$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: jHfgYzQgwDzA8v1CGgQEdrorK1IDSkArT0WeE81jr/c= Subject key identifier: CA:D0:64:78:B5:1D:40:59:81:CC:5C:75:DC:2D:57:E9:1A:C9:0E:AB Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D56 Signing time: Thu 14 May 2026 18:02:33 +0000 Manifest this update: Thu 14 May 2026 18:02:32 +0000 Manifest next update: Thu 21 May 2026 18:02:32 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: LpLrIgOnkIvm1LBEtfFwwqDT7X+toblOe0CLzFi24XU=) 2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) 4: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 18:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3453 (0xd7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: May 14 18:02:32 2026 GMT Not After : May 21 18:02:32 2026 GMT Subject: CN=6a060e38-acbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:54:31:dc:1a:06:11:12:1c:84:11:87:3e: 70:b4:a5:90:d7:41:18:78:6d:4e:ca:a7:ee:e4:2c: 83:7a:9f:9e:2c:63:7e:1a:3a:52:6c:6d:94:e8:5c: ae:8f:e8:7f:98:87:02:08:42:d0:ef:79:8b:58:f4: 88:34:8d:87:10:e2:d6:65:69:ac:a6:04:43:d5:66: 5b:93:84:76:37:de:32:4f:3b:88:fa:c9:0c:6c:0f: 59:e9:52:e7:87:f5:44:bb:19:53:8d:35:da:8c:c3: a2:fe:89:7d:03:85:e0:ea:e2:54:5f:95:5a:2e:60: 2b:53:dd:77:31:00:b0:28:8e:ba:30:2b:c7:ca:89: 3c:d8:21:01:a3:26:d5:b2:9c:fe:bf:b7:f2:0c:b6: ff:be:11:0d:b7:68:2b:e3:bd:02:fd:db:d8:fd:3d: bf:d5:0c:ca:f4:a7:73:d1:b7:5a:92:3b:66:91:a6: 5e:af:35:5c:1c:e6:cb:10:aa:28:67:38:0b:78:b8: c2:6f:93:3a:3e:33:d1:d4:48:7c:1f:f5:f5:96:b2: 47:cf:c5:5e:79:1d:ea:6b:8f:9d:5a:6e:9f:7e:11: 89:64:ed:54:0a:1c:59:cb:cd:b5:31:d2:a2:59:c0: 95:d8:52:25:6a:5a:74:3a:ca:2b:0d:cc:38:14:50: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:64:78:B5:1D:40:59:81:CC:5C:75:DC:2D:57:E9:1A:C9:0E:AB X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:35:26:77:36:ac:21:86:2a:5b:fa:79:28:41:f8:9c:49:a9: 87:78:90:bf:b4:4c:16:85:b0:e0:74:d0:5d:ef:b0:15:ae:27: 55:40:0e:33:41:4f:9d:08:c3:22:22:a0:30:b9:79:18:7c:aa: 12:1c:67:93:6b:73:a7:ff:ed:76:7b:10:b0:72:96:0d:10:9e: ec:1a:76:d3:c5:15:34:17:d3:38:44:11:f8:4a:c3:40:74:26: 34:f8:91:95:5d:8c:09:37:70:f7:58:71:17:2c:48:e0:57:96: fb:04:b8:d6:91:bf:59:f8:08:75:ab:5b:b2:a7:80:1b:76:cc: ee:c3:22:02:ff:6d:17:ea:81:0d:42:e1:f2:68:e1:77:23:5a: 05:ca:88:dd:d7:00:d4:c1:45:29:ed:34:f0:f7:f5:c4:da:b2: d9:a3:ec:0c:38:48:35:f7:28:ed:77:9f:78:42:85:26:dd:91: bf:e0:5e:5e:b7:2f:95:2f:70:bb:be:69:13:6b:6e:75:36:9d: d4:cc:3e:ec:eb:ee:4e:cd:1f:1b:a7:66:74:ba:d7:72:7c:2e: 07:24:72:2f:89:87:64:00:e2:56:8f:55:9b:5b:6b:0f:f7:83: f6:9d:29:15:43:e9:7f:25:4b:83:64:bd:73:b5:f2:82:51:23: 36:37:b5:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNTE0MTgwMjMyWhcNMjYwNTIxMTgwMjMyWjAYMRYwFAYD VQQDEw02YTA2MGUzOC1hY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/NUMdwaBhESHIQRhz5wtKWQ10EYeG1Oyqfu5CyDep+eLGN+GjpSbG2U6Fyu j+h/mIcCCELQ73mLWPSINI2HEOLWZWmspgRD1WZbk4R2N94yTzuI+skMbA9Z6VLn h/VEuxlTjTXajMOi/ol9A4Xg6uJUX5VaLmArU913MQCwKI66MCvHyok82CEBoybV spz+v7fyDLb/vhENt2gr470C/dvY/T2/1QzK9Kdz0bdakjtmkaZerzVcHObLEKoo ZzgLeLjCb5M6PjPR1Eh8H/X1lrJHz8VeeR3qa4+dWm6ffhGJZO1UChxZy821MdKi WcCV2FIlalp0OsorDcw4FFCqywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrQZHi1 HUBZgcxcddwtV+kayQ6rMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALDUmdzasIYYqW/p5KEH4nEmph3iQv7RMFoWw4HTQXe+wFa4nVUAOM0FPnQjD IiKgMLl5GHyqEhxnk2tzp//tdnsQsHKWDRCe7Bp208UVNBfTOEQR+ErDQHQmNPiR lV2MCTdw91hxFyxI4FeW+wS41pG/WfgIdatbsqeAG3bM7sMiAv9tF+qBDULh8mjh dyNaBcqI3dcA1MFFKe008Pf1xNqy2aPsDDhINfco7XefeEKFJt2Rv+BeXrcvlS9w u75pE2tudTad1Mw+7OvuTs0fG6dmdLrXcnwuByRyL4mHZADiVo9Vm1trD/eD9p0p FUPpfyVLg2S9c7XyglEjNje10A== -----END CERTIFICATE-----Generated at Fri May 15 17:54:53 2026 by rpki-client