$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: v19jslw4FIkiKErovSfVkTheK6rgUtaSVDJAwI7qwRc= Subject key identifier: 5E:05:2C:BB:B5:92:AF:25:89:AF:C4:A4:A1:F2:19:CC:E1:D2:8F:6A Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 013B Signing time: Mon 01 Jun 2026 06:10:10 +0000 Manifest this update: Mon 01 Jun 2026 06:10:10 +0000 Manifest next update: Mon 08 Jun 2026 06:10:10 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: 4DmYY9oNOy40Va78bRYhH+kG/t6fT3FmcorgMsmnhRM=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Jun 1 06:10:10 2026 GMT Not After : Jun 8 06:10:10 2026 GMT Subject: CN=6a1d2242-8cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:62:e6:8a:1a:fd:1e:86:fe:04:80:60:64: 86:c2:2b:e2:4b:c7:73:ef:90:29:3d:a6:15:9b:37: 73:59:6a:cb:bc:6e:fe:3a:5b:95:73:f6:a8:9c:e1: 3c:5d:9b:9c:ed:91:05:2a:55:dc:cb:c6:62:0f:1b: 73:7b:43:ad:8b:66:f7:7a:cf:1e:50:71:14:f9:4a: 6a:8f:a8:c3:34:06:8b:2d:fb:cd:c0:8f:1f:b6:4b: 5b:05:3a:4c:4a:3f:76:c3:49:22:61:92:55:3a:3e: b3:89:f4:2d:e9:b3:57:e1:03:d0:ad:5b:f5:2f:4a: f0:a4:2c:79:c4:68:29:49:27:2d:89:9b:d2:14:6f: 69:d4:72:ef:9f:39:a7:ce:12:9d:39:81:13:92:8c: 9a:4e:a7:16:85:93:b4:45:57:30:4c:d8:ed:b8:94: 95:9f:5c:62:1a:42:3b:9a:72:b8:c1:e3:51:60:92: 66:a9:f9:a1:6b:5d:7b:ab:48:e3:49:a0:bf:73:3b: d4:b4:40:e4:24:96:f3:b7:2c:91:e6:c1:15:e7:4e: 2a:3a:f9:cb:3d:d5:8a:41:0c:9c:fc:e5:ec:17:d3: b4:ad:22:4b:e5:4f:9b:39:f7:b2:3f:59:8f:7b:ff: b8:7e:30:72:e2:e7:57:3f:de:d1:eb:1f:ce:2e:8c: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:05:2C:BB:B5:92:AF:25:89:AF:C4:A4:A1:F2:19:CC:E1:D2:8F:6A X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c1:d6:1a:39:34:b2:a8:4b:1a:ec:5d:75:b1:4e:a8:9f:b7: a1:f5:ed:96:d9:13:97:0b:c4:3c:7a:d2:af:45:e0:44:76:3c: 6c:05:ce:1b:66:32:b5:f5:57:a8:10:2b:1e:03:64:46:3e:99: 9f:7d:88:23:84:ed:88:6f:83:43:a3:1a:61:8b:a3:b5:08:9d: e5:a8:46:51:2b:bb:1c:c2:61:8e:4f:5e:ce:99:d1:ff:c6:da: 5a:31:50:0b:5d:94:e5:60:bb:1e:66:f2:11:ac:55:6d:32:47: b1:e6:a5:78:eb:3f:d3:18:da:c1:38:c1:a7:45:de:06:4d:aa: 51:aa:52:d6:a6:39:b4:aa:e5:83:c6:72:6d:7e:69:ef:44:44: 88:0e:51:04:19:17:f8:d5:aa:7a:49:45:e3:ce:ff:63:9f:5f: 3c:36:83:f0:85:dc:f1:ec:dc:59:f3:6e:20:e9:91:d2:8a:86: 07:4b:79:ce:9b:c7:3c:75:b2:29:0b:2d:52:27:9f:6e:5d:6a: 16:4d:98:68:47:dc:78:20:f0:3c:e5:0f:6b:11:b9:b7:1d:f7: 3d:5e:6a:05:fb:dd:67:35:d0:e8:a8:ab:f6:7e:1c:2b:37:d5: 99:ca:8d:28:25:d7:1a:1d:69:cc:a6:33:42:60:75:56:d9:57: c6:53:65:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjYwNjAxMDYxMDEwWhcNMjYwNjA4MDYxMDEwWjAYMRYwFAYD VQQDEw02YTFkMjI0Mi04Y2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/Fi5ooa/R6G/gSAYGSGwiviS8dz75ApPaYVmzdzWWrLvG7+OluVc/aonOE8 XZuc7ZEFKlXcy8ZiDxtze0Oti2b3es8eUHEU+Upqj6jDNAaLLfvNwI8ftktbBTpM Sj92w0kiYZJVOj6zifQt6bNX4QPQrVv1L0rwpCx5xGgpSSctiZvSFG9p1HLvnzmn zhKdOYETkoyaTqcWhZO0RVcwTNjtuJSVn1xiGkI7mnK4weNRYJJmqfmha117q0jj SaC/czvUtEDkJJbztyyR5sEV504qOvnLPdWKQQyc/OXsF9O0rSJL5U+bOfeyP1mP e/+4fjBy4udXP97R6x/OLoyMDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4FLLu1 kq8lia/EpKHyGczh0o9qMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmcHWGjk0sqhLGuxddbFOqJ+3ofXtltkTlwvEPHrSr0XgRHY8bAXOG2YytfVX qBArHgNkRj6Zn32II4TtiG+DQ6MaYYujtQid5ahGUSu7HMJhjk9ezpnR/8baWjFQ C12U5WC7HmbyEaxVbTJHsealeOs/0xjawTjBp0XeBk2qUapS1qY5tKrlg8ZybX5p 70REiA5RBBkX+NWqeklF487/Y59fPDaD8IXc8ezcWfNuIOmR0oqGB0t5zpvHPHWy KQstUiefbl1qFk2YaEfceCDwPOUPaxG5tx33PV5qBfvdZzXQ6Kir9n4cKzfVmcqN KCXXGh1pzKYzQmB1VtlXxlNlVg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:40 2026 by rpki-client