$ rpki-client -vvf rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft File: haeIySXAhvfi-8AHHZ6SmOwCPlk.mft (raw, json) Hash identifier: tws+h0sk+YcpqQR0zfgpazrh43m94RArxxhMftlQGIo= Subject key identifier: A6:F9:24:47:2F:70:F0:EA:FC:9E:85:3E:60:66:09:49:47:B0:36:B1 Authority key identifier: 85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59 Certificate issuer: /CN=A9163FDD/serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft Manifest number: 0A Signing time: Tue 19 May 2026 09:02:45 +0000 Manifest this update: Tue 19 May 2026 09:02:44 +0000 Manifest next update: Tue 26 May 2026 09:02:44 +0000 Files and hashes: 1: haeIySXAhvfi-8AHHZ6SmOwCPlk.crl (hash: ypqd/LNHqprTbgfC4PYLm8LR6MGGEHcnpi0+G7l1uwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163FDD, serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59 Validity Not Before: May 19 09:02:44 2026 GMT Not After : May 26 09:02:44 2026 GMT Subject: CN=6a0c2735-e2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:f0:c1:44:be:1e:a4:eb:21:bd:dd:9b:dd: 69:73:a3:e1:1c:11:f3:c9:58:cb:c9:9f:ca:09:f6: b3:c6:5b:6e:00:5f:19:55:a9:23:86:8b:fe:71:43: 8b:04:c8:81:8b:d0:10:1a:37:d5:bf:14:2b:dc:a9: 24:7e:8b:f7:5f:3e:5b:94:37:31:a1:94:e2:01:8b: 1b:ee:a1:0a:e7:28:91:fc:9d:d4:bf:97:56:f0:e3: 70:91:b8:3d:57:28:79:7b:bf:0d:f4:b5:e0:27:e1: 60:a9:8d:52:83:07:fd:fe:2c:46:88:7e:e8:a1:b4: 05:34:af:66:45:55:49:41:6a:43:b0:6a:fc:2e:97: 57:df:5f:37:c1:0d:f8:b4:9f:79:eb:14:d3:e0:f2: 41:54:fd:d7:7d:74:82:57:0a:8b:08:b3:55:83:71: d2:39:d8:be:40:cd:33:3b:df:5a:58:67:8a:1f:74: 00:66:fe:0f:59:94:ad:2e:01:f2:73:22:87:d7:a7: fa:20:2d:2c:49:ce:38:40:fc:3a:f9:0f:6d:70:2d: bd:e1:c7:e8:94:0e:4a:fc:71:09:76:1c:8c:51:7d: 4c:95:80:a9:fe:11:b6:b5:90:f1:c3:ca:ee:e8:a1: b7:01:66:c5:65:47:e2:fa:20:a5:e3:e2:9f:08:8d: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F9:24:47:2F:70:F0:EA:FC:9E:85:3E:60:66:09:49:47:B0:36:B1 X509v3 Authority Key Identifier: keyid:85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:78:e1:96:0c:1a:c2:ba:2e:b7:24:16:02:87:96:16:d6:c5: 2f:ef:b2:07:34:a2:17:31:ac:b3:29:86:e0:33:70:9a:4b:48: d2:83:f0:78:c5:50:7a:75:bc:ff:bf:ca:2b:08:77:a6:e9:0b: fc:43:79:ad:da:b0:1d:b7:23:e0:3a:c7:c5:ef:a0:18:00:0b: 24:28:c1:c8:e2:9b:78:2e:1b:a3:87:05:95:22:9e:1f:fc:72: 37:12:6a:ef:e0:c5:36:dd:63:35:74:1f:8c:d8:45:3a:0f:b2: ec:3b:5c:56:d8:c2:6b:e8:22:6e:dd:a2:07:e8:48:56:cb:ae: ff:b4:66:e7:7f:b5:d6:57:a7:8e:bc:24:f1:c3:ba:20:0b:b1: 2b:1d:74:ad:72:6a:82:e9:0e:aa:ad:63:24:0a:db:e7:d0:60: 35:72:b3:e5:59:66:69:ea:0d:82:78:81:3f:5f:47:36:13:d9: f9:d8:f9:d4:ca:c0:16:a7:b1:24:69:c0:2b:5d:f2:e3:be:7c: be:d5:6d:ca:a6:e7:4e:86:14:45:05:60:d3:fb:7a:25:ee:20: 62:4d:84:f1:ac:60:44:4b:8b:82:2e:ea:0c:a8:0e:4a:05:c8: 9a:ab:58:d2:6a:b5:78:c2:b9:eb:4c:fd:01:12:a3:bd:5d:8a: 71:ba:0e:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0ZERDExMC8GA1UEBRMoODVBNzg4QzkyNUMwODZGN0UyRkJDMDA3MUQ5RTkyOThF QzAyM0U1OTAeFw0yNjA1MTkwOTAyNDRaFw0yNjA1MjYwOTAyNDRaMBgxFjAUBgNV BAMTDTZhMGMyNzM1LWUyYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtoPDBRL4epOshvd2b3Wlzo+EcEfPJWMvJn8oJ9rPGW24AXxlVqSOGi/5xQ4sE yIGL0BAaN9W/FCvcqSR+i/dfPluUNzGhlOIBixvuoQrnKJH8ndS/l1bw43CRuD1X KHl7vw30teAn4WCpjVKDB/3+LEaIfuihtAU0r2ZFVUlBakOwavwul1ffXzfBDfi0 n3nrFNPg8kFU/dd9dIJXCosIs1WDcdI52L5AzTM731pYZ4ofdABm/g9ZlK0uAfJz IofXp/ogLSxJzjhA/Dr5D21wLb3hx+iUDkr8cQl2HIxRfUyVgKn+Eba1kPHDyu7o obcBZsVlR+L6IKXj4p8Ijdg9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpvkkRy9w 8Or8noU+YGYJSUewNrEwHwYDVR0jBBgwFoAUhaeIySXAhvfi+8AHHZ6SmOwCPlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRkRELzNGNDhCMEI0NDdC NTExRjFBMzJGNDUyQUFCODMzNzczL2hhZUl5U1hBaHZmaS04QUhIWjZTbU93Q1Bs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFlSXlTWEFodmZpLThBSEhaNlNtT3dDUGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RkRELzNGNDhCMEI0NDdCNTExRjFBMzJGNDUyQUFCODMzNzczL2hhZUl5U1hBaHZm aS04QUhIWjZTbU93Q1Bsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9eOGWDBrCui63JBYCh5YW1sUv77IHNKIXMayzKYbgM3CaS0jSg/B4xVB6dbz/ v8orCHem6Qv8Q3mt2rAdtyPgOsfF76AYAAskKMHI4pt4LhujhwWVIp4f/HI3Emrv 4MU23WM1dB+M2EU6D7LsO1xW2MJr6CJu3aIH6EhWy67/tGbnf7XWV6eOvCTxw7og C7ErHXStcmqC6Q6qrWMkCtvn0GA1crPlWWZp6g2CeIE/X0c2E9n52PnUysAWp7Ek acArXfLjvny+1W3KpudOhhRFBWDT+3ol7iBiTYTxrGBES4uCLuoMqA5KBciaq1jS arV4wrnrTP0BEqO9XYpxug6a -----END CERTIFICATE-----Generated at Thu May 21 09:34:22 2026 by rpki-client