$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft File: H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json) Hash identifier: 8uMNMpVp94fpE2jSmVu1PY9UnWmTPkqc9WpgU2HAg4c= Subject key identifier: 87:ED:F8:B4:45:DE:67:C2:C8:DC:84:B2:52:D2:28:3E:16:A9:DF:DE Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A Certificate issuer: /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft Manifest number: A2 Signing time: Tue 19 May 2026 07:11:00 +0000 Manifest this update: Tue 19 May 2026 07:10:59 +0000 Manifest next update: Tue 26 May 2026 07:10:59 +0000 Files and hashes: 1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: z8Co0cnNCOkxOGlket9OpdwPismCYEIPChUnv49NEOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 07:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Validity Not Before: May 19 07:10:59 2026 GMT Not After : May 26 07:10:59 2026 GMT Subject: CN=6a0c0d03-cec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:cf:19:58:e9:51:6c:90:d6:aa:d3:4f:52: 05:c4:6a:76:22:d7:a4:11:d0:79:9e:11:bd:2d:6b: d5:5c:7b:b4:2d:ef:01:c1:46:fa:30:d6:cc:c3:26: 8f:80:19:4d:3c:7f:00:d0:cc:51:9c:6c:39:14:85: 91:08:43:3c:cf:3e:31:16:16:87:2c:e5:eb:d3:ae: d5:a4:2b:e8:73:33:5c:f2:45:3b:a1:0b:17:8c:54: 0a:ed:b6:52:de:38:71:2b:fb:60:d3:e1:b8:de:14: 24:ed:db:e9:3d:7a:92:dd:9a:0a:5d:e5:3a:b9:a6: 9d:4a:43:bf:ba:5a:e5:d9:6d:d8:56:4c:85:65:59: a0:a6:36:69:4c:05:33:a9:fc:e3:43:08:f9:b2:2e: e8:6f:05:fa:b7:83:28:86:21:4e:64:9b:49:6c:07: 39:92:70:37:b4:23:78:d4:e5:80:c1:77:ba:20:ed: 5f:8c:bf:8b:d9:ed:2c:d8:a5:fc:fb:27:15:99:f3: c2:5a:8f:90:43:f4:a7:b7:f5:ae:3a:c6:bb:57:66: 4f:e6:af:ed:5d:bc:4c:c1:0b:a8:80:1d:16:2b:04: 72:72:5b:03:07:f0:bc:5e:72:3e:9f:e7:a0:eb:cd: a2:47:03:bb:a4:58:58:e4:d8:e0:f2:c1:b6:c3:90: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:ED:F8:B4:45:DE:67:C2:C8:DC:84:B2:52:D2:28:3E:16:A9:DF:DE X509v3 Authority Key Identifier: keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:4a:c0:90:29:46:38:9a:36:f0:ea:9a:4c:db:8f:de:ba:b7: e7:4e:fc:8e:8c:71:74:39:87:b6:90:df:d8:86:da:16:03:92: 4b:02:ca:57:8f:15:f7:fe:b7:da:46:26:1e:6f:bd:c6:9c:83: 4b:77:3c:c2:70:e4:fd:5e:0e:7c:27:e6:31:e7:6c:1d:63:e2: 3d:f6:0a:c7:ac:0f:2f:40:88:37:79:fa:04:a1:e6:8d:7a:b4: 31:e5:b7:87:68:6c:c3:bc:e3:e4:be:63:68:91:da:e7:9d:a5: 2d:a3:cb:ef:9c:57:16:01:50:a3:1a:54:9f:63:66:ba:62:e8: 28:fe:dd:98:2e:3d:97:ef:12:87:24:63:67:12:d1:35:2d:a3: a5:cc:5c:e2:e7:a3:58:02:d1:ba:c1:75:44:84:4c:f6:34:f6: 0a:8f:ad:aa:21:c5:88:de:9d:6d:b6:af:c8:47:c7:a9:37:bc: 11:1a:ee:7c:a6:19:76:e4:91:0e:a2:2c:10:7d:60:ce:7e:1c: aa:cb:21:b9:4f:ec:42:3b:72:53:46:79:80:de:96:37:ac:9c: 06:23:fb:03:14:6c:4a:93:0c:e8:ba:08:5c:a9:cc:86:b6:74: 3e:d2:d9:58:93:9b:16:79:c1:42:eb:ae:76:80:dd:07:43:c7: 35:95:64:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REMDkxMTAvBgNVBAUTKDFGRDIzOEE3MEVBQzdBNkZGQzZCOTBBQjMwQ0VGQjc3 MzkyMTZGNEEwHhcNMjYwNTE5MDcxMDU5WhcNMjYwNTI2MDcxMDU5WjAYMRYwFAYD VQQDEw02YTBjMGQwMy1jZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcPPGVjpUWyQ1qrTT1IFxGp2ItekEdB5nhG9LWvVXHu0Le8BwUb6MNbMwyaP gBlNPH8A0MxRnGw5FIWRCEM8zz4xFhaHLOXr067VpCvoczNc8kU7oQsXjFQK7bZS 3jhxK/tg0+G43hQk7dvpPXqS3ZoKXeU6uaadSkO/ulrl2W3YVkyFZVmgpjZpTAUz qfzjQwj5si7obwX6t4MohiFOZJtJbAc5knA3tCN41OWAwXe6IO1fjL+L2e0s2KX8 +ycVmfPCWo+QQ/Snt/WuOsa7V2ZP5q/tXbxMwQuogB0WKwRyclsDB/C8XnI+n+eg 682iRwO7pFhY5Njg8sG2w5BM9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIft+LRF 3mfCyNyEslLSKD4Wqd/eMB8GA1UdIwQYMBaAFB/SOKcOrHpv/GuQqzDO+3c5IW9K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQwOS83MEMxMDc2MDYy MkIxMUYwQkU1MjhCMUZDNEY5QUUwMi9IOUk0cHc2c2VtXzhhNUNyTU03N2R6a2hi MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5STRwdzZzZW1fOGE1Q3JNTTc3ZHpraGIwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQwOS83MEMxMDc2MDYyMkIxMUYwQkU1MjhCMUZDNEY5QUUwMi9IOUk0cHc2c2Vt XzhhNUNyTU03N2R6a2hiMG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg0rAkClGOJo28OqaTNuP3rq35078joxxdDmHtpDf2IbaFgOSSwLKV48V9/63 2kYmHm+9xpyDS3c8wnDk/V4OfCfmMedsHWPiPfYKx6wPL0CIN3n6BKHmjXq0MeW3 h2hsw7zj5L5jaJHa552lLaPL75xXFgFQoxpUn2NmumLoKP7dmC49l+8ShyRjZxLR NS2jpcxc4uejWALRusF1RIRM9jT2Co+tqiHFiN6dbbavyEfHqTe8ERrufKYZduSR DqIsEH1gzn4cqsshuU/sQjtyU0Z5gN6WN6ycBiP7AxRsSpMM6LoIXKnMhrZ0PtLZ WJObFnnBQuuudoDdB0PHNZVk0g== -----END CERTIFICATE-----Generated at Thu May 21 09:30:45 2026 by rpki-client