$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: doxTzo8XKJYB/vLRENwj88tXP/kkgvSLqvO6lNoZKL4= Subject key identifier: 92:F5:9E:74:D9:F9:E7:8C:09:A0:E0:39:E8:B3:D3:DD:25:E2:99:9E Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 0186 Signing time: Mon 11 May 2026 04:36:59 +0000 Manifest this update: Mon 11 May 2026 04:36:59 +0000 Manifest next update: Mon 18 May 2026 04:36:59 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: mASiX3Z6TSSDK40g7eVWpSNoYzVjsQWyirtdb9Q0HhI=) 2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=) 3: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: May 11 04:36:59 2026 GMT Not After : May 18 04:36:59 2026 GMT Subject: CN=6a015ceb-6ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:39:35:12:9d:d7:11:63:c6:eb:31:91:54: 82:c0:1f:a7:4a:20:95:d6:42:60:c8:df:90:12:d4: 51:2b:4e:bb:24:56:b9:3a:6e:91:5f:b7:9d:47:fe: 23:58:60:07:08:fa:8e:7d:95:19:76:66:3e:c9:38: 50:85:19:24:df:e6:63:3f:85:03:1c:82:85:a3:54: cd:23:13:36:0b:c6:24:bb:28:7e:b8:ad:dc:3b:5d: f8:da:0d:ac:ec:9c:b9:ee:6b:8c:38:36:e7:4f:7a: f3:8c:e1:c4:a6:ce:33:80:90:d2:d8:b8:35:e9:18: e6:c7:27:e2:41:56:b5:71:03:ed:e8:f8:1e:0c:4f: e9:4b:ff:34:74:6f:d3:b1:68:b9:23:ae:8d:8b:cd: 12:de:8f:ac:c5:0e:3f:1c:bc:9a:08:b2:5b:31:b8: c3:1e:96:30:f0:53:75:e7:87:f7:c4:93:ea:34:41: 16:29:fb:2f:c1:bb:d6:1e:44:2b:c4:98:91:de:d2: 83:8e:5b:d0:2d:82:9c:e2:ab:3b:8b:a0:06:7d:f6: 11:38:52:4b:11:a1:26:a8:aa:b7:74:34:fa:a3:61: af:9d:55:7f:f6:56:d2:a0:8a:2a:7b:10:6e:13:fb: d5:a1:f7:e4:57:41:c5:e3:c6:ed:19:a7:54:15:c3: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:9E:74:D9:F9:E7:8C:09:A0:E0:39:E8:B3:D3:DD:25:E2:99:9E X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6f:7c:7c:95:a9:ce:70:11:c9:32:57:c5:03:66:33:ef:e8: ed:ca:16:d4:46:84:71:86:3a:ca:f2:16:17:f0:e2:73:cb:7d: 6f:9f:a2:e4:31:18:ff:c5:a2:ee:f0:ac:2a:e3:ca:ed:57:09: 84:89:94:a6:1f:8f:05:ca:59:cf:fb:f9:8f:b5:fb:e1:8d:00: 3e:53:48:c5:5e:8a:2c:f9:c8:2d:f4:f7:b5:47:ee:11:29:bd: 24:20:2e:4f:ec:a4:12:c2:e8:79:27:fd:e3:0e:46:60:a6:36: 91:62:2f:b3:23:14:e5:91:32:59:62:e6:24:dc:e2:50:55:4f: bf:94:2e:32:f6:8e:b7:36:f6:20:32:c3:06:30:c2:6f:46:4f: 5e:d8:cd:64:6c:4b:6d:0b:05:e1:29:12:ec:b1:a9:01:8a:6a: 08:0c:ce:4c:d6:30:4b:c0:7a:56:7c:65:e0:ca:a3:9b:c3:81: 8d:c8:e4:61:55:7d:5a:62:ab:ba:9f:5f:90:0e:2a:4c:17:e4: ed:3b:f9:e9:44:ce:32:2a:1d:59:92:e5:b8:d7:27:68:65:4b: fc:06:c9:13:c3:fd:d1:be:22:10:b0:e5:c4:f4:67:03:f2:86: cb:2b:a4:46:f1:95:f5:b1:d6:25:11:2c:1b:65:f7:8c:ae:83: 80:c0:99:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjYwNTExMDQzNjU5WhcNMjYwNTE4MDQzNjU5WjAYMRYwFAYD VQQDEw02YTAxNWNlYi02ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQo5NRKd1xFjxusxkVSCwB+nSiCV1kJgyN+QEtRRK067JFa5Om6RX7edR/4j WGAHCPqOfZUZdmY+yThQhRkk3+ZjP4UDHIKFo1TNIxM2C8Ykuyh+uK3cO1342g2s 7Jy57muMODbnT3rzjOHEps4zgJDS2Lg16RjmxyfiQVa1cQPt6PgeDE/pS/80dG/T sWi5I66Ni80S3o+sxQ4/HLyaCLJbMbjDHpYw8FN154f3xJPqNEEWKfsvwbvWHkQr xJiR3tKDjlvQLYKc4qs7i6AGffYROFJLEaEmqKq3dDT6o2GvnVV/9lbSoIoqexBu E/vVoffkV0HF48btGadUFcPSIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJL1nnTZ +eeMCaDgOeiz090l4pmeMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHW98fJWpznARyTJXxQNmM+/o7coW1EaEcYY6yvIWF/Dic8t9b5+i5DEY/8Wi 7vCsKuPK7VcJhImUph+PBcpZz/v5j7X74Y0APlNIxV6KLPnILfT3tUfuESm9JCAu T+ykEsLoeSf94w5GYKY2kWIvsyMU5ZEyWWLmJNziUFVPv5QuMvaOtzb2IDLDBjDC b0ZPXtjNZGxLbQsF4SkS7LGpAYpqCAzOTNYwS8B6Vnxl4Mqjm8OBjcjkYVV9WmKr up9fkA4qTBfk7Tv56UTOMiodWZLluNcnaGVL/AbJE8P90b4iELDlxPRnA/KGyyuk RvGV9bHWJREsG2X3jK6DgMCZlg== -----END CERTIFICATE-----Generated at Wed May 13 03:10:06 2026 by rpki-client