$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: Zd0Px77BOCuxSFrob3FiYpIvNvvTTGfTdaCQtSFtt5Q= Subject key identifier: CB:31:87:EB:8D:B1:50:97:BD:51:7A:55:26:84:A0:38:76:26:A6:F3 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0CA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C8A Signing time: Tue 12 May 2026 18:38:46 +0000 Manifest this update: Tue 12 May 2026 18:38:45 +0000 Manifest next update: Tue 19 May 2026 18:38:45 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: BSFxFCh2JiY67yaKL/EyXwr9HxqfvaeGF1TyUuRsYcY=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: OW7bqpEFe7SvDOP9JKARQF/4Dv4BbGM5LIvC7KwAqes=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: HsO9P79p+Dz9d/F54R7UspGL8AUMT0cv4Reo5e0BZX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: May 12 18:38:45 2026 GMT Not After : May 19 18:38:45 2026 GMT Subject: CN=6a0373b6-63b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:7e:c2:f7:ad:38:79:47:33:54:db:db:74: f9:b7:41:bd:40:ba:2e:58:63:f3:f0:97:f6:9a:a0: d4:4a:eb:ae:a2:9f:3d:55:4f:35:f1:f7:61:49:c0: 52:e8:47:82:d9:fa:7c:95:21:06:02:77:68:29:1a: 59:4d:86:7e:c0:8f:90:82:f2:5a:e8:6d:4e:f0:f0: 77:86:3f:13:ef:b7:ce:04:8f:c1:2d:02:19:e2:f4: 87:f8:9b:54:36:b0:3d:ef:3e:33:26:1b:60:2b:56: c0:d8:c6:21:c6:0c:e6:c8:a2:2e:2f:2f:be:18:f8: 68:17:2a:b2:45:43:f5:4a:25:4c:32:1b:0b:03:bf: dc:c8:24:58:fe:84:18:d6:d7:f6:8d:cc:d6:ef:9b: e2:36:50:70:d6:63:0c:d7:81:6f:d0:6b:b4:89:b5: 6f:92:b6:f5:da:b2:5e:54:26:8d:ac:cb:ce:f3:bb: b3:49:15:3a:5d:b3:e9:9b:65:14:15:07:1f:35:e2: 19:36:7b:60:91:1d:d6:72:7d:53:d1:14:70:6a:ec: a6:f1:04:5f:5d:e1:95:18:7a:45:af:fa:7a:68:38: fd:87:d3:07:a4:30:98:97:ce:c3:41:c9:a4:1a:3d: f2:39:09:bc:1d:18:27:8c:5c:8c:26:57:cb:6d:50: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:31:87:EB:8D:B1:50:97:BD:51:7A:55:26:84:A0:38:76:26:A6:F3 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fb:ef:3e:91:14:3f:0f:7d:ab:07:62:a9:2b:7e:34:d7:45: 37:1c:f2:1b:39:0d:25:a4:27:bb:1f:4b:35:eb:72:de:20:2b: 8c:ac:ce:76:68:cd:07:ff:38:f4:40:72:da:c2:2a:05:41:aa: 0e:ff:2e:32:a7:ae:4b:a3:b8:66:d1:14:e4:e2:47:e0:0b:a2: d2:77:20:bd:1e:92:8b:fd:56:09:99:37:de:94:c2:4d:4e:01: e7:aa:df:20:36:10:54:4f:cf:68:33:87:90:38:05:f0:6f:ed: 47:7f:4f:c4:8a:df:84:03:86:05:18:20:4f:00:31:14:74:4a: 24:80:2b:b0:6e:fd:15:7a:fc:2e:b0:d5:f1:5f:02:16:65:65: 59:75:e5:71:58:62:11:48:17:bf:6c:f2:dc:e1:5f:9e:76:47: 21:78:5c:ea:02:4c:e2:93:bf:05:8c:e3:0d:70:f9:c3:cd:58: f8:c1:35:36:a4:25:fb:25:e9:5b:52:7a:fd:f4:00:d2:fb:1c: 4c:86:68:46:ff:63:a6:0b:2a:c3:e2:75:5b:8f:72:f2:83:04: 7d:78:46:e3:78:64:bb:2c:e3:6b:c7:29:31:6f:25:0e:eb:27: 76:4d:6c:45:6b:8e:90:53:b8:4b:df:ba:98:d3:1a:79:d1:79: 25:1e:5d:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjYwNTEyMTgzODQ1WhcNMjYwNTE5MTgzODQ1WjAYMRYwFAYD VQQDEw02YTAzNzNiNi02M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/B+wvetOHlHM1Tb23T5t0G9QLouWGPz8Jf2mqDUSuuuop89VU818fdhScBS 6EeC2fp8lSEGAndoKRpZTYZ+wI+QgvJa6G1O8PB3hj8T77fOBI/BLQIZ4vSH+JtU NrA97z4zJhtgK1bA2MYhxgzmyKIuLy++GPhoFyqyRUP1SiVMMhsLA7/cyCRY/oQY 1tf2jczW75viNlBw1mMM14Fv0Gu0ibVvkrb12rJeVCaNrMvO87uzSRU6XbPpm2UU FQcfNeIZNntgkR3Wcn1T0RRwauym8QRfXeGVGHpFr/p6aDj9h9MHpDCYl87DQcmk Gj3yOQm8HRgnjFyMJlfLbVDQCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMsxh+uN sVCXvVF6VSaEoDh2JqbzMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf/vvPpEUPw99qwdiqSt+NNdFNxzyGzkNJaQnux9LNety3iArjKzOdmjNB/84 9EBy2sIqBUGqDv8uMqeuS6O4ZtEU5OJH4Aui0ncgvR6Si/1WCZk33pTCTU4B56rf IDYQVE/PaDOHkDgF8G/tR39PxIrfhAOGBRggTwAxFHRKJIArsG79FXr8LrDV8V8C FmVlWXXlcVhiEUgXv2zy3OFfnnZHIXhc6gJM4pO/BYzjDXD5w81Y+ME1NqQl+yXp W1J6/fQA0vscTIZoRv9jpgsqw+J1W49y8oMEfXhG43hkuyzja8cpMW8lDusndk1s RWuOkFO4S9+6mNMaedF5JR5dWQ== -----END CERTIFICATE-----Generated at Wed May 13 08:32:42 2026 by rpki-client