$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft File: AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json) Hash identifier: taiPAvlzUdhFUVBVb08iDQTm+3NPzFXtH4gbMBVY0lI= Subject key identifier: 8F:88:F2:AE:C4:7D:0A:C4:2A:E7:55:7D:28:D9:46:07:04:50:EE:07 Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B Certificate issuer: /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft Manifest number: 38 Signing time: Tue 19 May 2026 08:28:30 +0000 Manifest this update: Tue 19 May 2026 08:28:30 +0000 Manifest next update: Tue 26 May 2026 08:28:30 +0000 Files and hashes: 1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: FN+pO8o2GhvymFJdqsjPc6afZfiUEYMveP5bqMgTptE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B Validity Not Before: May 19 08:28:30 2026 GMT Not After : May 26 08:28:30 2026 GMT Subject: CN=6a0c1f2e-6392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:8f:45:40:c8:31:0c:f1:d6:78:02:43:78: 47:ea:9b:9e:a4:ee:c9:4b:b4:ed:70:f4:63:d9:08: 93:15:eb:4b:10:a4:22:c4:4b:82:9c:19:ce:dc:27: f3:a2:6a:7e:06:2e:e4:65:c5:77:59:e6:ce:82:cd: 86:ff:f1:b1:05:da:b3:ea:47:37:68:c3:72:95:46: 2f:62:3b:ea:a1:26:e8:2f:a1:08:2e:1d:26:96:c9: 72:46:b3:b0:d9:57:9f:78:44:4e:bf:dd:8e:e1:6e: 59:98:21:1b:6a:bb:1f:fc:98:51:9a:cf:72:57:e3: a7:66:4c:4a:cf:13:02:99:6e:1c:d5:85:2f:2c:db: 42:54:ef:11:f6:19:72:ab:bf:ea:e9:55:f2:0d:c6: 4c:bd:c3:b4:b7:74:ca:b4:91:08:e2:d1:0d:59:1f: 89:93:a2:63:9e:42:69:fd:32:24:89:6e:ab:82:b4: 52:a9:00:80:65:03:41:8c:db:81:38:c4:7c:3b:35: 32:41:82:a2:df:0a:27:26:2c:1d:3d:fe:88:95:7e: e2:9e:d2:3c:ec:75:c5:01:79:f6:55:3f:e2:fc:4c: 1c:12:b0:cc:da:ee:b5:cb:27:de:3b:83:8b:cd:d8: d4:f4:88:bd:bb:a9:9f:b8:c3:61:7e:89:5f:80:27: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:88:F2:AE:C4:7D:0A:C4:2A:E7:55:7D:28:D9:46:07:04:50:EE:07 X509v3 Authority Key Identifier: keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:77:53:99:f0:8b:57:7d:09:65:15:c6:39:17:ca:c9:76:31: c2:e3:8d:13:e9:9b:cc:76:73:3e:26:dd:9a:8f:38:12:a1:0d: b9:1b:e4:d7:60:42:18:40:6b:16:05:2a:f5:0a:55:f2:94:23: 3d:70:1e:cb:01:f2:5b:ab:bf:dd:a0:e8:18:8b:65:7c:67:61: ea:01:7c:04:b6:66:91:55:1b:64:f3:e5:ee:9c:97:7e:a9:68: e6:e0:20:00:6d:cb:ac:b5:ce:02:83:14:2d:26:8d:e5:84:e3: 94:23:3f:94:a1:92:a7:0a:4c:6b:77:2b:13:20:9f:b9:10:67: d9:08:98:54:41:b5:07:69:f5:80:f1:00:99:a2:c4:80:41:eb: 2e:d3:d7:ac:f4:03:70:9a:c2:38:2d:f3:00:f2:de:b6:5f:ce: 25:0c:20:ff:df:c8:40:85:b4:be:fa:1a:bf:7d:98:59:19:e4: 3f:b7:58:a2:66:64:de:40:66:01:9d:fa:1c:1f:a8:aa:b2:4a: 4e:47:ff:8a:dc:d2:6a:10:b5:6e:21:f1:20:78:91:3d:9f:59: 53:f0:ff:ab:2a:b8:cf:50:04:2a:d4:42:9c:aa:bd:ce:26:d8: 5f:f1:14:e0:24:16:83:87:d8:3d:05:8a:8f:6c:ae:da:16:89: 3a:7f:cd:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODA2NDExMC8GA1UEBRMoMDJGQjQwRjVGMzRDRjJFNTdDMjE0RjBDRDcxNDFCNEQ4 REE0MkI2QjAeFw0yNjA1MTkwODI4MzBaFw0yNjA1MjYwODI4MzBaMBgxFjAUBgNV BAMTDTZhMGMxZjJlLTYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpj49FQMgxDPHWeAJDeEfqm56k7slLtO1w9GPZCJMV60sQpCLES4KcGc7cJ/Oi an4GLuRlxXdZ5s6CzYb/8bEF2rPqRzdow3KVRi9iO+qhJugvoQguHSaWyXJGs7DZ V594RE6/3Y7hblmYIRtqux/8mFGaz3JX46dmTErPEwKZbhzVhS8s20JU7xH2GXKr v+rpVfINxky9w7S3dMq0kQji0Q1ZH4mTomOeQmn9MiSJbquCtFKpAIBlA0GM24E4 xHw7NTJBgqLfCicmLB09/oiVfuKe0jzsdcUBefZVP+L8TBwSsMza7rXLJ947g4vN 2NT0iL27qZ+4w2F+iV+AJ2ajAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj4jyrsR9 CsQq51V9KNlGBwRQ7gcwHwYDVR0jBBgwFoAUAvtA9fNM8uV8IU8M1xQbTY2kK2sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MDY0L0YwQUY4NUU0MDI0 NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVWOElVOE0xeFFiVFkya0sy cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQXZ0QTlmTk04dVY4SVU4TTF4UWJUWTJrSzJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MDY0L0YwQUY4NUU0MDI0NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVW OElVOE0xeFFiVFkya0sycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVd1OZ8ItXfQllFcY5F8rJdjHC440T6ZvMdnM+Jt2ajzgSoQ25G+TXYEIYQGsW BSr1ClXylCM9cB7LAfJbq7/doOgYi2V8Z2HqAXwEtmaRVRtk8+XunJd+qWjm4CAA bcustc4CgxQtJo3lhOOUIz+UoZKnCkxrdysTIJ+5EGfZCJhUQbUHafWA8QCZosSA Qesu09es9ANwmsI4LfMA8t62X84lDCD/38hAhbS++hq/fZhZGeQ/t1iiZmTeQGYB nfocH6iqskpOR/+K3NJqELVuIfEgeJE9n1lT8P+rKrjPUAQq1EKcqr3OJthf8RTg JBaDh9g9BYqPbK7aFok6f806 -----END CERTIFICATE-----Generated at Thu May 21 10:14:47 2026 by rpki-client