$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: BNQNlUA8BAAjGsxwVSJbrRSqfHUONQUoAFbt5ZaB9TE= Subject key identifier: 30:00:35:A8:E4:B5:CE:F8:5F:6E:FB:D8:0B:60:A5:22:30:F2:28:84 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 35D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 358C Signing time: Wed 20 May 2026 14:46:23 +0000 Manifest this update: Wed 20 May 2026 14:46:23 +0000 Manifest next update: Wed 27 May 2026 14:46:23 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: Kh5Nh0EvNin1sAiMOxYaOT4uEMJup2YoT3qq72rmrdw=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) 3: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: pcuAAC+IUpsYuzJSHTVcRBBHLD10GWUF30W0iZ2kHRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13785 (0x35d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: May 20 14:46:23 2026 GMT Not After : May 27 14:46:23 2026 GMT Subject: CN=6a0dc93f-2d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:f0:b4:8a:b6:fb:a4:7d:57:d9:da:e4:a2: 47:37:da:17:5a:31:77:71:12:6b:97:6e:85:84:50: 51:b9:ff:be:bd:56:95:38:89:c1:8e:d4:25:64:46: c8:e5:ff:75:d5:54:b4:a8:b8:63:6f:e7:ff:35:8f: 97:95:b2:a7:bb:a8:dc:75:df:3c:6f:5c:56:d5:e3: 5b:c0:43:bc:ef:e3:7c:fb:85:48:c8:9d:62:a9:57: 3a:6b:5f:cc:fd:be:45:93:71:72:e7:e3:6a:ea:a7: 19:30:f9:9c:26:74:a6:9c:82:05:dc:a8:b7:94:86: 42:57:a5:06:cc:53:2f:f5:a0:2e:ac:44:7d:a4:96: 11:34:17:94:85:b8:9f:48:ea:00:e2:ae:8f:db:49: 69:94:20:30:fc:04:86:1c:07:b3:83:a8:15:03:5c: d8:e8:ad:99:4f:8f:f0:24:f2:97:6e:c9:7f:ba:e9: 41:81:8e:96:21:59:cf:0f:2a:d9:e1:31:c3:5b:3b: cf:a8:1e:e0:b6:c0:71:e7:ce:75:ee:b7:37:40:49: fd:b2:d6:44:b5:7d:27:de:2d:37:4f:ae:19:b4:86: d4:16:e8:0b:f3:11:86:04:de:93:64:90:9a:53:be: 0b:8e:96:3c:6d:f3:6c:c3:b6:f9:6a:5d:78:da:d8: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:00:35:A8:E4:B5:CE:F8:5F:6E:FB:D8:0B:60:A5:22:30:F2:28:84 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9a:f1:d2:3f:4a:ec:71:b3:c2:fc:b0:ad:74:9e:2a:c5:19: 0f:3f:c7:a5:fa:b7:99:ce:10:90:25:be:2a:62:8b:47:c1:9e: 43:28:5e:56:4a:20:39:a4:2c:53:e3:d5:e1:cc:f7:de:ed:ff: d2:c1:34:c0:27:83:23:3d:cc:ca:db:41:a3:6a:28:c3:f8:0c: 84:89:27:af:74:75:9d:f5:bd:c3:d5:d6:40:b2:5e:94:96:62: 52:ae:67:f6:51:74:e2:f5:0b:c8:8b:c3:79:e0:22:96:ca:1f: 2d:f5:d7:b7:65:5b:b6:65:06:1c:6a:c4:14:f1:7a:36:2b:7a: 17:92:ae:f2:0f:f7:3b:64:63:6f:53:e8:ea:08:db:fd:b5:ef: e0:a9:96:81:b1:67:6e:96:24:1c:94:6f:59:36:e5:27:df:d4: f2:88:4d:88:c2:79:44:41:d8:a9:ab:25:35:a2:72:7a:17:12: 88:73:f1:8b:2a:14:bf:a2:ca:27:d3:89:57:94:08:a4:a7:0b: 59:11:9d:d8:36:a7:46:ed:30:47:85:a1:ef:3d:a3:d7:1f:21: 05:21:aa:a9:96:e8:f9:5d:07:9d:2e:e5:e7:24:24:55:14:69: 0c:e2:b0:19:09:89:46:81:42:1f:f0:31:cd:90:f4:60:ca:73: 32:d4:e2:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwNTIwMTQ0NjIzWhcNMjYwNTI3MTQ0NjIzWjAYMRYwFAYD VQQDEw02YTBkYzkzZi0yZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv3wtIq2+6R9V9na5KJHN9oXWjF3cRJrl26FhFBRuf++vVaVOInBjtQlZEbI 5f911VS0qLhjb+f/NY+XlbKnu6jcdd88b1xW1eNbwEO87+N8+4VIyJ1iqVc6a1/M /b5Fk3Fy5+Nq6qcZMPmcJnSmnIIF3Ki3lIZCV6UGzFMv9aAurER9pJYRNBeUhbif SOoA4q6P20lplCAw/ASGHAezg6gVA1zY6K2ZT4/wJPKXbsl/uulBgY6WIVnPDyrZ 4THDWzvPqB7gtsBx58517rc3QEn9stZEtX0n3i03T64ZtIbUFugL8xGGBN6TZJCa U74LjpY8bfNsw7b5al142th13wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAANajk tc74X2772AtgpSIw8iiEMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATJrx0j9K7HGzwvywrXSeKsUZDz/Hpfq3mc4QkCW+KmKLR8GeQyheVkogOaQs U+PV4cz33u3/0sE0wCeDIz3MyttBo2oow/gMhIknr3R1nfW9w9XWQLJelJZiUq5n 9lF04vULyIvDeeAilsofLfXXt2VbtmUGHGrEFPF6Nit6F5Ku8g/3O2Rjb1Po6gjb /bXv4KmWgbFnbpYkHJRvWTblJ9/U8ohNiMJ5REHYqaslNaJyehcSiHPxiyoUv6LK J9OJV5QIpKcLWRGd2DanRu0wR4Wh7z2j1x8hBSGqqZbo+V0HnS7l5yQkVRRpDOKw GQmJRoFCH/AxzZD0YMpzMtTiFg== -----END CERTIFICATE-----Generated at Thu May 21 10:16:09 2026 by rpki-client