$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: 1ofjtPAlA8cIpvRw4Jd2L6BvOg9TcJkSYWRjNEKr/Qc= Subject key identifier: 9B:70:92:BC:F5:4D:59:D8:37:CD:21:F5:59:A2:0A:31:C8:4A:BD:EC Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: F4 Signing time: Thu 21 May 2026 06:25:09 +0000 Manifest this update: Thu 21 May 2026 06:25:09 +0000 Manifest next update: Thu 28 May 2026 06:25:09 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: mIEIW8yvxduRSY49TDgbh7A9F7oabzTEfnDrDaoHdbM=) 2: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=) 3: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: May 21 06:25:09 2026 GMT Not After : May 28 06:25:09 2026 GMT Subject: CN=6a0ea545-7063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1b:60:1b:0f:b7:c7:68:0d:b6:f9:57:03:b7: a4:15:f3:1e:00:05:ca:76:41:21:9d:7f:c7:62:4b: 14:fe:86:7c:7a:41:45:29:e6:4a:70:cb:c7:4f:ee: 2f:00:08:84:73:4e:63:b7:7c:eb:65:40:48:6c:72: e6:7b:2f:26:fc:e4:78:43:a6:e5:5f:b1:c8:0c:5a: 4a:ec:d5:45:11:e0:15:a3:41:f3:69:3a:07:a6:04: 7c:fd:74:c5:be:28:89:38:8c:81:19:71:60:83:0e: 8c:81:71:8a:d0:21:e7:f6:4e:73:10:b4:81:fe:da: 00:bf:f4:b3:16:78:02:79:4c:ce:86:dd:3f:01:34: bd:47:93:15:7d:08:83:60:be:44:44:45:99:54:09: a6:35:29:7f:2e:f6:bd:95:e8:08:c0:07:3e:0f:69: 06:cb:8e:be:1a:42:ea:45:07:f8:8d:e2:a9:ce:af: 80:fd:20:e5:2d:e0:f4:ad:b9:e5:5a:c5:82:b8:2d: 05:49:08:58:56:4c:7a:93:90:c0:1c:65:0d:ec:5a: 66:43:98:36:92:5b:93:f8:78:a9:0b:58:7e:69:ab: e8:26:9d:91:0f:68:9f:c8:97:ed:8a:b3:fe:d3:f1: d1:14:69:5b:34:09:94:14:21:75:a8:94:cf:c1:a5: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:70:92:BC:F5:4D:59:D8:37:CD:21:F5:59:A2:0A:31:C8:4A:BD:EC X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:c0:ef:67:bf:20:04:5d:fc:4c:18:00:4e:f4:ad:83:86: 75:d0:ba:b5:e8:70:f8:2d:51:6f:e1:26:9e:14:50:23:de:fe: dd:2a:7e:02:d6:42:19:43:8d:23:fa:6d:22:8e:b3:c4:72:c3: 3c:4b:74:8d:89:38:ec:99:e1:0e:09:a0:95:d6:dc:73:a2:1e: e3:06:a6:04:11:00:6f:2c:44:d5:55:3e:77:ce:89:b3:77:14: f0:c8:56:01:47:4e:ea:f2:0b:8e:4a:c6:8b:b7:b1:4c:1b:b0: 1d:77:95:d6:db:79:08:1f:80:ce:9d:7f:c7:eb:01:e6:0c:51: c9:17:3c:1f:c4:8a:7e:a4:f3:ae:39:fb:d5:ca:09:2f:22:f8: 98:a2:40:2c:7f:fc:70:31:23:86:1f:d3:d9:4a:b3:9e:13:0c: 9b:bc:43:44:84:bf:9d:92:a2:3d:6e:f2:00:29:54:e5:af:ab: 1c:d7:bf:72:3c:98:62:f9:8a:65:ce:05:0b:be:4b:19:21:b4: 6b:f4:1d:27:9a:41:44:f6:76:4d:23:64:46:96:e5:36:70:2a: 89:66:9c:79:e1:37:fe:7b:94:a2:b9:4b:5b:f2:0d:9d:9b:ab: bf:be:b2:b7:b7:c0:ef:c1:cb:0b:31:52:c0:42:67:6b:22:5c: 5e:cd:a8:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2 ODZGMjExNzcwHhcNMjYwNTIxMDYyNTA5WhcNMjYwNTI4MDYyNTA5WjAYMRYwFAYD VQQDEw02YTBlYTU0NS03MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RtgGw+3x2gNtvlXA7ekFfMeAAXKdkEhnX/HYksU/oZ8ekFFKeZKcMvHT+4v AAiEc05jt3zrZUBIbHLmey8m/OR4Q6blX7HIDFpK7NVFEeAVo0HzaToHpgR8/XTF viiJOIyBGXFggw6MgXGK0CHn9k5zELSB/toAv/SzFngCeUzOht0/ATS9R5MVfQiD YL5EREWZVAmmNSl/Lva9legIwAc+D2kGy46+GkLqRQf4jeKpzq+A/SDlLeD0rbnl WsWCuC0FSQhYVkx6k5DAHGUN7FpmQ5g2kluT+HipC1h+aavoJp2RD2ifyJftirP+ 0/HRFGlbNAmUFCF1qJTPwaXKOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtwkrz1 TVnYN80h9VmiCjHISr3sMB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0 MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY R2F0eC1pQTdrdXhvYnlFWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXh/A72e/IARd/EwYAE70rYOGddC6tehw+C1Rb+EmnhRQI97+3Sp+AtZCGUON I/ptIo6zxHLDPEt0jYk47JnhDgmgldbcc6Ie4wamBBEAbyxE1VU+d86Js3cU8MhW AUdO6vILjkrGi7exTBuwHXeV1tt5CB+Azp1/x+sB5gxRyRc8H8SKfqTzrjn71coJ LyL4mKJALH/8cDEjhh/T2UqznhMMm7xDRIS/nZKiPW7yAClU5a+rHNe/cjyYYvmK Zc4FC75LGSG0a/QdJ5pBRPZ2TSNkRpblNnAqiWaceeE3/nuUorlLW/INnZurv76y t7fA78HLCzFSwEJnayJcXs2oOQ== -----END CERTIFICATE-----Generated at Thu May 21 10:52:59 2026 by rpki-client