$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: E+dretSGWaYXpquQjK7dsZiMK5zhnPshsdNo3CrIZIA= Subject key identifier: B2:33:AC:CA:B8:91:6F:C2:E7:6B:E0:03:6E:4E:60:D1:49:28:49:B5 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 277E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 26F4 Signing time: Wed 20 May 2026 15:42:18 +0000 Manifest this update: Wed 20 May 2026 15:42:17 +0000 Manifest next update: Wed 27 May 2026 15:42:17 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: qAmZSxQn/bEmV1i9j1csT3FFPpNevhXrzg5ZaWrTvE8=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: vvlwkhzUvE0FKB5grEYGUNi8KcaEXKrEcNbY2LoLmZ8=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 8bcJT2SUfJvBhjjxVcOLkV67/1UHWnWs/wyeZ8062Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10110 (0x277e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: May 20 15:42:17 2026 GMT Not After : May 27 15:42:17 2026 GMT Subject: CN=6a0dd65a-c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1c:70:81:aa:ae:47:52:7e:4e:60:dc:8a:71: 3b:32:95:7d:6f:2e:fa:7a:10:26:42:dc:28:79:c2: 6d:a7:a8:79:90:d0:a9:ba:48:a7:8d:d2:59:43:62: 0b:95:ed:2f:a1:27:4a:71:69:fb:ed:d6:24:4b:2c: 72:f8:e9:8d:bf:07:75:74:f8:9a:99:f8:19:04:87: 3d:b9:51:db:cd:a3:21:9b:c3:0d:1a:ca:d7:f0:ef: c4:64:6b:4f:3e:10:33:b1:f1:34:a1:fc:2a:e4:19: c4:1b:de:99:78:de:70:32:c1:57:4d:e2:ec:6c:33: a2:17:fd:42:c8:f6:61:f4:8f:b2:a4:da:53:41:c6: b5:47:61:ea:34:91:b6:b7:61:6d:b4:d0:40:2f:c4: e0:3a:2e:35:0e:06:ba:70:49:18:f5:6a:cf:fe:7c: 2b:e0:ec:ce:3b:da:5e:b3:8b:8e:1c:5e:1d:32:32: a0:7d:e3:4a:a8:56:af:e2:27:36:8c:91:38:9a:18: 3d:90:67:f7:b5:16:34:ed:42:22:90:bb:67:dc:9d: 1a:c1:50:e2:c6:96:6a:c0:f9:15:71:e0:1f:83:ab: 06:f1:11:59:ad:3f:80:a2:59:bd:83:2e:f3:0b:7e: 4f:79:f4:e8:6b:45:e1:d6:1c:02:95:55:c7:b9:97: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:33:AC:CA:B8:91:6F:C2:E7:6B:E0:03:6E:4E:60:D1:49:28:49:B5 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b5:b5:ca:04:19:bf:76:4b:c2:14:fc:21:b5:d0:61:63:00: 76:52:37:ce:bf:50:ae:37:ec:87:07:4a:b7:e5:bc:04:52:96: 16:dd:c3:f5:b7:b9:e8:a4:4f:74:11:d7:14:d9:15:ca:7b:9a: bf:c8:a2:0a:05:5c:33:10:68:87:4f:4c:01:dd:3c:13:5d:37: be:5c:e5:0a:06:17:17:e7:d6:0e:3e:78:20:35:a8:63:3e:5a: 1f:5e:39:71:b2:df:6e:06:05:44:53:7d:37:a6:d0:74:1d:be: 8d:b4:d7:0a:ed:63:89:bc:44:e6:3b:12:54:78:fa:43:9b:c9: 7b:0e:30:65:00:e9:e8:09:29:71:3d:42:98:57:a3:1a:8a:68: 42:3a:0c:7e:71:0f:85:87:ee:e3:fb:35:af:89:56:58:df:bf: 21:88:98:80:7a:e7:88:73:be:12:fa:d5:f5:34:6c:68:1b:c4: 88:3e:6a:7e:ce:52:78:d1:45:d5:1b:97:31:a8:57:04:e3:81: ff:ce:1b:59:53:48:e4:d7:e5:e2:63:24:47:55:87:8b:37:54: a3:dd:fb:89:bc:f4:c4:97:6a:7d:41:c9:41:66:56:43:c1:81: 78:2b:76:f9:20:44:0e:33:80:78:b6:ea:71:e6:b6:67:8c:7b: ae:c9:e8:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjYwNTIwMTU0MjE3WhcNMjYwNTI3MTU0MjE3WjAYMRYwFAYD VQQDEw02YTBkZDY1YS1jN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjBxwgaquR1J+TmDcinE7MpV9by76ehAmQtwoecJtp6h5kNCpukinjdJZQ2IL le0voSdKcWn77dYkSyxy+OmNvwd1dPiamfgZBIc9uVHbzaMhm8MNGsrX8O/EZGtP PhAzsfE0ofwq5BnEG96ZeN5wMsFXTeLsbDOiF/1CyPZh9I+ypNpTQca1R2HqNJG2 t2FttNBAL8TgOi41Dga6cEkY9WrP/nwr4OzOO9pes4uOHF4dMjKgfeNKqFav4ic2 jJE4mhg9kGf3tRY07UIikLtn3J0awVDixpZqwPkVceAfg6sG8RFZrT+Aolm9gy7z C35PefToa0Xh1hwClVXHuZe33wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIzrMq4 kW/C52vgA25OYNFJKEm1MB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAALW1ygQZv3ZLwhT8IbXQYWMAdlI3zr9QrjfshwdKt+W8BFKWFt3D9be56KRP dBHXFNkVynuav8iiCgVcMxBoh09MAd08E103vlzlCgYXF+fWDj54IDWoYz5aH145 cbLfbgYFRFN9N6bQdB2+jbTXCu1jibxE5jsSVHj6Q5vJew4wZQDp6AkpcT1CmFej GopoQjoMfnEPhYfu4/s1r4lWWN+/IYiYgHrniHO+EvrV9TRsaBvEiD5qfs5SeNFF 1RuXMahXBOOB/84bWVNI5Nfl4mMkR1WHizdUo937ibz0xJdqfUHJQWZWQ8GBeCt2 +SBEDjOAeLbqcea2Z4x7rsnoSQ== -----END CERTIFICATE-----Generated at Thu May 21 10:20:22 2026 by rpki-client