$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: /771PXomyq0zDsy1mGq4dM3vx8cBHg11TKoNgCQHytE= Subject key identifier: B1:24:EA:99:A8:CD:6B:AF:4F:16:11:4D:26:E0:CA:C6:EF:04:DF:DF Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 05F3 Signing time: Tue 12 May 2026 22:59:57 +0000 Manifest this update: Tue 12 May 2026 22:59:57 +0000 Manifest next update: Tue 19 May 2026 22:59:57 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: MjEL9Fm/VyNWLk0DyIErfzsJ8KjYBI2p0RE3yrxZGgs=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: aqvU+UiVz5EiQm3aVLx9pIrD5pXO9qkeQ5aR6UKmmFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: May 12 22:59:57 2026 GMT Not After : May 19 22:59:57 2026 GMT Subject: CN=6a03b0ed-4a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:16:1b:59:04:8d:11:da:1c:79:8a:e9:8a: 4b:6f:c9:a0:af:e2:c4:10:98:a7:d4:bc:a1:5d:74: b7:98:7e:f7:a0:d2:43:20:22:2b:fb:13:08:35:40: 32:e1:b4:00:e4:ff:d7:45:e4:4c:0a:8b:4d:55:b7: b1:08:f3:3c:d4:92:7b:c8:17:50:d5:87:b8:7d:6c: 8a:8b:2a:11:67:ea:7c:33:ad:4f:03:cb:8f:1a:9a: a3:75:73:f4:d7:09:fb:cc:6b:7d:18:a2:73:53:3c: f1:dd:d2:48:bc:a5:31:e2:bf:91:07:dc:e9:d1:82: 12:a9:58:e8:41:80:34:68:57:97:a8:7a:e1:cc:4a: 0b:9b:4d:ab:86:45:e0:d0:d8:0b:fd:28:e2:cf:79: 2f:ef:79:c6:5f:e7:1d:a5:42:68:bd:8d:97:70:c2: 12:5b:5c:b0:63:b5:af:b0:9b:96:07:0c:7e:ce:f5: 72:90:c4:dc:65:75:0c:4e:68:a4:6a:b4:8e:8f:16: 8b:66:c0:bc:75:6f:e5:4a:9a:1c:38:68:6f:c3:60: c1:10:1a:85:5e:a1:3f:ef:2f:d3:31:d3:98:a9:a6: 77:f4:58:50:9d:16:d6:aa:53:a7:4a:a1:8d:e9:6c: bf:3f:f5:78:ee:1b:19:9f:8f:ad:8f:c5:87:d1:d2: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:EA:99:A8:CD:6B:AF:4F:16:11:4D:26:E0:CA:C6:EF:04:DF:DF X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0b:69:f9:cd:21:a4:63:79:4b:01:bd:c0:39:44:52:1e:a2: 99:33:15:40:04:d4:97:84:b1:b1:4c:30:c4:9c:b2:c1:f5:a7: 5a:8b:ef:2e:7d:9d:37:83:6c:d5:57:bf:11:d2:83:9b:1f:86: 5a:ae:d4:c3:6b:6a:de:47:24:cd:5f:c5:1c:32:f8:44:96:c7: c8:78:7d:bd:0a:cd:6d:f7:07:88:cf:9b:46:c5:40:00:be:e1: af:18:5f:5d:6e:60:aa:4c:a7:43:3f:84:02:f0:55:31:00:30: 6b:17:f9:be:08:3c:c7:b9:ab:c9:40:7f:76:b0:58:5c:58:24: a6:8d:1a:c1:94:b6:5c:95:14:a8:47:64:03:97:c2:b4:0a:ca: cb:b4:51:0e:64:60:23:82:8c:0c:4c:8c:dd:d4:86:57:e0:31: c1:4c:22:f4:4a:2c:25:32:16:b6:d1:3b:63:49:1a:c0:9e:63: c7:4d:08:8c:d1:d9:af:bf:0c:4e:ea:56:6e:c2:5a:8b:b9:22: 7a:ef:53:3f:6d:ba:b0:fb:b4:cf:ec:69:62:e2:8c:20:ff:c8: 5f:d7:40:a1:82:2d:ad:5b:d1:79:62:f1:2d:01:97:36:fd:4e: 88:48:c8:bd:54:56:62:f7:33:04:9b:32:f8:39:6c:20:ab:1e: 8c:70:ef:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjYwNTEyMjI1OTU3WhcNMjYwNTE5MjI1OTU3WjAYMRYwFAYD VQQDEw02YTAzYjBlZC00YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzkWG1kEjRHaHHmK6YpLb8mgr+LEEJin1LyhXXS3mH73oNJDICIr+xMINUAy 4bQA5P/XReRMCotNVbexCPM81JJ7yBdQ1Ye4fWyKiyoRZ+p8M61PA8uPGpqjdXP0 1wn7zGt9GKJzUzzx3dJIvKUx4r+RB9zp0YISqVjoQYA0aFeXqHrhzEoLm02rhkXg 0NgL/Sjiz3kv73nGX+cdpUJovY2XcMISW1ywY7WvsJuWBwx+zvVykMTcZXUMTmik arSOjxaLZsC8dW/lSpocOGhvw2DBEBqFXqE/7y/TMdOYqaZ39FhQnRbWqlOnSqGN 6Wy/P/V47hsZn4+tj8WH0dJNgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEk6pmo zWuvTxYRTSbgysbvBN/fMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdgtp+c0hpGN5SwG9wDlEUh6imTMVQATUl4SxsUwwxJyywfWnWovvLn2dN4Ns 1Ve/EdKDmx+GWq7Uw2tq3kckzV/FHDL4RJbHyHh9vQrNbfcHiM+bRsVAAL7hrxhf XW5gqkynQz+EAvBVMQAwaxf5vgg8x7mryUB/drBYXFgkpo0awZS2XJUUqEdkA5fC tArKy7RRDmRgI4KMDEyM3dSGV+AxwUwi9EosJTIWttE7Y0kawJ5jx00IjNHZr78M TupWbsJai7kieu9TP226sPu0z+xpYuKMIP/IX9dAoYItrVvReWLxLQGXNv1OiEjI vVRWYvczBJsy+DlsIKsejHDvlg== -----END CERTIFICATE-----Generated at Wed May 13 04:13:17 2026 by rpki-client