$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: nb4xk/1TsxmmM7UJ5Fv/4RE/sFH9niQatcFjnoSGpbA= Subject key identifier: D9:73:1B:8F:E2:8A:72:B2:D2:0A:3B:23:83:26:30:B1:55:85:DA:E2 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 06F9 Signing time: Tue 12 May 2026 22:26:08 +0000 Manifest this update: Tue 12 May 2026 22:26:07 +0000 Manifest next update: Tue 19 May 2026 22:26:07 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: jwrBlQy6CuFRyGzVN8leDozoCQw/UDxjYHjDPFQPzfk=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: mjocAbD55sni/MpKHvpZIoG9vwTBNbsg26qx5ur9R1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: May 12 22:26:07 2026 GMT Not After : May 19 22:26:07 2026 GMT Subject: CN=6a03a8ff-e348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:e3:68:2c:2b:43:4d:f0:68:7d:38:89:4c: dc:3a:a1:68:49:e6:94:0c:66:50:fe:82:1b:e6:c8: a6:e4:cf:66:4a:84:94:cc:6f:ae:ca:25:64:85:0f: 7c:93:89:d9:86:bb:6b:b4:19:23:be:1a:7e:9f:a5: ab:54:dd:22:d8:70:c3:4c:7f:0a:e4:f6:33:28:e5: fb:ee:46:50:ee:87:4b:1b:c9:2e:db:e3:ff:b3:e1: d0:a3:84:80:c4:14:8a:ce:e4:cd:f7:ad:14:34:8e: 41:b5:dc:a4:ed:57:e0:32:6c:8b:ed:b0:94:0e:81: ba:f9:1b:a2:24:28:ac:2c:04:11:41:b1:9b:9d:54: ca:f7:02:a1:72:41:d0:a8:8b:9c:ad:c9:27:45:8c: 63:c5:35:2e:fa:30:ac:63:23:55:91:ce:61:c4:76: 4c:07:be:4c:72:e9:52:5c:7a:d1:1f:3d:61:49:73: c9:72:0f:85:f6:ec:d7:6d:8f:1a:38:73:d9:bf:50: 09:0d:f5:2b:dc:bb:22:8f:77:3f:d6:e7:89:1d:3e: 7d:f9:b6:a2:96:d1:5c:e9:85:36:99:41:e6:5a:51: 55:b9:08:cd:df:c1:40:4b:fd:6e:03:ee:32:3e:2c: d6:c3:d5:13:a5:3e:50:b9:72:5d:1f:41:19:ac:81: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:73:1B:8F:E2:8A:72:B2:D2:0A:3B:23:83:26:30:B1:55:85:DA:E2 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c5:a1:1b:2e:5e:8a:36:9c:d7:de:95:2f:18:78:81:a3:84: 97:c9:d1:18:22:1a:b3:1a:f8:e7:f9:aa:e1:29:1f:61:3a:5c: 67:bd:1f:a7:7b:fd:ca:21:e8:5d:49:d2:64:f9:e2:61:06:0c: a6:1b:bc:af:cf:f3:47:91:a0:01:b3:b4:bf:30:77:3e:b5:76: b9:7f:78:2d:fa:0c:47:b9:08:81:df:f5:75:3a:2c:a6:98:92: 77:24:f6:5a:4f:c7:a1:71:3b:6f:f7:2c:5c:79:e6:fa:aa:ac: 83:36:8d:10:a9:b4:14:30:77:41:8f:9a:22:31:a4:49:26:9d: 5d:ff:96:fa:a3:3f:0e:ae:ed:02:c9:4a:b2:ca:4a:e5:91:c9: 3b:d6:43:22:41:cb:01:23:3a:84:fc:09:9d:d4:bd:be:3c:b4: 77:86:46:50:7a:10:01:4b:79:99:a8:47:38:b9:f2:14:ca:d3: 90:1e:c1:0a:6e:db:1c:b4:0e:0b:fd:fc:ae:d8:2f:f5:b3:c2: 85:53:4f:cd:d0:95:d1:3e:48:1c:36:89:f4:99:b5:f0:e7:80: 22:c2:53:9a:bf:6d:48:93:93:b4:61:b1:34:bd:9c:e6:96:99: cc:30:98:3c:93:25:87:1f:42:93:d5:75:61:9a:35:42:74:16: 9b:cf:bd:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjYwNTEyMjIyNjA3WhcNMjYwNTE5MjIyNjA3WjAYMRYwFAYD VQQDEw02YTAzYThmZi1lMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQDjaCwrQ03waH04iUzcOqFoSeaUDGZQ/oIb5sim5M9mSoSUzG+uyiVkhQ98 k4nZhrtrtBkjvhp+n6WrVN0i2HDDTH8K5PYzKOX77kZQ7odLG8ku2+P/s+HQo4SA xBSKzuTN960UNI5Btdyk7VfgMmyL7bCUDoG6+RuiJCisLAQRQbGbnVTK9wKhckHQ qIucrcknRYxjxTUu+jCsYyNVkc5hxHZMB75MculSXHrRHz1hSXPJcg+F9uzXbY8a OHPZv1AJDfUr3Lsij3c/1ueJHT59+bailtFc6YU2mUHmWlFVuQjN38FAS/1uA+4y PizWw9UTpT5QuXJdH0EZrIFrHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlzG4/i inKy0go7I4MmMLFVhdriMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXcWhGy5eijac196VLxh4gaOEl8nRGCIasxr45/mq4SkfYTpcZ70fp3v9yiHo XUnSZPniYQYMphu8r8/zR5GgAbO0vzB3PrV2uX94LfoMR7kIgd/1dTosppiSdyT2 Wk/HoXE7b/csXHnm+qqsgzaNEKm0FDB3QY+aIjGkSSadXf+W+qM/Dq7tAslKsspK 5ZHJO9ZDIkHLASM6hPwJndS9vjy0d4ZGUHoQAUt5mahHOLnyFMrTkB7BCm7bHLQO C/38rtgv9bPChVNPzdCV0T5IHDaJ9Jm18OeAIsJTmr9tSJOTtGGxNL2c5paZzDCY PJMlhx9Ck9V1YZo1QnQWm8+9sQ== -----END CERTIFICATE-----Generated at Wed May 13 04:34:42 2026 by rpki-client