$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: 9B9wHgQKhXrZpgQpvP3SMYCvYE2Mpffb7jpIPw27riw= Subject key identifier: 4C:A2:2E:B7:D5:F1:0C:87:D5:1D:E1:CC:17:72:4C:FE:BE:0D:9D:03 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 0244 Signing time: Thu 21 May 2026 02:30:56 +0000 Manifest this update: Thu 21 May 2026 02:30:55 +0000 Manifest next update: Thu 28 May 2026 02:30:55 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: Ok1l3ICuPQy8f8oWSRe57qlIxGwS6MA6Y0oP/4BxhM0=) 2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: Oz1YYz2nVnKK3rUGjD/1v81WOTw67n/9ST3sUEa1Jz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: May 21 02:30:55 2026 GMT Not After : May 28 02:30:55 2026 GMT Subject: CN=6a0e6e5f-2d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:4f:11:5d:a4:c8:62:11:ee:f3:bd:8e:4e: be:76:73:4c:14:57:a8:51:fc:55:a5:69:81:a5:c0: d6:f6:e4:12:d7:b3:02:cd:eb:8c:e3:45:c6:2c:9d: 0a:0d:57:9d:80:9a:2f:2f:4f:86:bc:1c:0d:01:76: 5f:0e:90:97:ff:5a:72:85:34:91:3c:43:91:dc:95: bf:21:d7:ea:01:44:0d:7b:e8:1e:b3:6d:1a:6a:66: 61:9d:a1:00:61:89:6b:01:f6:84:cb:ef:a8:ec:e8: 42:2b:72:28:6d:cd:8c:ed:9e:6a:1d:9b:94:47:4e: 7a:67:36:e5:07:d5:71:60:d5:55:f3:3d:d4:7e:64: 47:93:1a:c5:73:75:1e:2b:a5:3f:09:86:07:8b:96: d8:f0:7f:4f:c3:39:6c:7f:b9:eb:c5:99:e3:02:94: b6:1e:4f:de:05:31:4a:a2:ef:15:2a:ad:7f:72:c6: 00:fb:2e:5b:7a:18:fe:7e:d0:e1:5a:19:b7:49:47: 24:58:44:d9:92:2e:45:1e:86:82:8f:7f:bb:61:34: e5:c1:f5:97:9d:10:98:44:ad:63:26:34:60:cf:ad: 40:2e:79:cd:58:d8:57:af:82:71:5c:4f:48:82:9d: 86:22:ce:9e:45:31:9d:37:12:fa:e1:3f:8d:10:63: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A2:2E:B7:D5:F1:0C:87:D5:1D:E1:CC:17:72:4C:FE:BE:0D:9D:03 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:00:2d:e5:38:cb:25:52:a5:77:f4:a5:7b:8f:d8:83:f3:2f: 6e:a3:38:3c:21:f3:ac:16:60:fd:38:ff:67:13:35:71:79:b6: b8:dc:24:63:65:8d:71:ed:c3:e1:2c:04:bc:a1:e8:bd:85:5f: f9:9c:84:21:95:35:39:c7:2f:ee:3f:ad:8b:95:af:ee:31:88: 98:39:8a:6a:a6:8e:3e:f6:2c:05:df:60:07:13:9b:2f:9f:ed: 39:e1:16:75:cc:05:e1:05:67:e7:16:1a:7a:22:6f:fa:3c:55: 52:90:fc:9e:93:c7:3b:bd:42:e7:5b:8d:3e:95:07:d4:a2:08: f5:12:d8:08:ed:8f:7a:d0:ef:70:3a:98:89:ef:b9:07:d5:b8: e2:13:5c:31:95:b9:df:5c:6a:61:d2:95:38:d2:27:81:82:c6: d2:70:8a:db:61:5a:bc:c0:36:7b:0f:ca:06:a0:5d:d8:b0:cc: 4c:e3:27:21:37:25:83:fd:39:11:b9:b6:09:44:13:15:a1:2c: 83:31:1c:4a:43:e0:ad:79:f7:37:fe:99:ca:f7:38:f0:65:e4: c1:51:64:00:70:c5:11:16:12:31:32:2a:fd:1f:32:6d:82:42: 70:bd:fe:ce:dd:dc:97:ec:df:7b:48:8f:bf:d7:bd:8f:21:ba: 57:de:36:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjYwNTIxMDIzMDU1WhcNMjYwNTI4MDIzMDU1WjAYMRYwFAYD VQQDEw02YTBlNmU1Zi0yZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzNPEV2kyGIR7vO9jk6+dnNMFFeoUfxVpWmBpcDW9uQS17MCzeuM40XGLJ0K DVedgJovL0+GvBwNAXZfDpCX/1pyhTSRPEOR3JW/IdfqAUQNe+ges20aamZhnaEA YYlrAfaEy++o7OhCK3Iobc2M7Z5qHZuUR056ZzblB9VxYNVV8z3UfmRHkxrFc3Ue K6U/CYYHi5bY8H9Pwzlsf7nrxZnjApS2Hk/eBTFKou8VKq1/csYA+y5behj+ftDh Whm3SUckWETZki5FHoaCj3+7YTTlwfWXnRCYRK1jJjRgz61ALnnNWNhXr4JxXE9I gp2GIs6eRTGdNxL64T+NEGM3bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyiLrfV 8QyH1R3hzBdyTP6+DZ0DMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFQAt5TjLJVKld/Sle4/Yg/MvbqM4PCHzrBZg/Tj/ZxM1cXm2uNwkY2WNce3D 4SwEvKHovYVf+ZyEIZU1Occv7j+ti5Wv7jGImDmKaqaOPvYsBd9gBxObL5/tOeEW dcwF4QVn5xYaeiJv+jxVUpD8npPHO71C51uNPpUH1KII9RLYCO2PetDvcDqYie+5 B9W44hNcMZW531xqYdKVONIngYLG0nCK22FavMA2ew/KBqBd2LDMTOMnITclg/05 Ebm2CUQTFaEsgzEcSkPgrXn3N/6Zyvc48GXkwVFkAHDFERYSMTIq/R8ybYJCcL3+ zt3cl+zfe0iPv9e9jyG6V942oA== -----END CERTIFICATE-----Generated at Thu May 21 09:30:22 2026 by rpki-client