$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: RFCYMNwRwzvvxiJat9Cr1SisQk5dQJ+uLSvU8LJZOTE= Subject key identifier: 4B:C6:C1:71:85:CA:DC:7E:65:57:D1:9A:AB:58:FF:75:4D:B4:09:71 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 01F1 Signing time: Thu 21 May 2026 03:19:04 +0000 Manifest this update: Thu 21 May 2026 03:19:03 +0000 Manifest next update: Thu 28 May 2026 03:19:03 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: mFUrFWe5AWkOOLW7Ma3vxWRsEM9yjY20BiV2ds72qZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: May 21 03:19:03 2026 GMT Not After : May 28 03:19:03 2026 GMT Subject: CN=6a0e79a7-2df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:eb:68:d7:63:d9:47:15:06:d1:86:86:67: f9:04:79:ae:3a:02:c1:fb:14:68:d6:ae:1a:60:6a: 25:4c:26:11:c8:e2:ae:77:60:c9:9f:02:2c:e5:1d: d8:f6:68:e0:ff:09:bc:56:31:d0:17:12:a8:4a:79: c2:a4:53:a9:2e:95:cd:00:b8:b4:32:21:89:72:7b: b9:6f:ba:c8:e1:a8:5b:29:dc:1a:70:de:52:ad:08: 95:f8:58:af:f4:55:4e:df:bc:f6:cb:5d:ac:5f:85: 5a:4e:70:15:e0:d0:3f:b7:60:72:96:d3:88:0b:77: 6e:a1:5c:f1:77:d6:30:5b:f2:ab:fb:92:45:da:6b: d0:c0:51:82:6c:a7:de:33:52:2a:3f:7c:23:b9:57: 3e:c9:9d:66:ad:ea:a4:95:43:15:51:8c:aa:1f:fb: 85:7a:f9:66:b7:c2:80:b8:30:03:5b:bd:f7:c8:b7: 62:bb:95:40:12:b3:34:fe:e9:65:bd:98:fc:e4:42: 4b:53:45:6d:81:75:de:ab:d3:08:e8:d9:74:7c:d5: 5a:fe:38:c1:1f:da:c6:dc:21:cc:e0:db:8b:75:26: 01:bf:cf:1e:49:67:69:14:b5:1e:af:0c:4d:83:3d: 69:a5:f8:c5:4d:32:50:b9:dd:f8:fe:ad:c7:b2:0c: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:C1:71:85:CA:DC:7E:65:57:D1:9A:AB:58:FF:75:4D:B4:09:71 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2a:97:59:cf:08:b9:33:f7:45:ba:b8:d6:f7:1f:fc:83:d8: ce:6a:db:f5:fa:3c:c8:ca:69:2d:8d:be:04:0f:1a:21:2f:d0: 9c:dd:89:82:60:2b:2d:6f:64:eb:e4:d0:d8:63:81:df:cb:4e: b1:f2:9f:e8:71:81:96:0e:4b:25:95:69:b7:93:8d:80:b8:9d: 59:e2:0f:ce:9f:47:09:7d:8f:d9:44:06:4a:f6:02:d5:7a:93: 84:a1:67:c7:1f:ee:94:c7:5a:3a:a6:fe:3e:58:a8:60:46:59: 27:08:c6:d8:fa:4a:52:b7:6a:94:5c:8f:3d:80:e1:77:34:61: 96:fc:ba:e7:d9:4b:bc:54:5f:6d:95:4a:9e:10:4e:34:c5:8d: 06:fb:9a:ad:3a:84:dc:d3:6a:77:c6:ce:6a:1a:d8:21:7b:f3: f8:e7:73:b4:73:0e:29:0d:55:bb:15:c4:5a:23:f3:81:fe:57: 17:91:73:53:e2:fe:2e:d2:9c:3a:d3:83:3f:4e:f2:ea:2c:77: d7:cd:49:ba:bd:f8:bf:39:a8:48:05:db:c3:fc:9c:1b:3a:89: d8:d2:84:b3:c1:fa:5c:17:48:49:41:16:fa:32:82:0b:7a:0d: 5e:d9:7c:40:b8:44:49:38:39:ec:84:21:39:4e:e7:92:3f:13: 3f:f3:a9:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjYwNTIxMDMxOTAzWhcNMjYwNTI4MDMxOTAzWjAYMRYwFAYD VQQDEw02YTBlNzlhNy0yZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wzraNdj2UcVBtGGhmf5BHmuOgLB+xRo1q4aYGolTCYRyOKud2DJnwIs5R3Y 9mjg/wm8VjHQFxKoSnnCpFOpLpXNALi0MiGJcnu5b7rI4ahbKdwacN5SrQiV+Fiv 9FVO37z2y12sX4VaTnAV4NA/t2ByltOIC3duoVzxd9YwW/Kr+5JF2mvQwFGCbKfe M1IqP3wjuVc+yZ1mreqklUMVUYyqH/uFevlmt8KAuDADW733yLdiu5VAErM0/ull vZj85EJLU0VtgXXeq9MI6Nl0fNVa/jjBH9rG3CHM4NuLdSYBv88eSWdpFLUerwxN gz1ppfjFTTJQud34/q3HsgxCPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvGwXGF ytx+ZVfRmqtY/3VNtAlxMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALyqXWc8IuTP3Rbq41vcf/IPYzmrb9fo8yMppLY2+BA8aIS/QnN2JgmArLW9k 6+TQ2GOB38tOsfKf6HGBlg5LJZVpt5ONgLidWeIPzp9HCX2P2UQGSvYC1XqThKFn xx/ulMdaOqb+PlioYEZZJwjG2PpKUrdqlFyPPYDhdzRhlvy659lLvFRfbZVKnhBO NMWNBvuarTqE3NNqd8bOahrYIXvz+OdztHMOKQ1VuxXEWiPzgf5XF5FzU+L+LtKc OtODP07y6ix3181Jur34vzmoSAXbw/ycGzqJ2NKEs8H6XBdISUEW+jKCC3oNXtl8 QLhESTg57IQhOU7nkj8TP/Op0g== -----END CERTIFICATE-----Generated at Thu May 21 10:28:51 2026 by rpki-client