$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: T+GT4tATEF5iUFslc8u+Kcj8Z0qrJWCHWmIswyIAT1s= Subject key identifier: B6:ED:B3:8A:D6:1B:30:A9:B4:09:91:08:AD:C5:E7:10:87:E7:64:34 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 09BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 09B5 Signing time: Tue 12 May 2026 19:59:22 +0000 Manifest this update: Tue 12 May 2026 19:59:21 +0000 Manifest next update: Tue 19 May 2026 19:59:21 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: lwcAvx2rg/OLsl7R3hgMMz7dO+WNocCoqcGJPPRxU+U=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: CDcLRqPOlIl7GGhyIqwucsiXiEcpvCH7QLIogd4pmBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2495 (0x9bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: May 12 19:59:21 2026 GMT Not After : May 19 19:59:21 2026 GMT Subject: CN=6a03869a-d72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:55:f8:58:38:a6:03:ef:cd:5d:64:b0:76: 00:99:c6:f8:e0:e1:9b:2f:f1:2f:86:d0:7e:cb:1d: c9:e1:d2:7d:c8:a7:5d:5f:cc:b5:9d:2c:13:95:c5: f4:c2:00:c1:4d:c9:6f:fc:31:2d:73:b9:61:81:1d: 85:a3:6b:42:71:bd:c0:6f:96:5b:11:d0:55:95:96: aa:c4:14:f3:4a:5d:5c:05:4e:52:a9:73:15:fa:22: a2:1a:6b:bf:b2:76:ad:41:4c:54:34:c3:94:f6:d3: 4e:92:aa:5d:15:df:dc:e3:79:c8:88:cd:43:ec:3a: a7:0e:5c:27:0e:62:fc:06:c6:c6:01:6b:38:e7:02: e9:b5:e9:5c:5d:34:39:81:d8:6e:a9:4e:98:21:29: 06:1f:17:84:b6:ff:bd:00:e2:f9:2c:c5:8a:8e:9e: 85:12:8c:4b:0f:2e:52:39:8d:3d:0c:15:b4:08:7b: 46:ed:1d:e5:93:2f:4a:4c:81:e4:d7:aa:72:d9:4a: 04:e5:a1:2a:80:e8:cf:f6:2a:bd:86:6b:dd:4d:ba: 09:4c:94:5e:c0:a9:b8:93:d2:3b:8a:8c:2e:f7:00: d5:bc:15:1a:af:81:d4:d3:4e:54:c2:15:4a:89:10: a8:cb:a8:ea:6b:5f:e6:21:08:1d:72:21:a8:3a:e4: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:ED:B3:8A:D6:1B:30:A9:B4:09:91:08:AD:C5:E7:10:87:E7:64:34 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4b:d9:31:5b:48:fa:3a:02:64:11:9f:f9:62:b6:5b:37:a7: 9c:5f:e3:06:92:9e:63:18:59:73:fa:29:90:93:a0:9a:4f:e1: 01:23:ac:89:32:44:36:e6:46:e1:31:91:1b:0d:ce:31:69:af: 29:2b:68:46:37:3e:7b:e4:40:4c:1c:e5:77:65:7a:81:14:1f: 3c:6a:a0:56:4c:61:a0:f3:d0:59:cc:7e:c8:97:62:9b:83:e0: ed:96:a4:9c:89:f5:35:1d:3f:16:5c:5f:94:a5:ca:4a:42:c2: 42:7f:c2:73:17:0e:cb:61:02:a4:bf:ec:2f:8c:6d:f3:a8:5b: 7e:87:54:49:e3:05:72:35:76:7d:ae:e5:74:46:8b:ff:f8:53: e9:52:e5:16:d1:0e:41:62:d0:f8:77:1a:53:23:c3:a3:8f:2b: 69:3d:9e:e4:ed:0f:41:2e:e8:76:6a:ce:06:13:c1:87:1c:88: a9:c9:db:c4:60:93:76:77:9e:09:f7:39:d9:f6:67:18:82:1c: 51:66:d8:3c:5e:cb:09:0c:83:94:22:3d:cb:60:34:af:c9:fb: 03:56:5b:1a:db:5b:37:41:75:f0:ec:e8:b4:7d:de:02:5f:97: c2:aa:ed:6e:67:61:63:54:3d:d7:95:11:9a:e0:86:3e:ca:6f: 8b:f3:71:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjYwNTEyMTk1OTIxWhcNMjYwNTE5MTk1OTIxWjAYMRYwFAYD VQQDEw02YTAzODY5YS1kNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3hV+Fg4pgPvzV1ksHYAmcb44OGbL/EvhtB+yx3J4dJ9yKddX8y1nSwTlcX0 wgDBTclv/DEtc7lhgR2Fo2tCcb3Ab5ZbEdBVlZaqxBTzSl1cBU5SqXMV+iKiGmu/ snatQUxUNMOU9tNOkqpdFd/c43nIiM1D7DqnDlwnDmL8BsbGAWs45wLptelcXTQ5 gdhuqU6YISkGHxeEtv+9AOL5LMWKjp6FEoxLDy5SOY09DBW0CHtG7R3lky9KTIHk 16py2UoE5aEqgOjP9iq9hmvdTboJTJRewKm4k9I7iowu9wDVvBUar4HU005UwhVK iRCoy6jqa1/mIQgdciGoOuR4gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbts4rW GzCptAmRCK3F5xCH52Q0MB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVEvZMVtI+joCZBGf+WK2WzennF/jBpKeYxhZc/opkJOgmk/hASOsiTJENuZG 4TGRGw3OMWmvKStoRjc+e+RATBzld2V6gRQfPGqgVkxhoPPQWcx+yJdim4Pg7Zak nIn1NR0/FlxflKXKSkLCQn/CcxcOy2ECpL/sL4xt86hbfodUSeMFcjV2fa7ldEaL //hT6VLlFtEOQWLQ+HcaUyPDo48raT2e5O0PQS7odmrOBhPBhxyIqcnbxGCTdnee Cfc52fZnGIIcUWbYPF7LCQyDlCI9y2A0r8n7A1ZbGttbN0F18OzotH3eAl+Xwqrt bmdhY1Q915URmuCGPspvi/Nxjg== -----END CERTIFICATE-----Generated at Wed May 13 09:07:39 2026 by rpki-client