28 May 2026 01:17:30 +0000 Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: fOBNXv+zfxWZ5+KbTaAw1ClQI/MINHb73WQl0qk8D1U=) 2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Validity Not Before: May 21 01:17:30 2026 GMT Not After : May 28 01:17:30 2026 GMT Subject: CN=6a0e5d2a-3c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d4:1d:b0:af:6f:f4:89:e0:6d:fd:63:8f:46: b1:64:a1:0c:d3:e6:97:f0:5e:d2:ba:1b:76:15:b5: 1d:1c:28:09:79:18:fa:3c:5e:4a:e2:ae:bc:75:fe: d3:ee:82:05:05:8e:0a:bd:59:25:3e:86:b4:76:d7: 71:2a:c5:c9:e0:72:2f:8b:71:fa:f8:77:a9:1d:aa: 24:29:8d:8d:ad:54:61:be:37:a4:78:b5:c4:62:23: 01:36:59:33:94:88:cb:6d:a6:10:19:4d:c8:6e:cb: 08:1b:ff:0c:4f:02:c1:6c:9a:53:1d:b6:28:70:7e: 6b:42:24:ad:38:2f:8d:50:49:db:d3:17:df:80:05: a4:d4:25:1e:e3:bc:76:80:81:c2:0e:6a:ab:9d:83: a5:f3:91:1b:2f:d9:d6:d6:3d:14:9e:95:3f:ca:6d: dc:3f:3b:60:c3:33:2c:03:ae:fc:d5:ad:c1:80:30: cc:7d:68:e8:30:f2:06:84:90:f2:1e:1f:46:ae:e5: 1d:99:37:c4:40:82:3d:1f:0f:aa:3c:8d:17:19:22: f2:28:28:86:9f:90:65:33:cd:69:42:e9:c6:96:23: 9d:dc:b2:cb:60:d8:86:4c:c3:36:3d:be:a2:fc:53: fe:e3:88:d9:fa:22:88:46:fc:86:43:1f:70:b2:f0: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:24:E0:42:98:FD:FC:90:69:36:83:E3:54:49:34:F2:89:5E:06:01 X509v3 Authority Key Identifier: keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c2:b8:b4:57:07:6f:e6:44:62:ea:60:84:fa:9b:a7:3e:f2: 4b:35:1f:96:34:45:60:d6:25:f1:ee:c3:90:0a:37:08:61:cc: 07:31:09:df:91:78:74:bc:57:f8:73:f9:2f:bb:c8:a4:63:89: 9e:e4:5e:a2:70:74:e7:f2:13:16:fe:86:fd:fc:74:5c:f7:7c: e8:fa:54:f2:d3:9e:ba:50:86:49:71:7c:62:dc:ff:43:f0:b5: 39:a8:af:a9:20:0f:21:6a:0e:8d:26:25:a1:2b:e5:3d:53:92: ee:4f:9f:7c:4f:1c:f7:40:d7:fa:0f:f8:7d:79:8b:cc:17:77: 64:ce:3c:b0:68:1e:3b:1a:33:2a:92:b4:60:15:3a:bd:38:28: 30:44:07:c4:9c:f7:9f:88:2f:89:68:bb:ec:5d:ef:5f:86:25: 2d:a7:76:b9:4e:45:ae:74:31:84:29:11:66:bf:63:a4:0c:b5: ea:70:56:89:0e:2b:c5:1e:93:40:53:ac:42:f1:08:bd:86:25: 4d:c5:21:bb:ca:0e:ce:01:e1:88:9d:02:8a:d6:1e:a4:1a:0c: 40:fe:b3:a2:72:b7:28:27:a5:70:01:71:73:d1:a3:ae:36:61: 37:04:61:08:fc:00:21:c1:72:ce:24:1e:75:f2:3d:c7:8e:90: d1:dc:79:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0NTAxMTAvBgNVBAUTKEZBOERGNjExODQ1MUJENTMzODcyQUNBMzc2MjJCRjcz QkVEMTk0NDEwHhcNMjYwNTIxMDExNzMwWhcNMjYwNTI4MDExNzMwWjAYMRYwFAYD VQQDEw02YTBlNWQyYS0zYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tQdsK9v9Ingbf1jj0axZKEM0+aX8F7Suht2FbUdHCgJeRj6PF5K4q68df7T 7oIFBY4KvVklPoa0dtdxKsXJ4HIvi3H6+HepHaokKY2NrVRhvjekeLXEYiMBNlkz lIjLbaYQGU3IbssIG/8MTwLBbJpTHbYocH5rQiStOC+NUEnb0xffgAWk1CUe47x2 gIHCDmqrnYOl85EbL9nW1j0UnpU/ym3cPztgwzMsA6781a3BgDDMfWjoMPIGhJDy Hh9GruUdmTfEQII9Hw+qPI0XGSLyKCiGn5BlM81pQunGliOd3LLLYNiGTMM2Pb6i /FP+44jZ+iKIRvyGQx9wsvBB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQk4EKY /fyQaTaD41RJNPKJXgYBMB8GA1UdIwQYMBaAFPqN9hGEUb1TOHKso3Yiv3O+0ZRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTQ1MC84NDNEQzY5NjE4 QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZWTTRjcXlqZGlLX2M3N1Js RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1vMzJFWVJSdlZNNGNxeWpkaUtfYzc3UmxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTQ1MC84NDNEQzY5NjE4QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZW TTRjcXlqZGlLX2M3N1JsRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb8K4tFcHb+ZEYupghPqbpz7ySzUfljRFYNYl8e7DkAo3CGHMBzEJ35F4dLxX +HP5L7vIpGOJnuReonB05/ITFv6G/fx0XPd86PpU8tOeulCGSXF8Ytz/Q/C1Oaiv qSAPIWoOjSYloSvlPVOS7k+ffE8c90DX+g/4fXmLzBd3ZM48sGgeOxozKpK0YBU6 vTgoMEQHxJz3n4gviWi77F3vX4YlLad2uU5FrnQxhCkRZr9jpAy16nBWiQ4rxR6T QFOsQvEIvYYlTcUhu8oOzgHhiJ0CitYepBoMQP6zonK3KCelcAFxc9GjrjZhNwRh CPwAIcFyziQedfI9x46Q0dx5qA== -----END CERTIFICATE-----Generated at Thu May 21 10:19:43 2026 by rpki-client