$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: 8F9VmJx4ltpodMJwq5+4yJhF64Qg4/NFCgWxNKBxOxU= Subject key identifier: 80:53:E3:B3:5C:8E:C4:79:10:39:5B:00:04:F3:52:EF:1D:03:49:97 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 027C Signing time: Thu 21 May 2026 02:05:08 +0000 Manifest this update: Thu 21 May 2026 02:05:07 +0000 Manifest next update: Thu 28 May 2026 02:05:07 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: F+3N6pc9x4BQxhMC3ZKWLLqf/kzMwymXDCtrUhSaJFo=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: 8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: Mgaf9CSqoVizRMwA95HzOIftcIqXK+Ix2kwlxzxOnak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 21 02:05:07 2026 GMT Not After : May 28 02:05:07 2026 GMT Subject: CN=6a0e6853-8bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:d2:b6:20:6a:4e:a5:a4:9e:78:6d:40:f8: 32:25:b2:d1:cd:38:b5:44:fb:ed:38:ea:f4:31:7b: 4e:2b:01:80:52:3c:84:7a:75:e6:74:fb:a2:21:8e: f2:5f:c1:1d:13:21:c5:c4:62:49:cd:89:64:e4:95: ab:57:88:b3:93:e1:6f:32:37:4b:dc:9c:9d:92:0f: fa:e0:6f:50:df:1b:1a:22:82:02:2b:ce:ea:b3:c4: 7b:f8:75:70:12:82:2b:91:53:f6:6d:f6:fb:83:e5: 0c:06:9f:a2:b2:4d:6f:59:71:ca:a9:8c:72:d2:00: 1c:e9:e8:ac:cd:80:66:ad:a0:4a:c9:58:88:cf:10: 64:f4:ab:0d:66:ae:13:4b:36:14:22:54:1e:fe:57: 81:b4:35:c6:96:eb:06:16:00:63:4a:06:d8:a5:d2: 26:9d:21:5c:b8:fe:5a:32:01:18:84:1f:be:a5:d7: 15:0d:55:c6:27:87:a9:df:45:29:09:39:38:4e:3b: 43:1c:55:ed:21:31:3f:3c:fb:29:c4:7a:34:53:09: 2f:e2:c0:5b:9e:bb:c0:b8:24:87:37:d5:c5:3f:b0: 18:5a:39:cd:d3:18:30:98:42:04:de:cb:14:f7:da: 76:1e:1a:26:71:9c:fa:2e:c2:da:36:0a:2a:2b:c8: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:E3:B3:5C:8E:C4:79:10:39:5B:00:04:F3:52:EF:1D:03:49:97 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ee:43:8a:35:8e:d2:c9:5b:c8:7e:6b:55:4b:0c:c8:f5:7d: fc:dc:b2:84:f7:ce:4d:82:73:eb:69:a2:6d:b5:c4:3e:5f:c5: e3:9f:e2:3d:ec:dc:d0:8d:4f:12:59:dd:78:61:0d:4f:7e:5d: 56:fd:07:a8:31:e0:1d:57:e7:0c:54:05:dd:0d:dc:2b:26:4c: 6a:64:6b:a0:25:a0:f2:6f:6b:f9:2e:d8:8e:df:5d:13:4b:85: 3e:96:d9:9a:38:d3:47:c5:5d:38:8d:3e:a8:a2:f7:0b:af:f5: 3d:42:dd:af:1f:08:d5:20:45:62:c8:b2:ba:de:f1:44:59:ad: d4:98:b9:24:3c:62:54:af:a2:c6:8e:48:7d:de:ad:4b:bf:6f: 7a:f6:6c:8a:e6:a7:d9:82:d9:13:36:3a:0f:d9:bb:cb:17:67: 05:a6:94:62:91:cb:fc:fc:a3:40:ce:fe:45:55:9f:e8:6d:2d: 38:98:f8:45:82:3c:f9:85:60:69:92:94:3a:02:89:44:79:1b: e3:d0:f4:cc:a5:9d:d2:c5:00:37:a4:df:83:f8:58:1a:66:d6: 99:1b:31:3d:e5:bd:17:db:1a:ba:09:ad:c7:8e:c4:97:0d:ef: 7a:14:e1:f1:65:52:a7:b3:79:ec:fe:1a:ba:7d:1a:fc:9d:a4: 73:6b:0a:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjYwNTIxMDIwNTA3WhcNMjYwNTI4MDIwNTA3WjAYMRYwFAYD VQQDEw02YTBlNjg1My04YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq57StiBqTqWknnhtQPgyJbLRzTi1RPvtOOr0MXtOKwGAUjyEenXmdPuiIY7y X8EdEyHFxGJJzYlk5JWrV4izk+FvMjdL3Jydkg/64G9Q3xsaIoICK87qs8R7+HVw EoIrkVP2bfb7g+UMBp+isk1vWXHKqYxy0gAc6eiszYBmraBKyViIzxBk9KsNZq4T SzYUIlQe/leBtDXGlusGFgBjSgbYpdImnSFcuP5aMgEYhB++pdcVDVXGJ4ep30Up CTk4TjtDHFXtITE/PPspxHo0Uwkv4sBbnrvAuCSHN9XFP7AYWjnN0xgwmEIE3ssU 99p2HhomcZz6LsLaNgoqK8gjBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBT47Nc jsR5EDlbAATzUu8dA0mXMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOu5DijWO0slbyH5rVUsMyPV9/NyyhPfOTYJz62mibbXEPl/F45/iPezc0I1P ElndeGENT35dVv0HqDHgHVfnDFQF3Q3cKyZMamRroCWg8m9r+S7Yjt9dE0uFPpbZ mjjTR8VdOI0+qKL3C6/1PULdrx8I1SBFYsiyut7xRFmt1Ji5JDxiVK+ixo5Ifd6t S79vevZsiuan2YLZEzY6D9m7yxdnBaaUYpHL/PyjQM7+RVWf6G0tOJj4RYI8+YVg aZKUOgKJRHkb49D0zKWd0sUAN6Tfg/hYGmbWmRsxPeW9F9saugmtx47Elw3vehTh 8WVSp7N57P4aun0a/J2kc2sK8g== -----END CERTIFICATE-----Generated at Thu May 21 09:38:41 2026 by rpki-client