$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: Reb1zPqUJnNG9ePKAzUiBMxOMlnvQX3vMVGXUm4LoYQ= Subject key identifier: E7:36:9A:ED:2B:EA:DE:8D:B6:B1:10:96:D1:03:7B:BD:25:AC:4B:08 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 09EE Signing time: Tue 12 May 2026 19:56:20 +0000 Manifest this update: Tue 12 May 2026 19:56:20 +0000 Manifest next update: Tue 19 May 2026 19:56:20 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: y45g/3iNoHkXfkrJBOX5zoaGvVxMdMBjgYAwE10/gWk=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: 0FWKl6V2UsAeRLSYgRMr9fF+nuXljQkdSIOnzl7uC2U=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: May 12 19:56:20 2026 GMT Not After : May 19 19:56:20 2026 GMT Subject: CN=6a0385e4-3a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:a4:e7:2e:0c:e8:63:b5:60:30:f7:12:de: 61:74:2b:64:bc:00:1b:ae:e7:5d:b8:a3:27:c4:c3: aa:bf:4b:8f:c7:9a:24:51:6c:0a:6c:c5:a1:f4:e0: 12:07:9d:ae:cc:44:aa:f1:f4:f8:f3:79:da:74:37: d3:b0:12:cc:57:1f:77:20:04:27:d2:6b:be:b5:82: 08:3d:4e:74:10:06:10:97:c8:9b:e8:58:fa:d3:59: 14:d5:38:50:00:a7:e6:52:c9:0e:d4:55:61:10:ac: e2:12:94:03:93:c3:84:eb:d7:9b:76:df:f9:5d:a9: f0:4e:a9:86:96:43:cd:bd:5d:34:94:db:93:2c:bb: 46:35:68:1c:2e:85:83:7b:fb:cf:cb:6d:37:99:c0: bb:ba:d4:3b:53:f9:06:f8:74:db:2f:ce:08:79:e2: 3a:f2:e4:c1:80:e2:6d:fb:c1:4d:d9:44:94:52:6e: dc:d9:f6:6f:1d:ef:91:ab:dc:48:17:fa:6e:a5:58: 08:b5:a5:ca:f0:ec:50:b2:9a:6a:c3:eb:d3:44:2b: 13:05:43:af:63:da:58:1a:a9:af:c5:3e:41:c1:30: 92:52:87:b3:aa:26:fa:6e:2f:b5:7e:92:8a:50:82: ed:07:8d:6f:19:7e:11:bc:65:75:18:8b:03:ea:f0: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:36:9A:ED:2B:EA:DE:8D:B6:B1:10:96:D1:03:7B:BD:25:AC:4B:08 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4a:43:95:6f:5b:ca:78:86:35:57:4a:86:e3:ea:66:0a:35: 4d:db:01:6f:7b:81:c3:60:32:bb:5f:b7:86:98:14:66:bb:89: a4:c6:1f:ff:94:12:85:de:e1:3e:31:a9:2a:2c:d5:e1:d8:e6: 76:51:05:45:95:12:98:1e:ab:f3:17:73:a2:96:50:36:9d:d1: 18:11:4a:2f:ab:87:e1:56:ca:08:d1:cd:bb:b5:e0:25:8c:ea: 4b:f7:4e:76:ed:56:0c:70:10:7d:03:c8:a4:fd:08:16:8b:b7: 74:1e:39:c0:8d:67:f7:d4:ec:f3:4a:ff:ac:31:7f:d6:aa:c3: c3:cb:31:44:85:18:15:2f:93:46:30:3a:ce:0f:17:4c:56:14: c7:e1:a5:a5:4d:dc:92:fd:7f:50:40:d3:23:08:7d:7e:f5:c4: 37:0f:9d:d6:6f:38:23:a7:5f:95:a8:ab:0c:25:6b:2c:8f:c1: d6:56:0b:54:87:56:2e:e0:6e:2e:1a:5e:61:58:a7:75:7d:b7: 5f:6d:78:31:23:b9:0f:d6:39:8f:cd:95:9f:54:bf:b9:df:11: 83:8c:1d:15:c3:dd:7b:1a:79:e2:59:be:ed:7d:dd:df:de:d7: 0f:58:fb:6c:af:12:15:2d:a1:26:59:f5:74:93:29:3a:0f:68: d5:84:99:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjYwNTEyMTk1NjIwWhcNMjYwNTE5MTk1NjIwWjAYMRYwFAYD VQQDEw02YTAzODVlNC0zYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03ek5y4M6GO1YDD3Et5hdCtkvAAbrudduKMnxMOqv0uPx5okUWwKbMWh9OAS B52uzESq8fT483nadDfTsBLMVx93IAQn0mu+tYIIPU50EAYQl8ib6Fj601kU1ThQ AKfmUskO1FVhEKziEpQDk8OE69ebdt/5XanwTqmGlkPNvV00lNuTLLtGNWgcLoWD e/vPy203mcC7utQ7U/kG+HTbL84IeeI68uTBgOJt+8FN2USUUm7c2fZvHe+Rq9xI F/pupVgItaXK8OxQsppqw+vTRCsTBUOvY9pYGqmvxT5BwTCSUoezqib6bi+1fpKK UILtB41vGX4RvGV1GIsD6vA5/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOc2mu0r 6t6NtrEQltEDe70lrEsIMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKUpDlW9byniGNVdKhuPqZgo1TdsBb3uBw2Ayu1+3hpgUZruJpMYf/5QShd7h PjGpKizV4djmdlEFRZUSmB6r8xdzopZQNp3RGBFKL6uH4VbKCNHNu7XgJYzqS/dO du1WDHAQfQPIpP0IFou3dB45wI1n99Ts80r/rDF/1qrDw8sxRIUYFS+TRjA6zg8X TFYUx+GlpU3ckv1/UEDTIwh9fvXENw+d1m84I6dflairDCVrLI/B1lYLVIdWLuBu LhpeYVindX23X214MSO5D9Y5j82Vn1S/ud8Rg4wdFcPdexp54lm+7X3d397XD1j7 bK8SFS2hJln1dJMpOg9o1YSZZA== -----END CERTIFICATE-----Generated at Wed May 13 03:44:53 2026 by rpki-client