$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json) Hash identifier: 3AcPLOAJk71EX5VUkYjCJvRkyFmC9T0qM58oHkIW0vU= Subject key identifier: FC:40:38:59:DA:E1:43:81:F2:94:D2:8E:C3:29:26:9F:40:48:79:04 Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft Manifest number: 070C Signing time: Wed 20 May 2026 22:03:21 +0000 Manifest this update: Wed 20 May 2026 22:03:21 +0000 Manifest next update: Wed 27 May 2026 22:03:21 +0000 Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: C6JM6VA7uNjb09dSjexIbS/afxaeQrKRQuJhI8K/59c=) 2: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: nPFuvMawG4xx+gCcX5sOjIYDGXFIgyL0vbMikWZz2Nc=) 3: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA Validity Not Before: May 20 22:03:21 2026 GMT Not After : May 27 22:03:21 2026 GMT Subject: CN=6a0e2fa9-b8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:86:2c:1c:52:d2:66:84:80:59:16:4a:b0: 9e:de:a1:87:b1:f4:b6:aa:86:02:0e:c6:31:a0:b0: e0:91:84:fb:fb:c6:7a:15:be:b6:4d:97:e3:96:1a: 60:81:fa:22:03:74:38:a8:cf:c9:84:22:de:97:9e: f2:b6:a7:a0:44:d6:00:42:51:7f:3c:ef:cc:d1:aa: bf:79:7a:55:b3:d1:66:ea:9c:36:bc:fd:f5:3b:49: 6e:5c:b5:19:a5:c1:9e:b4:df:b0:71:26:17:37:b6: 04:d5:88:a4:88:1e:1d:ee:ae:a1:3b:b1:98:8e:e7: b6:4b:2d:b0:ca:ca:bc:41:e6:68:8b:c2:57:0d:7a: 07:8a:34:59:ae:b6:f4:e7:2c:5b:24:f2:e2:89:d8: 74:4b:a7:7e:a7:70:38:23:d8:2f:f0:e3:65:6d:b1: d3:17:d6:c2:03:4c:48:d8:ec:ac:a3:b1:90:f2:a7: 0c:7a:48:8f:f4:46:ef:26:b7:f4:bb:49:63:7a:f4: f1:e7:25:f0:1d:ff:7e:6f:c0:0e:c3:64:12:5a:86: b9:a0:cc:bd:9f:bf:ef:75:ab:b9:c3:fd:f3:30:ca: 35:27:ef:05:16:4e:6f:5e:48:7b:c3:86:61:63:43: 75:27:66:01:d2:c7:1e:62:f3:60:4d:91:07:a4:8f: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:38:59:DA:E1:43:81:F2:94:D2:8E:C3:29:26:9F:40:48:79:04 X509v3 Authority Key Identifier: keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d8:5e:78:ef:f7:6c:49:7a:88:f8:3e:3f:c7:cf:14:c6:3f: 5f:63:48:9a:fc:a3:5f:e1:ff:f7:54:09:cd:5f:d5:da:2b:83: 27:95:5c:0c:6a:05:ec:92:39:1a:65:b1:d6:d6:e1:3b:fe:1f: 84:44:f9:de:e3:6c:e5:f7:69:5d:f4:cf:4b:99:90:94:9e:50: 9e:e8:f7:f1:20:22:af:62:4f:03:77:01:f1:d5:9b:03:97:df: 3a:dc:2c:93:93:e8:2a:3e:d9:a6:42:8e:a6:ea:55:94:ad:2b: 0e:06:c2:42:e7:5e:e2:3c:1e:ab:cc:24:61:e6:61:a2:68:e5: 77:4a:b1:d9:8a:f8:8b:a4:6d:39:36:0a:f1:8b:97:00:af:4c: 02:b0:6d:f3:0b:33:a9:fd:2d:f5:e1:9b:23:c5:a3:af:8d:10: 2b:a6:96:ba:f2:d1:b9:7f:78:2a:d6:1c:9f:f1:a6:2e:43:60: a4:b3:b4:e6:51:c5:e6:6f:b7:0d:e5:8b:35:23:75:7f:bb:90: a4:45:84:2f:ca:65:02:f2:e5:db:2c:ad:3a:ed:3d:43:96:d1: e9:d3:75:e0:b8:8b:4d:f1:85:e4:0d:15:b8:e0:5d:ce:7a:de: 65:76:1a:89:15:13:1f:72:ef:43:3c:47:99:ad:69:0a:6b:d6: 95:c0:15:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCODMxMTAvBgNVBAUTKEM0NkQ1OTEzRjZDMjUwQzZBRUUyRjMyNzQ1MzVDRTg2 NjI5NUI5RkEwHhcNMjYwNTIwMjIwMzIxWhcNMjYwNTI3MjIwMzIxWjAYMRYwFAYD VQQDEw02YTBlMmZhOS1iOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEKGLBxS0maEgFkWSrCe3qGHsfS2qoYCDsYxoLDgkYT7+8Z6Fb62TZfjlhpg gfoiA3Q4qM/JhCLel57ytqegRNYAQlF/PO/M0aq/eXpVs9Fm6pw2vP31O0luXLUZ pcGetN+wcSYXN7YE1YikiB4d7q6hO7GYjue2Sy2wysq8QeZoi8JXDXoHijRZrrb0 5yxbJPLiidh0S6d+p3A4I9gv8ONlbbHTF9bCA0xI2Oyso7GQ8qcMekiP9EbvJrf0 u0ljevTx5yXwHf9+b8AOw2QSWoa5oMy9n7/vdau5w/3zMMo1J+8FFk5vXkh7w4Zh Y0N1J2YB0sceYvNgTZEHpI9qRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxAOFna 4UOB8pTSjsMpJp9ASHkEMB8GA1UdIwQYMBaAFMRtWRP2wlDGruLzJ0U1zoZilbn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI4My83N0FBNDE0Njg3 RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VNYXU0dk1uUlRYT2htS1Z1 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHMVpFX2JDVU1hdTR2TW5SVFhPaG1LVnVmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI4My83N0FBNDE0Njg3RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VN YXU0dk1uUlRYT2htS1Z1Zm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHNheeO/3bEl6iPg+P8fPFMY/X2NImvyjX+H/91QJzV/V2iuDJ5VcDGoF7JI5 GmWx1tbhO/4fhET53uNs5fdpXfTPS5mQlJ5Qnuj38SAir2JPA3cB8dWbA5ffOtws k5PoKj7ZpkKOpupVlK0rDgbCQude4jweq8wkYeZhomjld0qx2Yr4i6RtOTYK8YuX AK9MArBt8wszqf0t9eGbI8Wjr40QK6aWuvLRuX94KtYcn/GmLkNgpLO05lHF5m+3 DeWLNSN1f7uQpEWEL8plAvLl2yytOu09Q5bR6dN14LiLTfGF5A0VuOBdznreZXYa iRUTH3LvQzxHma1pCmvWlcAVtQ== -----END CERTIFICATE-----Generated at Thu May 21 15:05:27 2026 by rpki-client