$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: aghC7XDNIIt+IWqiH6tltaJCnAmcseByuKcdol1Th1E= Subject key identifier: 42:C3:C4:D5:C2:43:28:4D:9B:EA:17:9A:82:47:3D:08:E5:A4:25:6E Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 020C Signing time: Thu 21 May 2026 03:09:10 +0000 Manifest this update: Thu 21 May 2026 03:09:09 +0000 Manifest next update: Thu 28 May 2026 03:09:09 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: ti125Tya7y1sAsWN1uKnQF6+s4I4AsUtrE2An5D5ORk=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: zruAs6tE4g/7xXgkpCpI/pMe53ngPwPFAHbDL/Vu+YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: May 21 03:09:09 2026 GMT Not After : May 28 03:09:09 2026 GMT Subject: CN=6a0e7755-d00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:0e:ae:3e:68:21:de:bd:81:01:78:d5:b8: da:7a:d1:4f:46:e0:e3:81:3d:a5:e5:68:40:8b:00: 41:b8:c4:d8:63:f4:8d:a2:7d:cc:af:49:2c:85:20: 9b:61:f6:f2:43:58:2c:e4:00:fd:b3:0b:43:59:50: 96:ce:15:fb:72:db:21:64:41:34:61:07:ac:fd:71: 6a:58:f9:fc:8c:ae:90:17:d8:57:cf:7b:1b:1c:57: c9:7b:e6:37:d7:ae:15:86:df:bc:53:17:ec:1c:33: 1f:a9:44:38:3f:c2:fb:e0:10:99:f8:5f:c0:67:4f: 4a:92:19:09:49:0e:5a:df:e2:47:d6:1c:da:f9:30: 0c:c0:2b:0a:02:d5:cc:9f:b2:ac:ed:d7:0e:08:55: 96:aa:23:12:cd:d1:29:66:da:3c:be:a6:35:90:90: 03:b2:a2:e2:73:40:ce:eb:b3:db:6d:5a:45:a5:0e: 86:cf:21:62:12:f3:37:b4:bf:b8:63:89:33:29:50: 59:38:fc:e3:75:70:32:4b:23:40:29:c6:9b:15:43: b5:02:92:e9:aa:67:d8:42:7c:b6:e2:6d:df:9d:d2: 68:17:d1:8f:b7:53:35:53:38:6f:da:86:dd:41:61: a7:44:51:37:e2:85:18:e7:91:a3:43:a9:35:2e:e2: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C3:C4:D5:C2:43:28:4D:9B:EA:17:9A:82:47:3D:08:E5:A4:25:6E X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b3:1c:fb:83:cc:65:72:77:2a:6f:4a:1d:06:c8:65:d3:ba: dd:70:e0:94:9f:fa:b9:02:f6:be:e9:2f:25:cc:ec:4f:81:f4: 39:31:71:29:7d:f8:0d:5a:5b:78:8e:55:17:9b:8c:b7:08:a0: 73:14:b4:94:b6:7c:6c:3e:30:01:01:d3:e6:6f:6f:92:76:58: eb:a6:a0:8d:a3:44:d7:ef:fb:97:c6:8a:4a:4e:0e:34:eb:d7: 28:41:cc:54:04:2b:a2:8f:b8:a7:02:2b:35:25:91:46:ef:02: 7b:4b:fa:7c:fa:57:2b:d0:1f:28:3a:63:54:83:8f:6e:fa:ff: 88:1f:97:74:5b:28:e3:75:7a:6c:21:64:0b:ed:38:90:22:30: 4b:e2:cf:ea:90:08:ac:55:24:69:7a:3c:95:af:55:d5:aa:7a: de:3d:2c:e4:3c:88:69:a7:d5:de:32:cb:b1:e9:2a:24:50:7f: f7:ea:44:54:8e:5b:18:b4:2f:f8:09:71:a0:5e:46:72:31:61: 87:b3:9c:7e:90:12:4c:e9:2b:6c:08:ae:20:1c:ec:fe:a2:88: de:74:52:34:fd:07:9f:c2:4a:69:0f:ad:13:b2:85:9e:81:0d: 29:ca:2e:77:41:b1:ed:87:f9:c2:2c:43:61:af:b5:e3:d1:1a: 49:38:ce:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjYwNTIxMDMwOTA5WhcNMjYwNTI4MDMwOTA5WjAYMRYwFAYD VQQDEw02YTBlNzc1NS1kMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZAOrj5oId69gQF41bjaetFPRuDjgT2l5WhAiwBBuMTYY/SNon3Mr0kshSCb YfbyQ1gs5AD9swtDWVCWzhX7ctshZEE0YQes/XFqWPn8jK6QF9hXz3sbHFfJe+Y3 164Vht+8UxfsHDMfqUQ4P8L74BCZ+F/AZ09KkhkJSQ5a3+JH1hza+TAMwCsKAtXM n7Ks7dcOCFWWqiMSzdEpZto8vqY1kJADsqLic0DO67PbbVpFpQ6GzyFiEvM3tL+4 Y4kzKVBZOPzjdXAySyNAKcabFUO1ApLpqmfYQny24m3fndJoF9GPt1M1Uzhv2obd QWGnRFE34oUY55GjQ6k1LuL6SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELDxNXC QyhNm+oXmoJHPQjlpCVuMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASrMc+4PMZXJ3Km9KHQbIZdO63XDglJ/6uQL2vukvJczsT4H0OTFxKX34DVpb eI5VF5uMtwigcxS0lLZ8bD4wAQHT5m9vknZY66agjaNE1+/7l8aKSk4ONOvXKEHM VAQroo+4pwIrNSWRRu8Ce0v6fPpXK9AfKDpjVIOPbvr/iB+XdFso43V6bCFkC+04 kCIwS+LP6pAIrFUkaXo8la9V1ap63j0s5DyIaafV3jLLsekqJFB/9+pEVI5bGLQv +AlxoF5GcjFhh7OcfpASTOkrbAiuIBzs/qKI3nRSNP0Hn8JKaQ+tE7KFnoENKcou d0Gx7Yf5wixDYa+149EaSTjOKQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:58 2026 by rpki-client