$ rpki-client -vvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft File: r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft (raw, json) Hash identifier: nX0GZ8bmishRPXLfUzQEkwrre/pHMeNnmTD5looGQcU= Subject key identifier: 37:C8:51:F8:0F:11:41:05:7E:BF:16:D9:4B:5F:82:31:6D:3F:1C:E9 Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft Manifest number: 1F Signing time: Tue 19 May 2026 08:47:39 +0000 Manifest this update: Tue 19 May 2026 08:47:38 +0000 Manifest next update: Tue 26 May 2026 08:47:38 +0000 Files and hashes: 1: r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl (hash: Q7QIIugeLLbJ77rOCCWs5doESKRmEpKKQ/i/2JROLPc=) 2: C6185536273011F1A8149F74AC833773.roa (hash: XZNI2I+TEYcAvEVGQBDMHCtqr9clDTEVottNypWj6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Validity Not Before: May 19 08:47:38 2026 GMT Not After : May 26 08:47:38 2026 GMT Subject: CN=6a0c23ab-7a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:6a:b1:59:ac:89:28:e4:ce:5b:bb:15:cf: 4b:fa:29:81:df:bf:d7:67:51:e8:78:fe:00:f6:8f: 33:7e:3e:3b:22:f1:58:fa:46:c8:60:16:16:30:67: 93:ed:4b:b4:8e:67:a0:c9:c7:e1:b0:8a:b9:4b:a5: 6b:98:33:f7:26:44:2a:02:a7:37:2e:3f:f3:47:16: 4b:fc:08:d9:f2:94:a3:ab:26:0d:c2:26:84:ee:cf: ba:96:04:c6:5c:88:7a:72:5e:cd:91:22:3b:d7:da: 4e:41:01:f8:54:3d:ed:a4:af:e8:70:a8:d2:f6:5a: a3:9e:96:ae:90:81:66:0e:87:b5:8c:70:6a:ba:78: ef:f1:44:73:48:21:4d:d3:a4:d2:5b:11:3d:c9:aa: be:1c:d7:70:da:02:93:05:2e:21:13:da:dd:0a:40: 23:1a:40:cd:88:68:f1:ed:1a:bc:7d:8b:40:83:74: 5f:60:86:ea:fe:46:c9:9e:06:15:e6:14:68:9a:86: b8:3b:ad:99:24:5d:bb:54:7e:8b:27:03:f2:88:7c: a3:bd:8e:71:0d:19:cc:44:39:a8:44:f3:f9:d9:91: da:23:47:91:9a:3e:fb:8e:b7:80:0b:a9:45:69:46: fe:6f:f3:36:b6:58:56:73:41:dc:95:fb:6b:5b:12: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:51:F8:0F:11:41:05:7E:BF:16:D9:4B:5F:82:31:6D:3F:1C:E9 X509v3 Authority Key Identifier: keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4b:b2:be:2e:f7:50:10:cb:5a:b8:18:10:26:30:b8:7c:58: 87:01:d8:86:2e:73:1c:3b:c2:e8:91:fb:65:bc:a4:57:98:0a: 21:5f:fe:19:95:0c:6c:69:bb:b6:24:5e:5b:a5:fa:fa:df:22: df:71:c9:ad:c1:18:54:d0:be:3c:4d:2d:75:a7:5a:50:75:79: a0:a9:fc:77:43:c2:0c:b7:e9:27:01:3b:a2:04:d6:e6:b3:42: 50:11:05:e6:1d:65:7d:2d:8e:b8:4e:2f:aa:0a:77:8a:19:73: e8:de:d5:a6:bb:32:88:d6:97:a7:6c:ee:54:5e:53:7d:c4:f7: be:79:1e:71:e1:79:ac:14:c0:bd:d3:6a:50:ad:7c:98:60:bb: e8:41:27:c0:50:fc:32:c3:70:dd:b1:a7:f5:98:1f:a1:5d:33: a6:56:7b:bd:9d:a8:6d:11:ea:3d:5c:2a:42:22:03:16:ed:6b: a9:40:20:2a:f6:30:14:7a:36:1f:0e:a8:2f:da:26:a2:c0:59: 2a:2d:1d:c8:8f:fd:dc:3e:31:5e:c1:14:02:19:82:65:a4:ba: c6:bd:8b:21:38:c2:23:86:aa:f3:eb:66:0b:cd:ad:13:70:e4: 9f:6f:78:03:0b:4a:a9:a3:ab:0e:94:ff:f9:1f:46:48:80:79: 05:a7:7b:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Nzc1MDExMC8GA1UEBRMoQUY1NjhFQkMyNkIxNEMxMjgxRTgxMjgzNzc4NkI1QTM4 QkM3OEI4NzAeFw0yNjA1MTkwODQ3MzhaFw0yNjA1MjYwODQ3MzhaMBgxFjAUBgNV BAMTDTZhMGMyM2FiLTdhNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCeWqxWayJKOTOW7sVz0v6KYHfv9dnUeh4/gD2jzN+Pjsi8Vj6RshgFhYwZ5Pt S7SOZ6DJx+GwirlLpWuYM/cmRCoCpzcuP/NHFkv8CNnylKOrJg3CJoTuz7qWBMZc iHpyXs2RIjvX2k5BAfhUPe2kr+hwqNL2WqOelq6QgWYOh7WMcGq6eO/xRHNIIU3T pNJbET3Jqr4c13DaApMFLiET2t0KQCMaQM2IaPHtGrx9i0CDdF9ghur+RsmeBhXm FGiahrg7rZkkXbtUfosnA/KIfKO9jnENGcxEOahE8/nZkdojR5GaPvuOt4ALqUVp Rv5v8za2WFZzQdyV+2tbEhplAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN8hR+A8R QQV+vxbZS1+CMW0/HOkwHwYDVR0jBBgwFoAUr1aOvCaxTBKB6BKDd4a1o4vHi4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzUwLzRDN0UwRkFBMjcy RjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJLQjZCS0RkNGExbzR2SGk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjFhT3ZDYXhUQktCNkJLRGQ0YTFvNHZIaTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NzUwLzRDN0UwRkFBMjcyRjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJL QjZCS0RkNGExbzR2SGk0Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANS7K+LvdQEMtauBgQJjC4fFiHAdiGLnMcO8LokftlvKRXmAohX/4ZlQxsabu2 JF5bpfr63yLfccmtwRhU0L48TS11p1pQdXmgqfx3Q8IMt+knATuiBNbms0JQEQXm HWV9LY64Ti+qCneKGXPo3tWmuzKI1penbO5UXlN9xPe+eR5x4XmsFMC902pQrXyY YLvoQSfAUPwyw3Ddsaf1mB+hXTOmVnu9nahtEeo9XCpCIgMW7WupQCAq9jAUejYf Dqgv2iaiwFkqLR3Ij/3cPjFewRQCGYJlpLrGvYshOMIjhqrz62YLza0TcOSfb3gD C0qpo6sOlP/5H0ZIgHkFp3sc -----END CERTIFICATE-----Generated at Thu May 21 10:53:44 2026 by rpki-client