$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json) Hash identifier: VLN4mGu8gOL5lqq2RFHq8Jnh9Rc7++zKJYyp1qVIH1Y= Subject key identifier: 2F:F6:43:22:EA:3B:D5:F8:3D:72:E0:BB:E8:06:8E:3A:51:70:E4:B6 Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft Manifest number: 42 Signing time: Thu 21 May 2026 08:42:19 +0000 Manifest this update: Thu 21 May 2026 08:42:19 +0000 Manifest next update: Thu 28 May 2026 08:42:19 +0000 Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: Tv4HNoOcx9tEn7YuKRb5UMOQI7c3CkH0qmtIdIG1VQk=) 2: A5E69774485411F1907D205D9E833773.roa (hash: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Validity Not Before: May 21 08:42:19 2026 GMT Not After : May 28 08:42:19 2026 GMT Subject: CN=6a0ec56b-c356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:3c:bb:08:e6:32:b5:a5:c7:a2:57:b5:c6: 97:69:cf:81:1c:19:cb:a7:a4:46:a4:19:20:8d:94: e6:81:15:d3:c5:1f:63:93:b8:75:c2:b4:0d:d6:d3: 6d:db:58:b8:9b:72:df:f6:c9:e7:09:b7:14:46:64: dc:fc:ff:d3:f4:32:d9:7f:f7:3f:31:92:ab:19:44: 87:fb:82:74:d4:3b:0e:da:ea:69:f9:04:50:dc:16: d4:b4:9a:45:e0:88:85:6d:be:a9:c2:e8:ce:41:5c: 99:d1:a5:60:ac:8f:fb:03:89:d7:ee:c7:49:74:90: 39:9b:fd:60:12:5e:fa:47:b4:34:c6:64:8f:0b:f5: 6a:78:81:cf:e2:d2:fd:f1:ef:56:39:bf:02:7a:68: 82:6d:d8:46:67:5e:fe:5e:df:d1:61:df:78:e9:0a: 14:64:4d:eb:44:92:96:41:17:d1:c8:16:0f:5f:dc: 46:e1:e6:60:b8:67:24:dd:83:59:6b:c0:74:c5:78: ae:d9:59:e6:e9:69:fb:0b:a3:87:08:4e:c8:10:86: de:d5:9c:cc:95:d7:aa:c6:f4:fd:f0:1c:d7:81:a8: b5:e1:30:0b:08:71:64:94:8a:5d:8c:5f:9d:07:0f: 69:cd:03:9b:72:9b:f8:72:ee:3a:78:7f:8e:f2:3e: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:43:22:EA:3B:D5:F8:3D:72:E0:BB:E8:06:8E:3A:51:70:E4:B6 X509v3 Authority Key Identifier: keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fa:a8:6b:99:17:cd:0a:76:e4:0e:bb:d2:49:af:75:f9:33: 09:c0:5d:1a:3b:0a:a9:f8:b2:eb:69:5d:a7:92:6b:15:d6:73: 2b:fe:0a:95:6c:7d:15:80:77:d6:7d:aa:52:35:cb:72:a1:77: 66:0b:1f:6b:29:c2:cf:c2:c0:b2:06:64:c4:25:81:3e:ad:6d: 7c:c7:37:93:c4:11:bb:15:fc:91:b7:c9:32:5d:40:58:71:20: ad:3f:13:4b:4e:16:cf:bb:94:f7:91:3c:4c:10:14:8e:c9:f6: 44:74:1d:b7:5c:eb:03:b7:d3:b6:49:ac:92:69:49:0f:d0:ef: 5c:44:af:84:b2:fd:44:78:58:48:cd:a3:1c:c0:d8:3c:ae:13: 7b:d6:b9:9b:68:e4:bc:7c:40:29:50:41:92:a8:62:83:33:c2: bf:2b:f6:6e:66:72:62:6a:0a:30:34:d5:77:9c:93:51:e6:aa: a4:ae:e3:38:8f:97:fb:69:96:c8:9f:e0:b8:bb:c5:62:88:4c: 21:a4:9b:46:52:c5:54:f1:a2:12:1c:24:b6:b4:8d:6a:9d:32: 06:8d:bf:ef:c3:6f:6f:ae:0d:24:2e:9a:96:bb:89:c9:92:1c: 3f:f8:22:e9:10:70:15:6a:4e:e3:98:58:71:33:d4:97:3f:c0: 4d:80:6f:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1 OTU4REMwNTAeFw0yNjA1MjEwODQyMTlaFw0yNjA1MjgwODQyMTlaMBgxFjAUBgNV BAMTDTZhMGVjNTZiLWMzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwBjy7COYytaXHole1xpdpz4EcGcunpEakGSCNlOaBFdPFH2OTuHXCtA3W023b WLibct/2yecJtxRGZNz8/9P0Mtl/9z8xkqsZRIf7gnTUOw7a6mn5BFDcFtS0mkXg iIVtvqnC6M5BXJnRpWCsj/sDidfux0l0kDmb/WASXvpHtDTGZI8L9Wp4gc/i0v3x 71Y5vwJ6aIJt2EZnXv5e39Fh33jpChRkTetEkpZBF9HIFg9f3Ebh5mC4ZyTdg1lr wHTFeK7ZWebpafsLo4cITsgQht7VnMyV16rG9P3wHNeBqLXhMAsIcWSUil2MX50H D2nNA5tym/hy7jp4f47yPgvPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL/ZDIuo7 1fg9cuC76AaOOlFw5LYwHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0M3QjBBM0JDMDBERTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFdu S3Z6UGp6a1hJcWxsWTNBVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAu+qhrmRfNCnbkDrvSSa91+TMJwF0aOwqp+LLraV2nkmsV1nMr/gqVbH0VgHfW fapSNctyoXdmCx9rKcLPwsCyBmTEJYE+rW18xzeTxBG7FfyRt8kyXUBYcSCtPxNL ThbPu5T3kTxMEBSOyfZEdB23XOsDt9O2SaySaUkP0O9cRK+Esv1EeFhIzaMcwNg8 rhN71rmbaOS8fEApUEGSqGKDM8K/K/ZuZnJiagowNNV3nJNR5qqkruM4j5f7aZbI n+C4u8ViiEwhpJtGUsVU8aISHCS2tI1qnTIGjb/vw29vrg0kLpqWu4nJkhw/+CLp EHAVak7jmFhxM9SXP8BNgG+M -----END CERTIFICATE-----Generated at Thu May 21 11:59:17 2026 by rpki-client