$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: i+tl8TpzQWMmDxau5+D8SJJBbsPfjgrMxLo21EkJwuA= Subject key identifier: 69:CE:CF:BD:28:F7:11:94:4D:35:E7:35:91:DA:93:04:8B:92:2E:E4 Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 020F Signing time: Thu 14 May 2026 19:38:52 +0000 Manifest this update: Thu 14 May 2026 19:38:52 +0000 Manifest next update: Thu 21 May 2026 19:38:52 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: 5S2VQMuVgb3/jUcoiKXfJJa8tAqzposldmiuwmz0eNM=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 19:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: May 14 19:38:52 2026 GMT Not After : May 21 19:38:52 2026 GMT Subject: CN=6a0624cc-18f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:c1:3f:0d:16:1d:82:46:29:d5:fc:fa:c6: 9a:04:59:9b:29:81:ce:73:91:e3:90:30:38:de:56: a2:d5:05:ba:74:96:4f:9e:ec:e1:e5:f4:65:38:e6: 0a:38:78:5b:b7:69:26:d2:a6:79:2d:b7:4c:10:0d: e8:49:7a:a6:3b:67:57:4b:b3:20:24:44:9b:96:37: db:d7:ae:7a:59:f2:80:af:4e:3b:11:56:54:76:30: e9:89:21:f5:cb:5b:7d:da:09:02:6f:d7:ca:3c:0a: 27:9a:cd:11:df:69:13:93:3a:4a:77:f7:e4:d5:f9: 64:94:a0:fc:24:0e:12:0a:76:f8:9a:ea:91:24:0b: 5c:9f:cd:96:20:0f:3c:6c:d7:fe:bb:6a:e6:71:07: ed:42:ee:1c:bd:ca:9e:eb:01:7e:5d:c8:5b:2b:3e: 07:d1:1e:29:dc:f6:01:d2:56:e8:a2:ba:db:85:dc: f3:81:5a:94:c8:a7:44:72:eb:f6:86:ea:be:d2:8d: d6:49:c4:bf:7a:8c:8c:a0:65:bb:e0:a7:d9:54:bc: b5:e8:d6:50:2f:57:49:ac:84:a0:09:a9:05:b8:aa: fb:6f:ba:b4:99:67:d5:f7:d1:96:c6:41:2d:a0:5e: 5a:25:83:94:59:a9:8b:e2:7c:85:f2:71:b3:f6:b2: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CE:CF:BD:28:F7:11:94:4D:35:E7:35:91:DA:93:04:8B:92:2E:E4 X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c4:16:21:82:4f:54:59:55:cd:67:9d:9c:c0:68:d0:0e:eb: a8:5e:45:16:07:3c:e0:7d:76:61:5f:d4:43:ad:84:8a:b6:94: 37:2d:e0:f4:2e:c2:71:e8:5f:d6:9e:b1:16:06:22:38:bf:4c: f6:3c:7d:23:a0:dd:56:fb:6f:54:2a:37:de:ca:bd:73:77:98: a3:6b:8a:5b:40:94:9d:e8:f2:50:2b:76:cf:db:ca:d1:aa:5d: fb:40:a9:26:f1:7d:72:e4:88:ea:64:fe:08:3a:da:b8:19:d3: 9c:15:2d:51:7b:5c:40:6a:af:34:78:c2:e2:fe:19:63:7a:68: 25:d3:01:37:e1:0b:fb:da:97:ac:aa:32:b9:4c:06:37:72:21: eb:da:fa:71:86:51:14:d6:07:d9:bd:f1:47:8a:d1:0d:4d:22: 1e:cf:3f:95:be:39:63:9d:99:6a:a0:48:13:ce:4d:a3:f5:ea: d1:87:8b:46:9e:c7:a0:8d:26:19:d3:a0:9b:12:2c:16:c7:2d: e9:7e:b6:23:88:07:42:fc:63:29:a4:b3:07:37:ed:12:db:53: 5b:04:f1:f1:6c:fa:be:6b:83:db:c1:ad:1d:c0:4d:9d:4e:2c: bb:24:51:8a:6f:93:11:7c:53:ab:8b:dc:0b:84:14:57:5d:5d: 26:8f:32:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjYwNTE0MTkzODUyWhcNMjYwNTIxMTkzODUyWjAYMRYwFAYD VQQDEw02YTA2MjRjYy0xOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ybBPw0WHYJGKdX8+saaBFmbKYHOc5HjkDA43lai1QW6dJZPnuzh5fRlOOYK OHhbt2km0qZ5LbdMEA3oSXqmO2dXS7MgJESbljfb1656WfKAr047EVZUdjDpiSH1 y1t92gkCb9fKPAonms0R32kTkzpKd/fk1flklKD8JA4SCnb4muqRJAtcn82WIA88 bNf+u2rmcQftQu4cvcqe6wF+XchbKz4H0R4p3PYB0lboorrbhdzzgVqUyKdEcuv2 huq+0o3WScS/eoyMoGW74KfZVLy16NZQL1dJrISgCakFuKr7b7q0mWfV99GWxkEt oF5aJYOUWamL4nyF8nGz9rIVSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnOz70o 9xGUTTXnNZHakwSLki7kMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZcQWIYJPVFlVzWednMBo0A7rqF5FFgc84H12YV/UQ62EiraUNy3g9C7Ccehf 1p6xFgYiOL9M9jx9I6DdVvtvVCo33sq9c3eYo2uKW0CUnejyUCt2z9vK0apd+0Cp JvF9cuSI6mT+CDrauBnTnBUtUXtcQGqvNHjC4v4ZY3poJdMBN+EL+9qXrKoyuUwG N3Ih69r6cYZRFNYH2b3xR4rRDU0iHs8/lb45Y52ZaqBIE85No/Xq0YeLRp7HoI0m GdOgmxIsFsct6X62I4gHQvxjKaSzBzftEttTWwTx8Wz6vmuD28GtHcBNnU4suyRR im+TEXxTq4vcC4QUV11dJo8yaA== -----END CERTIFICATE-----Generated at Fri May 15 17:55:45 2026 by rpki-client