$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: YiitF8L5Ehd7gZTe2Khf69fWDDqzQRzOGdUz2ns5FoY= Subject key identifier: DA:11:05:63:40:C5:4A:EB:2F:B6:3F:BB:05:13:CD:E5:1A:17:9B:45 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 12F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1B9C Signing time: Wed 20 May 2026 17:02:11 +0000 Manifest this update: Wed 20 May 2026 17:02:11 +0000 Manifest next update: Wed 27 May 2026 17:02:11 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: 02/1iB8pGZ2xdMJ/sJvu+LReecsZQ9WwtrQEjsVEiZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4855 (0x12f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: May 20 17:02:11 2026 GMT Not After : May 27 17:02:11 2026 GMT Subject: CN=6a0de913-7c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:24:7a:de:97:13:76:8d:1a:ef:21:ce:bb: 67:b3:e5:3e:62:46:03:6d:1e:1f:c3:b6:5c:b4:85: e8:4e:82:51:04:4d:5f:5d:e5:7a:6b:69:33:1a:d5: 80:0a:3a:4f:14:7e:8f:84:8e:92:3e:cf:a4:6b:cc: 17:b9:2f:c3:aa:db:da:ab:e7:f2:43:13:42:6d:4a: 26:fb:24:f9:2d:ad:2e:68:eb:41:c8:cd:4c:47:de: 01:d9:db:58:eb:e0:22:ec:8d:45:ac:b9:7b:36:3f: ed:4a:e3:7f:4d:8e:ad:1f:32:2e:b7:b1:89:37:4b: b3:69:62:86:19:a1:c8:ad:ef:7b:65:86:4d:f9:11: 10:f7:2d:8e:f3:f2:92:e4:86:70:2f:84:de:4f:cc: 26:2c:91:f3:ff:44:aa:1f:b6:9f:9b:45:90:41:42: 85:22:2a:07:60:43:a1:dd:20:c7:35:81:52:8f:b3: 5a:c8:a7:42:db:c1:86:9b:90:60:f6:a4:d7:5c:20: fb:fe:80:ec:c0:9e:20:f0:28:7e:7d:3e:96:60:c3: b4:be:b5:70:51:6d:92:db:51:dc:eb:e7:9f:e0:70: d3:d5:98:26:b2:1b:61:81:07:c8:3e:d6:fb:8a:6e: 07:ee:2f:5b:1f:0e:5e:08:d8:2c:c9:05:26:e2:61: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:05:63:40:C5:4A:EB:2F:B6:3F:BB:05:13:CD:E5:1A:17:9B:45 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e9:16:33:a3:cf:25:82:af:6f:5c:2a:af:63:77:f6:c0:1a: 9c:d4:be:17:a6:c4:9f:df:00:1f:75:fe:18:fd:05:b3:d1:65: 07:cd:fa:53:79:32:d4:69:9e:e4:e8:08:7b:f4:b6:f5:12:32: 51:98:2e:9c:8e:c9:d4:67:c5:2c:be:fb:4a:e5:ff:81:04:33: 81:05:c9:19:10:0e:72:37:e4:fc:f9:2b:51:1b:79:a2:63:4b: ae:f6:80:01:34:48:ca:8f:4b:9c:23:da:65:34:e9:af:44:9f: 17:3c:da:f8:cb:1e:36:c6:8a:5b:0a:50:2d:51:4e:c7:8d:15: 73:9f:46:fe:d7:6c:09:ea:64:54:bd:ef:8f:ea:ad:b6:9f:e6: 75:66:39:27:ed:53:e2:7a:bd:40:f2:eb:10:ef:99:b3:92:fa: 05:a6:99:27:d3:0b:dd:39:72:0d:12:eb:ce:c8:c3:77:24:2b: c1:7a:12:23:10:cb:05:96:f7:0a:ba:ff:16:c8:a0:34:ee:4a: 4b:b0:a4:7c:c4:e7:04:79:85:b6:7e:b3:a5:ad:56:09:a4:f1: 29:58:65:e0:c2:f0:f7:76:37:81:0f:15:a2:72:8b:86:40:03: b5:a4:32:59:a2:5a:a2:cc:09:21:74:80:76:68:06:4c:b6:22: d2:3d:bd:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjYwNTIwMTcwMjExWhcNMjYwNTI3MTcwMjExWjAYMRYwFAYD VQQDEw02YTBkZTkxMy03YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleoket6XE3aNGu8hzrtns+U+YkYDbR4fw7ZctIXoToJRBE1fXeV6a2kzGtWA CjpPFH6PhI6SPs+ka8wXuS/Dqtvaq+fyQxNCbUom+yT5La0uaOtByM1MR94B2dtY 6+Ai7I1FrLl7Nj/tSuN/TY6tHzIut7GJN0uzaWKGGaHIre97ZYZN+REQ9y2O8/KS 5IZwL4TeT8wmLJHz/0SqH7afm0WQQUKFIioHYEOh3SDHNYFSj7NayKdC28GGm5Bg 9qTXXCD7/oDswJ4g8Ch+fT6WYMO0vrVwUW2S21Hc6+ef4HDT1ZgmshthgQfIPtb7 im4H7i9bHw5eCNgsyQUm4mE12QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoRBWNA xUrrL7Y/uwUTzeUaF5tFMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbOkWM6PPJYKvb1wqr2N39sAanNS+F6bEn98AH3X+GP0Fs9FlB836U3ky1Gme 5OgIe/S29RIyUZgunI7J1GfFLL77SuX/gQQzgQXJGRAOcjfk/PkrURt5omNLrvaA ATRIyo9LnCPaZTTpr0SfFzza+MseNsaKWwpQLVFOx40Vc59G/tdsCepkVL3vj+qt tp/mdWY5J+1T4nq9QPLrEO+Zs5L6BaaZJ9ML3TlyDRLrzsjDdyQrwXoSIxDLBZb3 Crr/FsigNO5KS7CkfMTnBHmFtn6zpa1WCaTxKVhl4MLw93Y3gQ8VonKLhkADtaQy WaJaoswJIXSAdmgGTLYi0j29Jg== -----END CERTIFICATE-----Generated at Thu May 21 11:15:25 2026 by rpki-client