$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json) Hash identifier: UwOTTGOpIoroo1Pu8RLNDpMSFUwA6GeM7SdzNjb6gmM= Subject key identifier: 1D:33:A8:1C:74:CA:6D:5F:D9:8A:FA:F5:34:54:75:CF:6D:D7:83:40 Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1E43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft Manifest number: 1E36 Signing time: Tue 12 May 2026 16:05:15 +0000 Manifest this update: Tue 12 May 2026 16:05:15 +0000 Manifest next update: Tue 19 May 2026 16:05:15 +0000 Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: ahIOgGu49bK0AVPkwlFdIhYGd/Qgl+df8EXHjVsPqNE=) 2: C78E4E640BC111F19AB158B3293D8C67.roa (hash: iBnvey2w1CD1G33AJZCTqUkiJ/9udD23Qpc3pr39tfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7747 (0x1e43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: May 12 16:05:15 2026 GMT Not After : May 19 16:05:15 2026 GMT Subject: CN=6a034fbb-2208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:6b:c2:9e:4a:9a:48:a8:99:7b:76:4a:0c: 82:ba:2a:6f:6a:84:a6:89:12:42:17:fb:76:39:28: df:32:39:ff:08:4a:d9:6c:02:d8:11:57:20:70:fc: d0:eb:8c:8f:f4:fa:87:07:eb:dc:11:11:44:5b:4d: 76:be:49:41:b4:59:40:d9:d5:e4:fe:30:be:96:ad: db:c2:f8:8a:7e:00:4f:bd:cf:64:d1:4b:88:61:fe: 68:6e:7c:8d:d4:14:61:fa:2d:08:37:39:e6:6c:77: 1c:0d:2e:a8:55:3b:5a:51:df:60:f0:dc:c1:1c:79: 17:08:8a:fa:dd:e7:27:1e:6e:62:d1:4d:82:63:55: 3f:04:b3:b8:cb:0a:7d:1a:60:f4:fe:00:14:a8:ef: 36:05:1e:b0:91:f0:8a:71:52:92:ee:52:50:c8:0a: c2:44:8f:33:44:a4:1b:e2:bd:32:21:90:f4:55:40: 64:90:39:b0:42:c8:4f:a4:03:8d:ad:90:c2:92:a5: 43:6d:dc:18:3a:f2:f8:33:0f:b9:1d:93:ee:c1:d3: 4a:5d:ab:e8:28:e9:9f:1d:ce:da:a2:9c:4f:88:38: df:85:fe:73:74:eb:f2:a2:3d:ba:dc:83:48:a3:e6: b7:fd:2a:73:61:7f:27:5a:db:3b:99:70:e4:48:45: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:A8:1C:74:CA:6D:5F:D9:8A:FA:F5:34:54:75:CF:6D:D7:83:40 X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6c:c3:5a:87:17:28:80:54:74:41:25:49:6b:06:50:e4:10: 6d:d0:c0:b4:95:bc:8e:39:4f:4b:41:eb:ed:82:0a:92:76:73: 5e:3c:7c:1e:37:db:31:9d:6f:c9:aa:20:c3:be:67:c4:15:e6: 7b:ac:d4:a3:65:f8:25:00:65:cb:e7:a6:5b:27:7c:d2:51:9f: 46:f0:49:61:0f:2a:46:e8:67:1a:e3:9e:70:19:c4:1f:1c:4d: ec:0f:05:09:b4:e8:36:24:6c:87:a3:b1:74:52:e8:45:7a:0e: 90:9f:82:0c:e0:c4:95:68:48:e6:14:48:90:cc:06:f4:45:13: 69:45:67:ce:36:da:fb:19:16:f2:27:2e:ae:0a:61:96:0f:c6: eb:d8:47:7b:74:d1:7f:89:7b:69:7f:5c:e5:ef:2b:0d:75:3a: b7:53:c5:f0:1c:f1:92:8e:0e:39:07:bc:15:d7:09:b8:e1:4a: fb:a3:9e:fa:e4:13:43:d0:08:f3:7d:70:8b:14:d5:c0:28:da: c5:31:38:73:f5:64:14:4d:14:0a:a0:f6:77:90:6c:18:df:fb: 19:ac:2a:bc:bd:57:0a:56:f4:60:ec:0e:ca:f6:fc:56:84:04: 18:f6:1c:17:f1:ed:52:86:b7:05:ea:01:d9:e4:37:65:45:9b: 92:0e:8c:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjYwNTEyMTYwNTE1WhcNMjYwNTE5MTYwNTE1WjAYMRYwFAYD VQQDEw02YTAzNGZiYi0yMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAtrwp5KmkiomXt2SgyCuipvaoSmiRJCF/t2OSjfMjn/CErZbALYEVcgcPzQ 64yP9PqHB+vcERFEW012vklBtFlA2dXk/jC+lq3bwviKfgBPvc9k0UuIYf5obnyN 1BRh+i0INznmbHccDS6oVTtaUd9g8NzBHHkXCIr63ecnHm5i0U2CY1U/BLO4ywp9 GmD0/gAUqO82BR6wkfCKcVKS7lJQyArCRI8zRKQb4r0yIZD0VUBkkDmwQshPpAON rZDCkqVDbdwYOvL4Mw+5HZPuwdNKXavoKOmfHc7aopxPiDjfhf5zdOvyoj263INI o+a3/SpzYX8nWts7mXDkSEVkIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0zqBx0 ym1f2Yr69TRUdc9t14NAMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV OTZMNVVmc1NoSDRILXFrSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbGzDWocXKIBUdEElSWsGUOQQbdDAtJW8jjlPS0Hr7YIKknZzXjx8HjfbMZ1v yaogw75nxBXme6zUo2X4JQBly+emWyd80lGfRvBJYQ8qRuhnGuOecBnEHxxN7A8F CbToNiRsh6OxdFLoRXoOkJ+CDODElWhI5hRIkMwG9EUTaUVnzjba+xkW8icurgph lg/G69hHe3TRf4l7aX9c5e8rDXU6t1PF8Bzxko4OOQe8FdcJuOFK+6Oe+uQTQ9AI 831wixTVwCjaxTE4c/VkFE0UCqD2d5BsGN/7GawqvL1XClb0YOwOyvb8VoQEGPYc F/HtUoa3BeoB2eQ3ZUWbkg6Mjw== -----END CERTIFICATE-----Generated at Wed May 13 08:19:05 2026 by rpki-client