$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: YjYkCdXXnCpJlLyg2lJ17rGAzX7mRB4CteSCrx2Eirg= Subject key identifier: DD:8D:72:4F:B0:A9:25:38:76:78:F0:B0:A6:F4:CA:63:83:62:25:B5 Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 32C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 32B5 Signing time: Wed 20 May 2026 15:25:24 +0000 Manifest this update: Wed 20 May 2026 15:25:24 +0000 Manifest next update: Wed 27 May 2026 15:25:24 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: ZniRSsIBtOEuHLSyoEcxsgD49cez73uulMe7zknyEGQ=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: nW61kuaN8FjnP6qqGZTbaXtb7/kNJjyPMGFxZM2s4kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13001 (0x32c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Validity Not Before: May 20 15:25:24 2026 GMT Not After : May 27 15:25:24 2026 GMT Subject: CN=6a0dd264-2a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:5b:3c:cc:f7:02:7a:58:5c:53:98:d0:05: 12:d8:21:dc:04:b9:9c:d4:bd:dc:ff:22:ab:7a:2d: 54:ab:67:56:e1:04:04:3d:cb:3e:9c:f4:1f:ff:2e: 8e:19:16:b4:ca:bf:e4:28:3f:14:fb:81:82:f3:2a: 8f:28:73:f4:2d:0a:d7:4b:82:cb:85:1e:36:8f:3b: 22:76:1a:dd:25:7c:d9:c4:ee:3a:51:e2:5d:5c:bb: 20:14:15:d9:3a:5b:18:c2:ab:f0:ae:4a:67:ce:0a: 9f:14:16:21:8b:7b:ec:61:f2:21:c8:ff:56:f1:e2: 06:db:e6:03:3e:57:31:de:f3:bf:0c:f4:fe:1f:ee: e6:a3:42:e9:ef:f9:fd:29:ef:42:93:b6:c9:c8:c0: 26:c5:be:ad:13:b5:cd:ba:c6:56:d2:36:6b:e7:2e: 05:13:c1:4c:e8:a7:73:ad:fd:89:e0:8e:23:f7:43: a1:f2:79:c9:df:30:29:90:96:27:32:3c:54:2e:1a: 95:bb:c5:cd:0e:67:a1:0f:71:2a:40:aa:a7:2d:f4: 0d:b2:ab:29:7d:53:d1:c9:94:74:b6:96:9c:5e:4e: 04:97:8a:29:85:8b:6e:42:f3:cb:2f:da:09:db:25: 9a:ac:11:56:41:2c:55:06:38:e6:4f:13:fd:44:47: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8D:72:4F:B0:A9:25:38:76:78:F0:B0:A6:F4:CA:63:83:62:25:B5 X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:50:8e:85:45:3c:97:e6:5f:e5:d5:15:12:66:43:58:4e:9c: ee:38:98:74:78:25:f6:ff:fa:39:9a:83:1f:30:46:d5:06:38: 68:2b:ba:32:97:5a:69:7d:d6:cb:f1:d5:b5:e2:53:b3:5c:70: f1:aa:39:d6:51:16:60:4b:a2:a7:65:c2:13:77:da:91:82:7a: a0:04:1e:6c:9b:68:9e:f2:7d:fe:1f:e9:f2:9e:7b:61:61:b8: 47:44:ca:56:4a:07:5b:74:16:e4:4d:34:50:f3:46:47:96:84: f3:b5:a9:bf:f4:2a:0c:f0:bd:70:95:ee:80:24:60:1d:05:75: 5a:ac:f6:94:f7:7f:24:47:71:24:e2:9c:7f:cc:29:5c:31:4f: cb:f3:5b:30:68:63:9c:d7:fe:54:b2:cf:fd:70:03:02:16:1c: 0b:4f:85:c7:b5:42:08:37:d3:34:3d:ae:5e:a2:b0:66:8b:a3: 47:eb:17:d5:d9:36:09:65:19:96:b0:f7:cc:9b:0d:5c:8b:b4: a0:9f:20:d1:a6:ab:ec:2b:1e:6f:94:5c:b3:ba:b6:04:19:b3: 5c:60:ba:22:67:a7:f4:56:18:72:9d:94:48:e4:cd:b2:cc:d2: aa:6c:46:ad:1e:09:3f:db:0c:ef:78:c2:6a:72:de:f4:0e:fe: e9:da:55:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjYwNTIwMTUyNTI0WhcNMjYwNTI3MTUyNTI0WjAYMRYwFAYD VQQDEw02YTBkZDI2NC0yYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstNbPMz3AnpYXFOY0AUS2CHcBLmc1L3c/yKrei1Uq2dW4QQEPcs+nPQf/y6O GRa0yr/kKD8U+4GC8yqPKHP0LQrXS4LLhR42jzsidhrdJXzZxO46UeJdXLsgFBXZ OlsYwqvwrkpnzgqfFBYhi3vsYfIhyP9W8eIG2+YDPlcx3vO/DPT+H+7mo0Lp7/n9 Ke9Ck7bJyMAmxb6tE7XNusZW0jZr5y4FE8FM6Kdzrf2J4I4j90Oh8nnJ3zApkJYn MjxULhqVu8XNDmehD3EqQKqnLfQNsqspfVPRyZR0tpacXk4El4ophYtuQvPLL9oJ 2yWarBFWQSxVBjjmTxP9REdCHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2Nck+w qSU4dnjwsKb0ymODYiW1MB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP1COhUU8l+Zf5dUVEmZDWE6c7jiYdHgl9v/6OZqDHzBG1QY4aCu6MpdaaX3W y/HVteJTs1xw8ao51lEWYEuip2XCE3fakYJ6oAQebJtonvJ9/h/p8p57YWG4R0TK VkoHW3QW5E00UPNGR5aE87Wpv/QqDPC9cJXugCRgHQV1Wqz2lPd/JEdxJOKcf8wp XDFPy/NbMGhjnNf+VLLP/XADAhYcC0+Fx7VCCDfTND2uXqKwZoujR+sX1dk2CWUZ lrD3zJsNXIu0oJ8g0aar7Cseb5Rcs7q2BBmzXGC6Imen9FYYcp2USOTNsszSqmxG rR4JP9sM73jCanLe9A7+6dpVMw== -----END CERTIFICATE-----Generated at Thu May 21 10:29:02 2026 by rpki-client