$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: LSuhW8XQW4l2+OVKQRJkfv6Oil5HZXqmvcPdD0Bjwrw= Subject key identifier: 77:24:9E:AC:6E:F4:8D:1D:D8:95:B8:6D:24:CA:A5:23:E8:68:16:17 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 0197 Signing time: Fri 29 May 2026 04:18:39 +0000 Manifest this update: Fri 29 May 2026 04:18:39 +0000 Manifest next update: Fri 05 Jun 2026 04:18:39 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: Whw33zkm7GNwrC3E1VEfeQG3cchYPniDmboFTGnO/2Q=) 2: A90FC92A4D9A11F1BFB1418A8AEE528E.roa (hash: MJ/jjFfOeUDxm6Ef+BKKNAOkmjTDqHRrvT96SWW9MdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 04:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: May 29 04:18:39 2026 GMT Not After : Jun 5 04:18:39 2026 GMT Subject: CN=6a19139f-18aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:af:ec:8f:41:88:4d:57:52:93:b8:93:fd: ee:32:89:4f:89:8a:d9:4b:62:74:36:8b:01:fd:03: 29:86:86:f7:b6:ef:a2:10:8d:ed:df:aa:74:07:c8: ed:3f:76:0e:51:7d:d2:93:88:50:04:7c:2b:cb:67: e5:86:6b:70:34:4a:76:12:c4:93:1e:4f:01:ab:55: f8:e7:e6:ce:5a:e6:1f:b9:e5:35:f4:1d:ab:30:1d: cc:51:fa:5c:b3:3b:99:79:86:5a:e9:94:c7:24:19: c6:7e:e0:3b:1e:11:52:b6:5a:d7:6d:fb:a8:d0:92: 2e:f3:af:14:6f:80:4d:6f:16:97:69:ff:7a:77:6f: 2b:f5:f5:b8:b1:32:3c:c7:c2:76:2e:9a:98:1c:39: 8f:26:38:4b:7e:07:7f:27:3f:99:95:93:16:88:ef: 51:c3:86:31:76:f9:44:44:5f:02:43:3b:93:22:d9: e2:28:3a:b3:f6:f1:34:61:e2:e4:61:95:1f:e7:b7: f7:69:ad:cc:c8:d8:eb:e4:74:d3:fd:4e:a7:65:b0: 1c:79:a7:9d:1c:03:8f:e5:50:b9:84:64:e9:f2:55: 2a:4f:56:2a:42:75:bc:a9:9c:fb:25:94:7e:12:34: eb:28:6a:68:af:81:bf:d7:f1:81:b6:d0:3e:37:2d: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:9E:AC:6E:F4:8D:1D:D8:95:B8:6D:24:CA:A5:23:E8:68:16:17 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:64:84:c1:fe:11:eb:1b:da:af:ee:77:0c:70:61:ae:0c:28: 31:e1:51:24:75:64:50:9f:5f:e4:f4:00:d5:90:94:be:3c:1d: 32:01:10:c2:3d:1c:ad:7a:64:96:9d:fb:2b:93:bb:c6:82:05: 01:c4:12:64:99:e4:2f:fe:a7:98:61:c1:ae:ec:0a:f8:5b:56: 4b:4b:d0:7c:f0:5c:a9:cc:13:eb:2c:b7:52:d7:5e:ac:37:d5: ea:48:5a:b6:19:d8:25:9e:e7:68:a9:25:3d:bc:98:6f:c1:a2: a3:c9:f1:06:81:59:b5:e6:2f:db:8c:38:13:ae:e1:b1:4c:08: 2a:38:6c:84:e2:be:a0:7d:cc:2f:56:aa:01:cd:50:91:78:28: 36:a6:3d:7d:92:be:3d:c8:31:3c:5d:72:09:dd:65:2d:47:83: c8:69:f1:7f:b4:92:98:ac:8a:52:44:28:4a:c4:d6:4a:ca:91: da:e5:de:21:c4:53:af:30:bd:e6:17:4e:3b:7a:66:78:21:f3: 9e:19:a9:06:f6:8b:d1:d5:fd:e8:08:77:67:89:86:ff:43:93: ee:71:cf:b1:30:b4:aa:c7:1c:83:c2:b4:ad:32:96:14:95:77: 19:66:37:6c:09:1e:28:83:53:87:71:61:93:2d:fc:d5:ec:f7: f2:e7:28:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjYwNTI5MDQxODM5WhcNMjYwNjA1MDQxODM5WjAYMRYwFAYD VQQDEw02YTE5MTM5Zi0xOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oOv7I9BiE1XUpO4k/3uMolPiYrZS2J0NosB/QMphob3tu+iEI3t36p0B8jt P3YOUX3Sk4hQBHwry2flhmtwNEp2EsSTHk8Bq1X45+bOWuYfueU19B2rMB3MUfpc szuZeYZa6ZTHJBnGfuA7HhFStlrXbfuo0JIu868Ub4BNbxaXaf96d28r9fW4sTI8 x8J2LpqYHDmPJjhLfgd/Jz+ZlZMWiO9Rw4YxdvlERF8CQzuTItniKDqz9vE0YeLk YZUf57f3aa3MyNjr5HTT/U6nZbAceaedHAOP5VC5hGTp8lUqT1YqQnW8qZz7JZR+ EjTrKGpor4G/1/GBttA+Ny32YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcknqxu 9I0d2JW4bSTKpSPoaBYXMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAImSEwf4R6xvar+53DHBhrgwoMeFRJHVkUJ9f5PQA1ZCUvjwdMgEQwj0crXpk lp37K5O7xoIFAcQSZJnkL/6nmGHBruwK+FtWS0vQfPBcqcwT6yy3UtderDfV6kha thnYJZ7naKklPbyYb8Gio8nxBoFZteYv24w4E67hsUwIKjhshOK+oH3ML1aqAc1Q kXgoNqY9fZK+PcgxPF1yCd1lLUeDyGnxf7SSmKyKUkQoSsTWSsqR2uXeIcRTrzC9 5hdOO3pmeCHznhmpBvaL0dX96Ah3Z4mG/0OT7nHPsTC0qsccg8K0rTKWFJV3GWY3 bAkeKINTh3Fhky381ez38ucoeQ== -----END CERTIFICATE-----Generated at Fri May 29 17:06:35 2026 by rpki-client