$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: GAGF/hX7jaknosqQXAPOgczJHGttd4DnrTmvsGUkxkw= Subject key identifier: 28:0E:43:0C:FA:80:D4:4C:67:9F:0A:E7:98:2A:D7:9F:E0:B2:2A:53 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0E19 Signing time: Sun 26 Apr 2026 17:47:38 +0000 Manifest this update: Sun 26 Apr 2026 17:47:38 +0000 Manifest next update: Sun 03 May 2026 17:47:38 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: o+csUIju93EHPBSomm7GlT147Em5e2z2uskIty1hzqs=) 2: CDA4E0082E6511F19AB402C39E833773.roa (hash: rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=) 3: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: OMljntVkgQs+vfOk+Rb1tcPgapnLq21/6pFdv7k+86s=) 4: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: W/zwkT3q1SimSGPL2qz0EdwTK1p2ucrY5Ozs9Diao7A=) 5: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: MqeW/D/8P52Csk263/GYlr8+c8ERIR8aUwn81bPGMe4=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: gAfym6hfoPW5lreTFEqRc7a46jF6gekxCIRIP4eys1Q=) 7: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: njqCophIvGbWqZOEZO7iH5P4olbdrXCLsypP82DCs2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Apr 26 17:47:38 2026 GMT Not After : May 3 17:47:38 2026 GMT Subject: CN=69ee4fba-75d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:a1:af:67:38:c9:86:98:9a:f9:72:fb:a2: aa:55:95:4e:40:c8:f1:f1:9f:14:e8:16:6b:3a:1a: ab:96:43:fb:98:44:48:20:f6:5e:25:a7:f2:28:07: 83:23:63:d9:dc:48:81:74:b5:3f:d2:9e:3a:06:da: 5e:4e:cd:c4:5a:96:07:2d:c4:4b:6e:e2:c3:79:ec: d1:a2:9a:3d:44:10:cc:a7:99:20:bb:7f:98:0e:be: 6b:35:5d:1a:40:2a:61:94:1b:74:0d:44:5f:07:84: 58:e3:82:82:34:0b:7a:5f:5e:aa:ae:91:aa:93:0a: 97:cd:d6:ac:b7:13:c5:c1:df:42:5b:e4:b9:e8:e5: 83:cf:18:5f:23:08:26:13:10:a1:47:5a:b7:30:da: e5:78:af:aa:1e:1f:92:e1:09:cc:18:80:e9:21:ea: 67:9e:97:2c:15:77:82:d2:23:f2:76:fc:06:66:27: f8:11:5f:10:9e:59:9e:dc:77:c7:b7:ab:25:ed:9e: cc:ce:22:00:ea:2d:7f:7f:5a:bb:ab:5e:be:69:05: 37:03:01:fd:c5:ce:65:12:0f:b4:7c:58:80:a2:5a: 44:88:4d:95:d8:e6:b9:41:56:66:82:1d:34:6b:17: 16:31:c4:50:8f:d8:b8:3c:0f:91:96:ee:0c:fc:4b: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:43:0C:FA:80:D4:4C:67:9F:0A:E7:98:2A:D7:9F:E0:B2:2A:53 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:00:92:c8:69:42:e9:46:73:9c:2d:fd:19:4c:f4:2e:a1:10: a6:69:76:ae:7d:8e:fd:b3:16:71:84:b5:e1:31:0d:17:83:9a: 36:47:08:a5:a6:3e:4a:e5:da:ff:1d:f4:38:47:b7:cc:0e:d0: 0e:4a:fc:65:1c:54:06:80:34:95:9a:05:c2:95:15:80:4a:5b: 6c:20:73:a0:27:43:33:68:57:67:d0:b7:a6:b9:b2:2f:8b:2f: 4d:51:74:dd:7a:97:27:3a:28:83:c9:a8:53:f7:7e:b7:7c:2f: 7c:97:a5:29:2e:f4:b8:43:65:16:ae:9e:a6:4a:30:04:81:cc: 91:25:e8:97:e0:a8:c4:c2:e3:f3:6d:54:a1:4d:07:32:cb:21: 96:48:d3:8d:f0:e8:aa:0a:17:b2:d3:0e:55:6d:0c:54:de:15: 20:e9:11:5d:af:65:81:4f:30:8b:a7:fb:43:7f:d9:88:0c:fd: 38:7d:61:63:3e:e4:83:19:06:2a:82:0e:33:1e:0e:85:c7:b0: 6b:31:ad:27:08:8b:0b:8c:ae:62:50:73:ef:44:2f:69:de:06: f4:46:e2:ba:f3:ef:6c:e0:4c:41:5c:3f:cf:14:9e:63:da:66: 64:d4:3c:87:c2:46:70:2b:f8:80:9f:14:09:e3:10:00:73:63: eb:0c:d0:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwNDI2MTc0NzM4WhcNMjYwNTAzMTc0NzM4WjAYMRYwFAYD VQQDEw02OWVlNGZiYS03NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCqhr2c4yYaYmvly+6KqVZVOQMjx8Z8U6BZrOhqrlkP7mERIIPZeJafyKAeD I2PZ3EiBdLU/0p46BtpeTs3EWpYHLcRLbuLDeezRopo9RBDMp5kgu3+YDr5rNV0a QCphlBt0DURfB4RY44KCNAt6X16qrpGqkwqXzdastxPFwd9CW+S56OWDzxhfIwgm ExChR1q3MNrleK+qHh+S4QnMGIDpIepnnpcsFXeC0iPydvwGZif4EV8Qnlme3HfH t6sl7Z7MziIA6i1/f1q7q16+aQU3AwH9xc5lEg+0fFiAolpEiE2V2Oa5QVZmgh00 axcWMcRQj9i4PA+Rlu4M/EtW0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgOQwz6 gNRMZ58K55gq15/gsipTMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASACSyGlC6UZznC39GUz0LqEQpml2rn2O/bMWcYS14TENF4OaNkcIpaY+SuXa /x30OEe3zA7QDkr8ZRxUBoA0lZoFwpUVgEpbbCBzoCdDM2hXZ9C3prmyL4svTVF0 3XqXJzoog8moU/d+t3wvfJelKS70uENlFq6epkowBIHMkSXol+CoxMLj821UoU0H MsshlkjTjfDoqgoXstMOVW0MVN4VIOkRXa9lgU8wi6f7Q3/ZiAz9OH1hYz7kgxkG KoIOMx4OhcewazGtJwiLC4yuYlBz70Qvad4G9EbiuvPvbOBMQVw/zxSeY9pmZNQ8 h8JGcCv4gJ8UCeMQAHNj6wzQ2g== -----END CERTIFICATE-----Generated at Tue Apr 28 12:46:15 2026 by rpki-client