$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: 37FqgBJLQzlmQuTzbnJOxmNYLlnWkJbjD38eOkeR4OI= Subject key identifier: AE:2B:5C:52:2B:5F:AD:4E:12:60:84:9C:EE:7B:A8:6E:65:6D:FA:13 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 08E1 Signing time: Tue 12 May 2026 20:25:44 +0000 Manifest this update: Tue 12 May 2026 20:25:43 +0000 Manifest next update: Tue 19 May 2026 20:25:43 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: dytbEd+ZJZ+Le5HvKBo7D9uW7aq3kbRosmB+iU+YVKk=) 2: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=) 3: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=) 4: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: May 12 20:25:43 2026 GMT Not After : May 19 20:25:43 2026 GMT Subject: CN=6a038cc7-f608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:cf:36:d7:c4:aa:94:0d:c9:0d:73:03:30: b1:44:b1:20:ce:8f:9f:6f:df:04:96:f6:94:2e:8f: ab:b8:2f:9d:ee:59:ac:fb:ed:be:75:7d:ea:84:0e: 40:7f:4c:64:dc:5f:4b:5e:2c:51:e9:ad:33:5c:94: f5:c4:0a:15:a9:b2:d4:38:5f:67:97:4f:ff:12:17: c8:51:d0:96:b4:91:2b:9f:84:9e:3d:a8:d3:dc:bb: 83:9f:3e:dc:06:e4:b9:f6:7c:cf:24:6e:b3:b0:72: 86:ab:ee:d0:2e:e1:6f:30:64:c7:d6:58:c7:a7:f6: ed:9c:c4:4a:95:82:56:ad:b3:0d:61:9a:27:64:55: 47:83:d1:21:cb:5c:0d:5f:f6:d7:36:fb:60:00:f9: dc:d5:81:aa:a0:63:ae:70:0a:53:9a:66:b1:60:b4: 7a:b4:85:f9:2e:1b:52:7b:37:f6:92:f9:e2:14:c3: 59:ae:be:5a:99:4a:99:eb:32:2c:a0:1c:4a:8b:c6: 0e:7c:75:b0:8a:ba:90:91:9e:3b:58:8f:4f:ae:06: 2c:1b:cd:05:95:53:b8:c5:2b:64:de:a8:65:32:05: 64:df:af:4e:34:12:6d:58:ac:4a:04:e9:33:06:4c: 3f:a7:ae:52:08:60:d5:58:57:60:6a:46:84:29:5c: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:5C:52:2B:5F:AD:4E:12:60:84:9C:EE:7B:A8:6E:65:6D:FA:13 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:2b:0f:b5:f9:bc:fc:75:67:02:f2:1b:6a:d2:24:bf:41:ad: 6a:ba:ed:59:fb:7f:d2:c8:0c:5a:19:87:0a:64:a1:55:3e:e0: 3d:21:3b:1b:02:12:10:78:7c:3e:76:6e:e4:c2:1d:c6:f1:c2: 36:b8:9a:87:43:ce:9e:52:1a:08:99:31:d1:72:e6:c1:6f:b7: 1f:10:d0:fd:74:04:c1:e0:9e:d2:d4:2f:af:f3:34:e2:07:5a: 4b:3e:c0:ec:3e:ba:76:58:35:a2:fc:f4:65:4c:25:d3:54:24: 93:d9:56:25:40:c3:83:15:34:40:e7:a0:6f:97:03:0f:81:65: 85:c2:7f:21:21:01:82:2c:32:73:cf:0a:b8:0d:00:7b:5f:c3: 84:d6:99:38:bf:3d:64:94:31:9c:f4:8a:38:5a:3b:ca:a8:2c: 18:4a:c3:c4:8a:3e:1d:d1:d5:40:3b:00:f0:1d:ec:05:cc:ab: 8c:92:89:6c:0f:d1:91:06:2c:58:2f:b9:1a:8d:c9:1c:60:a9: c2:f0:ce:8f:f3:6a:b6:59:86:52:91:28:86:2d:b9:58:b4:67: c8:fd:b1:09:28:f7:7c:fb:64:88:7e:03:9b:93:e2:e0:f6:66: 4c:37:74:04:fd:e5:42:57:ac:35:6b:0a:9f:bc:af:a3:e2:18: 2e:53:ba:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjYwNTEyMjAyNTQzWhcNMjYwNTE5MjAyNTQzWjAYMRYwFAYD VQQDEw02YTAzOGNjNy1mNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZfPNtfEqpQNyQ1zAzCxRLEgzo+fb98ElvaULo+ruC+d7lms++2+dX3qhA5A f0xk3F9LXixR6a0zXJT1xAoVqbLUOF9nl0//EhfIUdCWtJErn4SePajT3LuDnz7c BuS59nzPJG6zsHKGq+7QLuFvMGTH1ljHp/btnMRKlYJWrbMNYZonZFVHg9Ehy1wN X/bXNvtgAPnc1YGqoGOucApTmmaxYLR6tIX5LhtSezf2kvniFMNZrr5amUqZ6zIs oBxKi8YOfHWwirqQkZ47WI9PrgYsG80FlVO4xStk3qhlMgVk369ONBJtWKxKBOkz Bkw/p65SCGDVWFdgakaEKVxiOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4rXFIr X61OEmCEnO57qG5lbfoTMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhysPtfm8/HVnAvIbatIkv0GtarrtWft/0sgMWhmHCmShVT7gPSE7GwISEHh8 PnZu5MIdxvHCNriah0POnlIaCJkx0XLmwW+3HxDQ/XQEweCe0tQvr/M04gdaSz7A 7D66dlg1ovz0ZUwl01Qkk9lWJUDDgxU0QOegb5cDD4FlhcJ/ISEBgiwyc88KuA0A e1/DhNaZOL89ZJQxnPSKOFo7yqgsGErDxIo+HdHVQDsA8B3sBcyrjJKJbA/RkQYs WC+5Go3JHGCpwvDOj/NqtlmGUpEohi25WLRnyP2xCSj3fPtkiH4Dm5Pi4PZmTDd0 BP3lQlesNWsKn7yvo+IYLlO64A== -----END CERTIFICATE-----Generated at Wed May 13 15:16:19 2026 by rpki-client