$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json) Hash identifier: gXHdqmv4ix86m/WGYklHYNdzipyVxDEiAan4z8evIAA= Subject key identifier: 0E:25:78:03:E4:C4:FF:15:66:3F:E2:09:E5:BD:C3:8B:D3:F6:5E:10 Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0D39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft Manifest number: 0D25 Signing time: Wed 20 May 2026 18:10:23 +0000 Manifest this update: Wed 20 May 2026 18:10:23 +0000 Manifest next update: Wed 27 May 2026 18:10:23 +0000 Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: NyINs/7RwzFreissvDA96RSksgQB3BJ8xo1w4VSjAYU=) 2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: May 20 18:10:23 2026 GMT Not After : May 27 18:10:23 2026 GMT Subject: CN=6a0df90f-b594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:8d:0c:9e:a9:c1:ee:e1:f1:16:93:06:9c: 18:82:b2:19:04:00:5f:da:3b:6b:97:6f:bd:d5:d8: d6:a2:87:53:18:9d:2a:71:f0:ec:0b:05:85:f8:8b: 17:9b:c7:7e:2e:74:46:ab:ce:63:9d:e3:29:b1:bb: 18:42:13:9f:f3:c3:c6:11:cf:e3:81:39:d0:09:80: bc:d2:25:bd:3c:ad:cf:fc:64:40:8c:38:0d:cf:32: cf:65:e7:fb:39:7b:6e:4e:f0:a0:b1:43:9c:3c:77: 8c:e0:f8:12:96:2a:3b:b5:04:8c:e8:6d:66:72:17: ba:64:46:94:7a:ba:c1:35:e3:5c:d4:e0:41:50:a4: c1:f1:17:36:19:cf:a6:f2:22:fa:ce:1a:05:bb:0e: 21:c4:90:34:93:4f:42:00:75:b9:1f:04:19:ff:9b: 9b:25:a1:80:1d:4c:46:2a:de:d0:1c:41:48:ac:ad: a2:1b:26:f1:2c:99:80:1b:21:7b:06:c5:d9:c3:66: 1f:42:ba:2a:8a:b2:c2:dd:58:7a:07:41:aa:c4:73: 6e:dd:3a:e1:4b:d3:28:aa:4b:c4:02:21:83:91:df: 1d:3e:7f:a2:f9:f4:52:f7:3f:d1:6d:ea:96:48:96: fb:b1:a0:e4:fa:15:bc:86:dd:3c:81:fc:b3:9f:dd: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:78:03:E4:C4:FF:15:66:3F:E2:09:E5:BD:C3:8B:D3:F6:5E:10 X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8e:31:38:6c:0d:05:15:38:ed:4d:89:51:4d:f0:62:b1:8f: 0b:f3:bc:da:38:f5:c8:8d:91:06:00:ad:c5:19:b1:89:a4:da: 75:96:3d:cc:2e:f0:f9:04:d4:df:05:99:05:88:84:c1:70:60: 46:d5:ba:24:6c:5a:4c:d5:b2:dd:41:3d:62:cf:90:88:52:8c: 13:78:f5:bd:c1:84:38:67:28:8e:a6:02:bf:fc:e8:f3:56:c4: b1:f1:d0:a4:62:c7:23:15:cf:10:08:b7:0b:71:f8:4a:cb:0e: e5:0b:91:7d:c0:a5:64:b5:ec:ce:89:c6:06:65:96:75:cf:b5: 7e:cb:cd:d7:7a:67:1b:63:d7:c7:89:83:31:e4:2e:67:7e:2f: 93:8d:8c:e6:08:c8:86:f4:44:38:de:5d:97:f7:05:9a:fc:a1: 8f:0d:c3:b3:e0:e8:6f:3e:5d:92:f3:33:91:b1:d3:92:5f:a0: b2:72:df:6f:c0:78:0b:36:d4:5c:66:5e:2e:bb:64:03:fe:80: 16:d1:67:bd:20:6e:f2:60:91:88:10:25:3c:d6:ac:bb:a9:45: ab:75:c1:3d:46:a6:d4:80:15:54:55:6f:0d:ce:ad:a4:54:a0: d0:3b:e2:51:3a:5b:83:81:b6:bc:96:44:38:40:28:b3:c0:22: 42:26:a4:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjYwNTIwMTgxMDIzWhcNMjYwNTI3MTgxMDIzWjAYMRYwFAYD VQQDEw02YTBkZjkwZi1iNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1KNDJ6pwe7h8RaTBpwYgrIZBABf2jtrl2+91djWoodTGJ0qcfDsCwWF+IsX m8d+LnRGq85jneMpsbsYQhOf88PGEc/jgTnQCYC80iW9PK3P/GRAjDgNzzLPZef7 OXtuTvCgsUOcPHeM4PgSlio7tQSM6G1mche6ZEaUerrBNeNc1OBBUKTB8Rc2Gc+m 8iL6zhoFuw4hxJA0k09CAHW5HwQZ/5ubJaGAHUxGKt7QHEFIrK2iGybxLJmAGyF7 BsXZw2YfQroqirLC3Vh6B0GqxHNu3TrhS9MoqkvEAiGDkd8dPn+i+fRS9z/RbeqW SJb7saDk+hW8ht08gfyzn91hHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4leAPk xP8VZj/iCeW9w4vT9l4QMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALo4xOGwNBRU47U2JUU3wYrGPC/O82jj1yI2RBgCtxRmxiaTadZY9zC7w+QTU 3wWZBYiEwXBgRtW6JGxaTNWy3UE9Ys+QiFKME3j1vcGEOGcojqYCv/zo81bEsfHQ pGLHIxXPEAi3C3H4SssO5QuRfcClZLXszonGBmWWdc+1fsvN13pnG2PXx4mDMeQu Z34vk42M5gjIhvREON5dl/cFmvyhjw3Ds+Dobz5dkvMzkbHTkl+gsnLfb8B4CzbU XGZeLrtkA/6AFtFnvSBu8mCRiBAlPNasu6lFq3XBPUam1IAVVFVvDc6tpFSg0Dvi UTpbg4G2vJZEOEAos8AiQiaktw== -----END CERTIFICATE-----Generated at Thu May 21 10:28:46 2026 by rpki-client