$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: nsQ1INs9mNDn7l+x2+gOIaxCsMpu5Am6ts2mgWZZgdo= Subject key identifier: 38:92:13:6D:6C:A4:E6:7D:32:0A:6D:D5:9F:3C:21:10:9E:B0:75:AA Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 01FA Signing time: Fri 15 May 2026 03:18:30 +0000 Manifest this update: Fri 15 May 2026 03:18:30 +0000 Manifest next update: Fri 22 May 2026 03:18:30 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: LxDNuMX+/ah+YGmjqEAGpBPKSE6172iztoOHmsLlNh8=) 2: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: hdiJI/Pl7CfApe4A3Ae8zDLrz5/BDB6o+JJ3zkJ+3n8=) 3: 0648277C065B11F1BBF0D547343D8C67.roa (hash: UPZChaoPwZygYNvD1ZEQcZn9IurnbGE9M73HomojtHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 03:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: May 15 03:18:30 2026 GMT Not After : May 22 03:18:30 2026 GMT Subject: CN=6a069086-bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:02:d0:74:c3:37:e9:43:49:43:1c:0f:dd: b3:c5:35:a1:24:f5:a4:12:52:47:a9:72:d2:41:40: 16:c3:26:31:74:26:b5:95:e8:fe:9e:e8:fe:a1:e5: 14:96:59:48:e3:15:71:bd:2a:f5:99:9d:2a:f2:a2: 29:65:1b:b8:4a:93:ed:ad:db:53:7b:7b:f3:19:15: 8b:fb:2d:ff:5f:7f:de:06:90:dd:42:9e:48:4a:2e: a1:f7:00:26:35:23:3c:63:cf:7c:ee:69:26:d7:e3: 24:b5:b6:b1:0d:66:9f:2e:af:b8:d9:5b:c5:5e:2c: ef:6a:bb:82:e3:de:34:1e:40:ca:52:d4:ce:ac:35: 3f:19:68:6e:3c:4a:0c:24:5c:cf:42:f5:0a:c8:79: 20:b6:18:b2:53:a7:8e:d4:4a:c4:b4:fd:d2:ae:b9: 77:2c:49:b8:fb:d1:71:41:ee:89:3c:68:8c:ae:52: 42:3f:cb:6d:1a:c5:a8:9e:1e:fc:bd:32:df:ce:19: 66:32:7c:14:e5:c9:75:14:31:ef:b2:22:86:2a:73: 78:81:a1:fa:38:47:56:61:a0:dc:59:b5:87:e8:fa: ca:17:eb:6a:90:86:49:03:f5:20:b3:4e:1b:89:f8: d6:60:7c:b6:55:95:4b:00:8e:13:b4:4a:83:b1:97: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:92:13:6D:6C:A4:E6:7D:32:0A:6D:D5:9F:3C:21:10:9E:B0:75:AA X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a1:e3:5e:41:11:5e:f8:c8:5a:b3:07:a7:d7:c2:cc:d5:a9: 86:a1:18:8a:80:39:6a:19:48:f0:ba:24:16:44:c7:a9:9e:79: 6c:80:5e:c8:0d:0a:81:6f:04:5a:85:2d:c7:81:16:9f:f4:a5: ec:ec:4a:fc:a0:65:b2:90:e6:2b:bf:7f:1d:20:e0:1f:51:ff: c5:67:d7:bd:01:ae:48:25:df:a9:2f:f1:68:2e:aa:89:61:0a: 71:6d:4b:d2:32:ae:89:5f:48:a4:ba:99:18:a2:a0:84:62:b1: 04:2f:05:ef:ed:0f:e9:8b:dd:70:2f:d1:1b:d7:48:04:b2:9e: 7a:72:41:02:1c:04:bf:69:1c:ad:dc:1c:80:87:a5:a0:8a:b9: 32:76:9c:ae:a5:29:39:a3:e0:33:42:04:cd:d8:03:30:d3:9e: fa:9f:8e:3a:4d:34:d2:76:48:71:66:f6:59:ad:fa:5c:7b:4d: d9:44:77:8e:40:1c:40:5c:8b:58:2e:b4:9f:eb:22:4c:0f:16: dc:0f:11:45:64:ca:32:6f:08:9a:03:cb:ba:28:62:a9:55:5d: 8d:53:ab:de:de:89:9b:d5:12:56:10:a8:1b:0e:08:1c:00:b3: 44:b7:1d:9b:4e:50:4b:d3:39:44:91:5a:61:f2:b2:69:91:b5: bb:4e:1a:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjYwNTE1MDMxODMwWhcNMjYwNTIyMDMxODMwWjAYMRYwFAYD VQQDEw02YTA2OTA4Ni1iZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9MC0HTDN+lDSUMcD92zxTWhJPWkElJHqXLSQUAWwyYxdCa1lej+nuj+oeUU lllI4xVxvSr1mZ0q8qIpZRu4SpPtrdtTe3vzGRWL+y3/X3/eBpDdQp5ISi6h9wAm NSM8Y8987mkm1+MktbaxDWafLq+42VvFXizvaruC4940HkDKUtTOrDU/GWhuPEoM JFzPQvUKyHkgthiyU6eO1ErEtP3Srrl3LEm4+9FxQe6JPGiMrlJCP8ttGsWonh78 vTLfzhlmMnwU5cl1FDHvsiKGKnN4gaH6OEdWYaDcWbWH6PrKF+tqkIZJA/Ugs04b ifjWYHy2VZVLAI4TtEqDsZdTrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDiSE21s pOZ9Mgpt1Z88IRCesHWqMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqKHjXkERXvjIWrMHp9fCzNWphqEYioA5ahlI8LokFkTHqZ55bIBeyA0KgW8E WoUtx4EWn/Sl7OxK/KBlspDmK79/HSDgH1H/xWfXvQGuSCXfqS/xaC6qiWEKcW1L 0jKuiV9IpLqZGKKghGKxBC8F7+0P6YvdcC/RG9dIBLKeenJBAhwEv2kcrdwcgIel oIq5MnacrqUpOaPgM0IEzdgDMNOe+p+OOk000nZIcWb2Wa36XHtN2UR3jkAcQFyL WC60n+siTA8W3A8RRWTKMm8ImgPLuihiqVVdjVOr3t6Jm9USVhCoGw4IHACzRLcd m05QS9M5RJFaYfKyaZG1u04axQ== -----END CERTIFICATE-----Generated at Sun May 17 02:07:45 2026 by rpki-client