$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: CfUd8Xi5MqdprmVi0b9cRdunJ8pMELwZFjbA8fz0bDE= Subject key identifier: 14:06:70:16:BC:3A:E9:5C:EE:20:DC:6E:D6:2F:28:B7:0F:FA:DB:E3 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 0773 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 075D Signing time: Wed 20 May 2026 21:44:40 +0000 Manifest this update: Wed 20 May 2026 21:44:40 +0000 Manifest next update: Wed 27 May 2026 21:44:40 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: uDGu5LKZnLxwZ5iXrDWuxnIac1I0c36ke91ZPj18bQk=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: Tp9AbDgfK/vxHv0T8EocR+zLaLvDS9XrhEaYG7pj/74=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: s/5lGnLOQhFrFoCvFSY8QuZwJ6dSe5qo2Hz+gxZXbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1907 (0x773) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: May 20 21:44:40 2026 GMT Not After : May 27 21:44:40 2026 GMT Subject: CN=6a0e2b48-8877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:a9:ea:53:6f:83:da:85:af:93:4e:59:15: 82:42:47:b4:60:8a:95:96:ea:3b:30:6c:42:e8:6e: 91:de:31:96:cb:43:64:56:6b:71:98:95:12:9a:e9: e2:9e:47:0b:34:d6:db:ab:c8:2a:3e:e3:92:70:47: 9d:48:e1:8a:31:cc:da:ec:ef:95:1f:c5:d5:fa:f1: e1:be:fc:f3:4d:4b:0c:da:d7:7d:17:5e:2f:55:e5: 8e:75:7e:10:4a:a9:f4:23:a5:0b:78:2b:c7:9c:d1: bb:87:21:db:39:f7:81:51:b8:b8:75:4d:58:35:f8: 80:1d:d4:cb:20:c7:bb:d8:cf:e8:32:d6:a1:bb:14: 01:ae:52:8a:1e:de:ce:3b:d9:2f:75:03:f7:7b:9d: 0f:38:f2:2f:50:fd:2c:23:d9:ea:93:f9:4c:32:ef: ce:2e:d6:37:eb:3f:d9:6f:93:c1:fe:6b:e7:e8:96: 62:06:c4:54:4d:f3:74:bf:b6:e2:01:33:a4:56:47: 7f:a3:33:a5:d8:f3:89:73:43:58:19:86:57:54:cc: a2:9c:b3:a0:3e:f3:dc:0b:7e:df:b9:fb:11:d7:ae: 95:22:a8:8b:ef:9b:d8:f6:59:45:4b:cd:d3:37:d5: 23:6d:41:87:43:00:04:7b:a2:a7:50:b5:6c:20:0e: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:06:70:16:BC:3A:E9:5C:EE:20:DC:6E:D6:2F:28:B7:0F:FA:DB:E3 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4f:de:c0:6a:05:ab:bb:54:63:ac:74:70:9c:10:55:65:f6: 83:1f:d4:1c:08:91:df:1c:d0:15:c8:f4:ae:a0:ae:ec:7a:1a: cb:f3:fb:2a:3e:2a:2e:c7:57:31:43:a2:ac:d5:9a:4e:43:d3: 0a:3c:b3:89:cd:31:6a:30:a6:d6:e2:f5:eb:a4:8a:ef:fe:b3: b4:81:85:9f:bb:d1:b2:ed:f8:c8:d8:90:88:67:12:7d:8c:55: c7:22:a3:84:0d:6a:32:b9:ee:47:af:41:4f:a4:76:55:b7:45: 62:24:b9:7e:ed:08:bd:ec:6e:66:71:fb:9b:f9:6f:7b:49:86: 19:30:73:35:1e:a5:c7:95:c8:55:75:66:a1:d0:2e:dc:29:4e: 5e:76:35:26:1f:25:c5:31:24:45:a2:75:3c:f6:5f:45:56:d3: 52:91:77:42:41:b2:0d:d3:66:4b:94:31:a0:5a:b1:d5:61:5a: 6a:81:12:ee:49:21:fc:2c:e3:87:b8:44:b4:c2:f6:be:ce:b0: e4:ec:e8:9f:fc:9a:a0:9c:10:da:65:ca:49:c0:9f:08:5a:89: 12:9a:72:17:39:5b:98:62:50:81:4e:6d:bc:91:6d:19:45:0b: 78:33:8a:ce:c8:d2:62:81:f6:e2:72:51:84:4f:d0:f9:94:0e: 44:9c:5d:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjYwNTIwMjE0NDQwWhcNMjYwNTI3MjE0NDQwWjAYMRYwFAYD VQQDEw02YTBlMmI0OC04ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoS2p6lNvg9qFr5NOWRWCQke0YIqVluo7MGxC6G6R3jGWy0NkVmtxmJUSmuni nkcLNNbbq8gqPuOScEedSOGKMcza7O+VH8XV+vHhvvzzTUsM2td9F14vVeWOdX4Q Sqn0I6ULeCvHnNG7hyHbOfeBUbi4dU1YNfiAHdTLIMe72M/oMtahuxQBrlKKHt7O O9kvdQP3e50POPIvUP0sI9nqk/lMMu/OLtY36z/Zb5PB/mvn6JZiBsRUTfN0v7bi ATOkVkd/ozOl2POJc0NYGYZXVMyinLOgPvPcC37fufsR166VIqiL75vY9llFS83T N9UjbUGHQwAEe6KnULVsIA7QQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQGcBa8 Oulc7iDcbtYvKLcP+tvjMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY0/ewGoFq7tUY6x0cJwQVWX2gx/UHAiR3xzQFcj0rqCu7Hoay/P7Kj4qLsdX MUOirNWaTkPTCjyzic0xajCm1uL166SK7/6ztIGFn7vRsu34yNiQiGcSfYxVxyKj hA1qMrnuR69BT6R2VbdFYiS5fu0IvexuZnH7m/lve0mGGTBzNR6lx5XIVXVmodAu 3ClOXnY1Jh8lxTEkRaJ1PPZfRVbTUpF3QkGyDdNmS5QxoFqx1WFaaoES7kkh/Czj h7hEtML2vs6w5Ozon/yaoJwQ2mXKScCfCFqJEppyFzlbmGJQgU5tvJFtGUULeDOK zsjSYoH24nJRhE/Q+ZQORJxd7w== -----END CERTIFICATE-----Generated at Thu May 21 10:58:26 2026 by rpki-client