$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: /RwPQGbF3l8zCCFYqqEfo9OVtcMSe8CiT5DNwhWCtno= Subject key identifier: 39:DF:3F:FD:73:4C:0E:85:7A:E8:D4:9E:30:3F:DF:7E:93:2B:D7:6D Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 3539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 3539 Signing time: Tue 12 May 2026 14:50:34 +0000 Manifest this update: Tue 12 May 2026 14:50:33 +0000 Manifest next update: Tue 19 May 2026 14:50:33 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: kpqtC28y3pQZ4HPNBOccWLW6Kq18xZQCev5hasQgsEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: May 12 14:50:33 2026 GMT Not After : May 19 14:50:33 2026 GMT Subject: CN=6a033e3a-738c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:9b:78:64:0c:58:fe:90:e4:e1:34:cf:5c: d9:3e:07:51:d6:c0:a4:7c:21:fd:cd:1b:be:81:38: f9:fe:a7:dd:9a:72:23:f5:d5:7d:c3:e9:6f:7c:11: f9:c9:fe:01:5e:07:d7:47:87:eb:92:d3:21:46:e4: fa:8c:c1:25:50:92:f1:a5:c9:2a:b6:cb:2f:e5:c6: 99:99:7b:25:aa:bd:2b:56:38:00:2c:f4:b4:91:bd: e3:3a:96:95:68:21:c0:a3:f3:52:ec:81:16:86:77: 6f:fb:6a:85:79:6e:40:b9:e9:e6:99:57:c3:ff:24: 66:62:5f:5b:ce:46:44:22:74:d0:71:80:3e:80:8c: b1:3b:10:52:60:f3:b3:68:e4:c7:a6:be:6b:f3:1d: a8:8a:d6:29:b9:69:e9:b7:9c:3f:7a:a5:d8:03:fd: ee:b9:00:e1:e5:a3:c6:92:eb:66:26:aa:ee:91:bf: e0:7e:33:55:6e:be:13:69:35:81:74:a5:37:84:44: 1a:4e:8c:80:34:57:f5:13:76:90:d0:4c:62:0e:36: c8:6b:cf:e2:cf:06:42:19:2d:c4:01:6c:a9:cb:13: 2b:cd:c9:91:ee:55:50:b1:6e:20:82:66:48:7e:5c: 28:43:0b:dc:58:7d:24:31:8d:96:92:30:15:4e:91: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DF:3F:FD:73:4C:0E:85:7A:E8:D4:9E:30:3F:DF:7E:93:2B:D7:6D X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:03:74:db:2f:04:07:5d:88:2c:de:1e:dd:af:74:b6:9b:ec: 2b:12:00:35:15:3f:38:7f:01:1e:38:1f:54:73:02:bb:d2:f0: 82:33:7a:c4:82:70:37:e0:a6:3d:4d:0a:a6:cb:15:d9:66:be: 84:7c:c4:9a:da:ac:99:17:71:69:52:fc:8c:30:3f:6f:d3:70: 86:b6:e5:02:91:0d:c6:72:2d:99:9a:5d:6d:1b:e6:7d:ff:55: a1:53:a3:f1:50:2e:9a:aa:c5:d9:3f:8e:b6:5b:5f:99:79:01: 5d:0e:ff:97:27:45:f1:5f:46:18:34:83:21:c7:cc:ae:09:a7: d5:f9:63:03:0f:ce:e9:53:dd:bf:86:37:f5:77:f4:e9:bf:7d: df:f3:d5:ea:e4:3e:8b:b1:85:cd:ec:8d:00:0e:0f:d3:c6:58: 88:c0:df:bb:8e:a6:67:df:aa:e9:58:a9:8f:bd:76:56:4f:09: 8f:b1:7a:88:09:52:0b:5e:7d:61:3a:38:76:ef:e1:6d:34:61: 33:9a:ea:06:d7:33:41:78:6d:27:90:20:c5:2e:9f:e9:7d:78: c1:00:7e:8c:c8:3e:81:e4:65:42:5b:de:13:95:2f:cd:d6:1f: 35:fa:a8:b8:49:eb:f0:7f:06:9b:fd:36:36:df:eb:a5:96:38: cb:56:08:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjYwNTEyMTQ1MDMzWhcNMjYwNTE5MTQ1MDMzWjAYMRYwFAYD VQQDEw02YTAzM2UzYS03MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTObeGQMWP6Q5OE0z1zZPgdR1sCkfCH9zRu+gTj5/qfdmnIj9dV9w+lvfBH5 yf4BXgfXR4frktMhRuT6jMElUJLxpckqtssv5caZmXslqr0rVjgALPS0kb3jOpaV aCHAo/NS7IEWhndv+2qFeW5AuenmmVfD/yRmYl9bzkZEInTQcYA+gIyxOxBSYPOz aOTHpr5r8x2oitYpuWnpt5w/eqXYA/3uuQDh5aPGkutmJqrukb/gfjNVbr4TaTWB dKU3hEQaToyANFf1E3aQ0ExiDjbIa8/izwZCGS3EAWypyxMrzcmR7lVQsW4ggmZI flwoQwvcWH0kMY2WkjAVTpFlUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnfP/1z TA6FeujUnjA/336TK9dtMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANwN02y8EB12ILN4e3a90tpvsKxIANRU/OH8BHjgfVHMCu9LwgjN6xIJwN+Cm PU0KpssV2Wa+hHzEmtqsmRdxaVL8jDA/b9NwhrblApENxnItmZpdbRvmff9VoVOj 8VAumqrF2T+OtltfmXkBXQ7/lydF8V9GGDSDIcfMrgmn1fljAw/O6VPdv4Y39Xf0 6b993/PV6uQ+i7GFzeyNAA4P08ZYiMDfu46mZ9+q6Vipj712Vk8Jj7F6iAlSC159 YTo4du/hbTRhM5rqBtczQXhtJ5AgxS6f6X14wQB+jMg+geRlQlveE5UvzdYfNfqo uEnr8H8Gm/02Nt/rpZY4y1YIZw== -----END CERTIFICATE-----Generated at Wed May 13 14:23:40 2026 by rpki-client