$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: HhWeD93OyP6iL2m9gsMblWMcht968NQIPJ3XIQoLaVk= Subject key identifier: E8:EB:40:BB:CC:6C:BC:CF:4B:9D:4E:BE:B6:D5:15:1F:2E:DF:61:AE Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 03FD Signing time: Wed 13 May 2026 00:37:42 +0000 Manifest this update: Wed 13 May 2026 00:37:41 +0000 Manifest next update: Wed 20 May 2026 00:37:41 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: biR745XQ468P9CAF308luQwbyqgzCbIrgMLuVk2auiA=) 2: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=) 3: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=) 4: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: May 13 00:37:41 2026 GMT Not After : May 20 00:37:41 2026 GMT Subject: CN=6a03c7d6-f429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:5b:2d:54:c2:22:be:7d:ca:58:da:14:15: 09:bf:fa:8a:f4:6b:a8:4c:c9:26:34:4e:e9:af:b9: 8c:81:b0:13:2b:b5:26:9f:4b:9f:c6:4f:63:dd:a0: 84:42:c5:8b:0c:26:19:c2:68:54:ef:c1:ff:c8:f0: aa:65:05:63:37:bd:6b:50:f7:15:ad:18:8d:71:e1: 58:a6:e2:1d:de:3a:e3:95:32:e1:e6:a8:1d:e4:70: c1:5b:dd:81:75:19:b4:a8:94:98:ea:9f:c8:7b:a3: e2:41:eb:9e:92:5b:63:37:68:a0:4d:fe:1a:d9:a7: f6:34:d9:88:58:46:b8:90:88:36:93:a9:2e:26:43: 73:8b:9f:88:49:5f:9c:7c:e9:1d:03:c0:1b:09:9a: 02:ac:ba:3c:7c:89:c1:1a:5f:2f:ae:0c:fa:a9:2a: 20:0d:79:b7:50:3c:22:93:a2:fe:bb:6a:1a:06:03: 32:74:fc:58:07:f8:93:69:42:2e:fc:13:58:be:5b: 96:5f:03:27:68:82:65:fc:6e:7a:06:3b:4d:f7:ba: e3:ae:5a:9d:3a:92:0c:55:a5:fc:47:e3:29:28:f3: 86:73:cd:5c:74:45:28:b9:f7:ff:a2:eb:a0:84:d9: e7:3d:13:2d:7e:a7:a2:59:db:e6:4b:b0:47:f2:e7: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EB:40:BB:CC:6C:BC:CF:4B:9D:4E:BE:B6:D5:15:1F:2E:DF:61:AE X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:96:d6:91:69:ac:ed:de:95:35:59:38:f7:69:ad:01:a5:62: 87:52:6d:cc:d9:35:ea:36:0b:55:e8:af:37:fc:3b:fd:67:7f: 31:fd:4a:6f:cf:5b:ce:e7:12:7d:21:fc:30:e4:5c:fa:69:10: 1d:d4:24:2b:10:c5:48:61:b4:8d:a7:36:96:cc:d0:4e:ef:83: e2:5e:ac:b5:0d:0d:24:15:c2:38:d3:b7:df:a6:80:1f:6b:dc: 3d:36:71:80:d7:27:35:0e:42:b2:b3:e1:6f:3b:fb:7f:ec:80: c7:62:36:1b:4a:49:64:09:5a:c2:cd:bd:ca:54:9d:49:b4:e7: 4b:c3:9b:58:53:15:4f:91:34:45:0a:af:c6:1c:06:50:8e:d9: de:51:54:2f:a5:cd:53:74:5e:2a:dc:11:2a:16:9d:87:9c:7c: f1:7c:38:ee:e1:87:d1:3e:aa:e2:4a:42:5b:31:c5:79:83:25: 7f:da:5c:83:4c:cb:32:b8:86:80:e2:2c:2d:40:1c:2c:7d:1c: 1d:b6:06:53:55:af:5c:99:08:91:49:3d:62:9d:ad:57:ac:7b: 05:f9:0f:df:04:4b:31:21:71:8a:d9:38:4c:85:7c:8e:d5:41: 92:7a:17:e3:e8:31:04:ad:5a:fa:5c:08:cc:22:5f:39:ba:63: 3a:e6:5b:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYwNTEzMDAzNzQxWhcNMjYwNTIwMDAzNzQxWjAYMRYwFAYD VQQDEw02YTAzYzdkNi1mNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6C1bLVTCIr59yljaFBUJv/qK9GuoTMkmNE7pr7mMgbATK7Umn0ufxk9j3aCE QsWLDCYZwmhU78H/yPCqZQVjN71rUPcVrRiNceFYpuId3jrjlTLh5qgd5HDBW92B dRm0qJSY6p/Ie6PiQeuekltjN2igTf4a2af2NNmIWEa4kIg2k6kuJkNzi5+ISV+c fOkdA8AbCZoCrLo8fInBGl8vrgz6qSogDXm3UDwik6L+u2oaBgMydPxYB/iTaUIu /BNYvluWXwMnaIJl/G56BjtN97rjrlqdOpIMVaX8R+MpKPOGc81cdEUouff/ouug hNnnPRMtfqeiWdvmS7BH8ucDEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjrQLvM bLzPS51OvrbVFR8u32GuMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpbWkWms7d6VNVk492mtAaVih1JtzNk16jYLVeivN/w7/Wd/Mf1Kb89bzucS fSH8MORc+mkQHdQkKxDFSGG0jac2lszQTu+D4l6stQ0NJBXCONO336aAH2vcPTZx gNcnNQ5CsrPhbzv7f+yAx2I2G0pJZAlaws29ylSdSbTnS8ObWFMVT5E0RQqvxhwG UI7Z3lFUL6XNU3ReKtwRKhadh5x88Xw47uGH0T6q4kpCWzHFeYMlf9pcg0zLMriG gOIsLUAcLH0cHbYGU1WvXJkIkUk9Yp2tV6x7BfkP3wRLMSFxitk4TIV8jtVBknoX 4+gxBK1a+lwIzCJfObpjOuZbZA== -----END CERTIFICATE-----Generated at Wed May 13 15:30:49 2026 by rpki-client