$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: LiuhhDJyij4Op4QXGeECrEPvDKh0SYXU+3ykNRk3RVU= Subject key identifier: B1:BF:7E:FE:E1:50:26:98:DB:D6:4D:F5:0E:01:49:69:7B:C1:6F:23 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 038D Signing time: Thu 21 May 2026 00:54:24 +0000 Manifest this update: Thu 21 May 2026 00:54:24 +0000 Manifest next update: Thu 28 May 2026 00:54:24 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: lC7mY2VNqJYGusKKmIZikCXXdri6Ub2qSJ9seiQbz78=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: 7PiA24amlQbC4xMzeCaUVcFYdwUhnQswXY5VT6j4qP0=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 0wO7M/9BCooRsmuwMIusd2er4KtWGT09E2By+oSoPjc=) 4: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: iucFsGa6sBYZzutnis8jK4YsBoNemyskNEeO7TgdCQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: May 21 00:54:24 2026 GMT Not After : May 28 00:54:24 2026 GMT Subject: CN=6a0e57c0-a851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:43:bc:fd:28:61:7e:46:48:cd:aa:44:21: 1b:cf:25:37:94:96:0b:d5:08:1e:3d:de:c3:fe:18: 20:0b:f0:3a:07:b3:fe:07:ca:f7:1e:02:92:8f:79: e1:53:72:d5:a4:03:df:09:62:33:32:0d:69:c4:ec: ce:9f:aa:24:96:2c:66:d6:15:63:22:46:1a:e7:21: 78:f5:d0:b2:2a:21:9d:2b:61:e6:2a:1f:73:6b:fe: 9f:02:ab:6b:10:c8:56:71:f7:09:a0:42:19:b7:64: 8c:e8:b2:a1:bf:2b:bc:c1:2a:96:54:df:70:6c:00: c6:f7:0e:15:7a:65:36:d7:55:77:63:9a:f8:ff:b1: 4c:41:9d:24:50:88:87:04:84:1e:9b:0d:6d:83:49: 1b:e1:5f:74:13:d0:30:c1:41:f0:8c:92:ee:30:ba: 97:4d:0d:17:b3:8e:a9:d9:65:8a:62:e7:2d:ed:cf: 4c:7f:8d:cb:47:f4:39:a7:36:17:b5:6b:8d:d0:74: 2e:98:09:6b:55:4d:49:17:92:a8:dd:f3:36:cd:8a: 2c:8c:b9:fb:6d:73:3d:e2:9d:2c:7e:c9:eb:ba:92: 6c:33:97:eb:8e:50:b4:d8:86:e9:bf:62:ea:b3:29: 0a:c0:a5:20:27:c9:73:e2:83:79:8e:8f:96:0b:3b: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BF:7E:FE:E1:50:26:98:DB:D6:4D:F5:0E:01:49:69:7B:C1:6F:23 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6f:e6:8c:a3:7d:38:1e:1e:9a:6e:35:c9:17:9d:0b:06:82: 1e:28:82:4a:d6:af:bb:7a:30:1e:8f:98:df:0d:bc:bc:74:ea: fa:9b:ce:53:b8:55:35:d4:0e:ca:d0:43:ef:44:a6:05:a4:05: db:bd:6c:b9:17:bf:20:98:1d:86:0c:3b:4e:a5:47:e3:f6:48: 9c:2c:e2:09:87:57:fa:24:9e:68:af:bf:6b:25:1e:eb:8a:19: 7b:15:89:e8:07:eb:ea:e2:17:ec:34:20:9f:4e:a5:01:e9:c8: 0e:50:08:c6:5a:dc:b2:fa:df:8f:d0:31:3d:bb:93:9e:fc:4c: b3:04:e2:7d:fb:3b:d8:d0:d5:3a:f9:da:98:6e:86:d2:d1:84: 2c:d7:2b:c6:eb:e4:26:b9:ae:3c:a0:90:64:57:5c:ca:6a:9f: 8f:7d:c2:ae:78:ba:49:81:17:08:40:81:e4:7a:8b:46:91:2b: 0e:17:60:78:f0:72:1f:bd:a0:8c:d1:8f:5e:25:7d:7a:89:99: ed:c0:7f:4d:50:15:90:af:88:7c:74:c2:0f:34:59:ed:92:6d: 36:b6:f6:89:7c:99:24:e9:f4:d3:b6:be:f0:53:47:8a:db:99: 4f:14:79:81:48:ac:57:2a:31:60:d1:d6:bf:ee:0f:1a:31:06: e5:3b:ed:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjYwNTIxMDA1NDI0WhcNMjYwNTI4MDA1NDI0WjAYMRYwFAYD VQQDEw02YTBlNTdjMC1hODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYdDvP0oYX5GSM2qRCEbzyU3lJYL1QgePd7D/hggC/A6B7P+B8r3HgKSj3nh U3LVpAPfCWIzMg1pxOzOn6oklixm1hVjIkYa5yF49dCyKiGdK2HmKh9za/6fAqtr EMhWcfcJoEIZt2SM6LKhvyu8wSqWVN9wbADG9w4VemU211V3Y5r4/7FMQZ0kUIiH BIQemw1tg0kb4V90E9AwwUHwjJLuMLqXTQ0Xs46p2WWKYuct7c9Mf43LR/Q5pzYX tWuN0HQumAlrVU1JF5Ko3fM2zYosjLn7bXM94p0sfsnrupJsM5frjlC02Ibpv2Lq sykKwKUgJ8lz4oN5jo+WCzu04wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLG/fv7h UCaY29ZN9Q4BSWl7wW8jMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnG/mjKN9OB4emm41yRedCwaCHiiCStavu3owHo+Y3w28vHTq+pvOU7hVNdQO ytBD70SmBaQF271suRe/IJgdhgw7TqVH4/ZInCziCYdX+iSeaK+/ayUe64oZexWJ 6Afr6uIX7DQgn06lAenIDlAIxlrcsvrfj9AxPbuTnvxMswTiffs72NDVOvnamG6G 0tGELNcrxuvkJrmuPKCQZFdcymqfj33Crni6SYEXCECB5HqLRpErDhdgePByH72g jNGPXiV9eomZ7cB/TVAVkK+IfHTCDzRZ7ZJtNrb2iXyZJOn007a+8FNHituZTxR5 gUisVyoxYNHWv+4PGjEG5TvtWA== -----END CERTIFICATE-----Generated at Thu May 21 09:37:47 2026 by rpki-client