$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: QSBLNByR+Zy8BteznC+nnvIpl+XOYzRZ/Wow8ppzcWM= Subject key identifier: 6E:EA:02:96:B3:F0:93:F7:2D:74:BD:AB:11:F6:FB:B7:6A:98:F4:4E Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 0213 Signing time: Wed 13 May 2026 03:04:28 +0000 Manifest this update: Wed 13 May 2026 03:04:28 +0000 Manifest next update: Wed 20 May 2026 03:04:28 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: MHVlabadCTI4KoM/afsa/1YeqBC+M2y6NMehoHndjnA=) 2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=) 3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: May 13 03:04:28 2026 GMT Not After : May 20 03:04:28 2026 GMT Subject: CN=6a03ea3c-b40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:63:c4:eb:d0:66:96:0b:20:d1:b5:5f:6e: c2:be:fc:83:b4:29:b0:1a:e8:90:77:9f:92:b7:81: c8:99:15:1f:cb:8d:2c:69:69:09:94:a6:34:12:89: 20:98:17:e4:23:c4:80:26:b6:50:cb:e1:c4:25:99: 9c:74:33:f4:18:10:5b:c5:74:12:40:72:b7:90:3f: d1:bb:21:a1:53:8e:8a:10:de:e0:dc:e8:2c:27:54: 5b:28:8d:ea:2a:c9:70:03:e6:89:98:56:8f:91:4c: 8d:99:19:9c:2d:73:3b:31:39:ec:e5:a8:43:2f:85: d4:7c:74:47:2f:12:ee:45:ca:08:79:53:84:0a:b0: b6:1c:72:c1:a4:d0:9a:a4:0e:09:60:45:45:51:84: 52:bb:99:db:66:b4:d1:39:28:6f:63:e8:a6:92:5d: 1b:d5:32:23:b9:20:95:88:ec:cc:b6:5d:44:d3:27: 6e:2e:7d:f5:7f:48:64:f5:cc:40:a4:bf:2f:02:a1: d0:1d:90:fa:a0:8a:54:dc:ab:f5:f7:ff:08:2f:18: 4f:f4:75:ea:11:17:8f:e1:28:d0:db:95:62:3b:03: 30:30:0b:d8:48:26:57:2c:b6:3f:2f:65:c9:09:a3: 31:92:ec:f1:ba:74:98:03:84:cc:e0:3f:55:54:7f: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EA:02:96:B3:F0:93:F7:2D:74:BD:AB:11:F6:FB:B7:6A:98:F4:4E X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:97:86:42:99:fe:ee:09:12:42:cf:bd:ab:56:33:93:b5:bc: de:60:7f:ef:c3:2d:43:c6:fa:d0:b9:80:cc:f3:eb:d3:7b:a1: 50:4e:c4:73:88:f9:9e:9b:09:16:16:22:9f:14:39:d7:2f:ca: b6:9b:f8:05:0b:46:03:95:9c:4d:77:f6:a7:d9:6d:c0:69:88: fc:cd:85:4a:4d:ce:02:aa:b6:62:51:62:c4:09:10:60:29:0d: 88:5c:d4:17:5f:54:3f:23:d0:85:fb:9f:ae:d3:6a:7a:cf:4d: a0:c3:2a:2d:92:8f:57:a0:f4:ef:a7:03:39:24:34:9a:12:59: 8f:31:52:bf:76:09:0b:16:b0:db:4c:25:43:dd:67:04:aa:5b: af:c7:74:e4:5d:39:b6:1d:98:cd:5e:7b:33:85:a3:a9:83:8a: aa:02:22:e6:8b:c0:af:f6:68:9d:a2:1c:87:5c:59:ad:82:3f: 5e:54:01:a3:58:30:94:e4:7c:bb:88:84:a1:18:a2:d1:dc:f3: bf:21:63:04:d3:1d:2b:55:da:6f:61:c0:cb:dd:7b:c3:dc:a9: 24:6a:84:e6:e1:e1:85:18:a5:1f:2c:c0:ab:6a:df:b4:ca:f9: cb:ca:30:0a:42:2c:5d:9f:13:2b:93:97:41:3d:94:dc:dc:44: 25:6a:f0:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjYwNTEzMDMwNDI4WhcNMjYwNTIwMDMwNDI4WjAYMRYwFAYD VQQDEw02YTAzZWEzYy1iNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo59jxOvQZpYLING1X27CvvyDtCmwGuiQd5+St4HImRUfy40saWkJlKY0Eokg mBfkI8SAJrZQy+HEJZmcdDP0GBBbxXQSQHK3kD/RuyGhU46KEN7g3OgsJ1RbKI3q KslwA+aJmFaPkUyNmRmcLXM7MTns5ahDL4XUfHRHLxLuRcoIeVOECrC2HHLBpNCa pA4JYEVFUYRSu5nbZrTROShvY+imkl0b1TIjuSCViOzMtl1E0yduLn31f0hk9cxA pL8vAqHQHZD6oIpU3Kv19/8ILxhP9HXqEReP4SjQ25ViOwMwMAvYSCZXLLY/L2XJ CaMxkuzxunSYA4TM4D9VVH/XvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7qApaz 8JP3LXS9qxH2+7dqmPROMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh5eGQpn+7gkSQs+9q1Yzk7W83mB/78MtQ8b60LmAzPPr03uhUE7Ec4j5npsJ FhYinxQ51y/Ktpv4BQtGA5WcTXf2p9ltwGmI/M2FSk3OAqq2YlFixAkQYCkNiFzU F19UPyPQhfufrtNqes9NoMMqLZKPV6D076cDOSQ0mhJZjzFSv3YJCxaw20wlQ91n BKpbr8d05F05th2YzV57M4WjqYOKqgIi5ovAr/ZonaIch1xZrYI/XlQBo1gwlOR8 u4iEoRii0dzzvyFjBNMdK1Xab2HAy917w9ypJGqE5uHhhRilHyzAq2rftMr5y8ow CkIsXZ8TK5OXQT2U3NxEJWrwcw== -----END CERTIFICATE-----Generated at Wed May 13 10:45:06 2026 by rpki-client