$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: NjICMZCrAODk+6QTgs1pPe+ZNf6A6Wk0PMxW88wZHxk= Subject key identifier: 7D:B3:DB:84:82:84:46:6F:62:AE:7E:DC:F0:39:B9:99:BE:D8:BC:60 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 0278 Signing time: Wed 13 May 2026 02:08:48 +0000 Manifest this update: Wed 13 May 2026 02:08:47 +0000 Manifest next update: Wed 20 May 2026 02:08:47 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: pTUYkP1Iqax8zkqmR40223J1Ok8ix51YnOyl/iZCeDg=) 2: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: Mgaf9CSqoVizRMwA95HzOIftcIqXK+Ix2kwlxzxOnak=) 3: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: 8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 13 02:08:47 2026 GMT Not After : May 20 02:08:47 2026 GMT Subject: CN=6a03dd30-f3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7c:df:06:c1:e3:86:93:78:7c:2b:13:05:da: 3d:b7:d3:40:38:b7:38:de:c3:a0:48:12:23:15:80: f3:6b:45:66:d3:bf:63:2f:13:e8:67:d3:e9:59:f2: d5:2e:7b:da:a4:de:e2:a3:c2:74:4a:2d:29:28:c3: ad:8a:e8:ab:21:28:ac:47:77:5e:d4:47:1f:c9:3c: 35:6d:80:91:78:ae:24:a1:60:f8:2d:cb:fb:55:e3: 07:b6:4f:34:76:e5:8c:c7:29:bb:a8:24:e6:02:b1: 49:03:df:6d:0b:79:34:d6:22:47:02:f9:b2:a4:bb: ed:62:f8:df:32:42:16:5d:4a:ee:dc:40:f9:bb:c6: 95:d8:86:2b:6e:4b:6a:91:44:ce:33:d5:f0:c1:34: 69:23:99:c0:21:29:e4:85:01:41:58:40:02:d1:0c: a7:3e:19:c8:18:6a:6c:e0:be:2c:6c:e0:3d:73:5e: 47:5d:cb:92:b8:0f:db:6f:01:b1:f3:7e:71:3d:30: 52:22:b0:cd:e7:b5:b4:92:11:40:2e:4b:17:f5:02: b0:e1:c2:d7:5a:02:b5:41:4b:81:14:d2:2f:56:5b: 4f:86:a2:f9:cc:c5:62:d5:8e:82:5a:76:bf:e3:0d: f0:23:d4:be:a1:9b:42:ac:f2:16:c9:35:23:d0:6b: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B3:DB:84:82:84:46:6F:62:AE:7E:DC:F0:39:B9:99:BE:D8:BC:60 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:73:08:50:c3:d1:bf:41:c0:77:93:83:ae:91:6d:70:e4:83: 43:77:ef:87:a1:1b:a7:b9:22:2f:56:a4:d6:94:03:fb:20:ca: e6:34:6a:cd:0b:2a:53:f0:d2:f7:1c:b6:c0:43:8c:c9:e0:30: b4:16:7f:1e:56:db:3e:b2:52:6c:b4:15:ff:06:19:80:02:ad: 91:09:05:76:a0:89:f4:78:46:15:e4:e7:de:93:5b:1c:8a:48: 25:3f:ca:f5:e2:9e:b6:4b:a2:e6:42:32:1e:90:93:06:85:b5: b9:e6:4b:7a:79:59:ce:07:76:f2:bf:10:c3:2e:46:d1:e9:a5: 2b:f4:6b:c5:10:43:96:e9:26:8b:18:0d:37:fe:76:db:d9:d1: 6c:a2:04:3d:25:e0:db:c8:c9:e3:85:b8:11:fc:d7:08:45:46: 2a:e2:db:13:76:d4:f3:82:ef:0e:31:5a:04:a7:a7:1f:78:67: 03:a6:e7:84:1d:5e:e6:00:56:c8:d8:72:11:3e:65:5a:c6:d4: a6:6e:07:b9:8f:d8:9f:75:4c:66:ca:b9:60:4c:66:ca:a9:b5: 39:87:91:66:6c:6d:fc:e0:09:35:c2:b8:d5:c1:9d:de:d9:54: 97:fd:4a:fd:95:d4:4e:ee:56:4f:60:88:71:da:06:ca:23:52: 1b:74:d9:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjYwNTEzMDIwODQ3WhcNMjYwNTIwMDIwODQ3WjAYMRYwFAYD VQQDEw02YTAzZGQzMC1mM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HzfBsHjhpN4fCsTBdo9t9NAOLc43sOgSBIjFYDza0Vm079jLxPoZ9PpWfLV LnvapN7io8J0Si0pKMOtiuirISisR3de1EcfyTw1bYCReK4koWD4Lcv7VeMHtk80 duWMxym7qCTmArFJA99tC3k01iJHAvmypLvtYvjfMkIWXUru3ED5u8aV2IYrbktq kUTOM9XwwTRpI5nAISnkhQFBWEAC0QynPhnIGGps4L4sbOA9c15HXcuSuA/bbwGx 835xPTBSIrDN57W0khFALksX9QKw4cLXWgK1QUuBFNIvVltPhqL5zMVi1Y6CWna/ 4w3wI9S+oZtCrPIWyTUj0GvTuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2z24SC hEZvYq5+3PA5uZm+2LxgMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVXMIUMPRv0HAd5ODrpFtcOSDQ3fvh6Ebp7kiL1ak1pQD+yDK5jRqzQsqU/DS 9xy2wEOMyeAwtBZ/HlbbPrJSbLQV/wYZgAKtkQkFdqCJ9HhGFeTn3pNbHIpIJT/K 9eKetkui5kIyHpCTBoW1ueZLenlZzgd28r8Qwy5G0emlK/RrxRBDlukmixgNN/52 29nRbKIEPSXg28jJ44W4EfzXCEVGKuLbE3bU84LvDjFaBKenH3hnA6bnhB1e5gBW yNhyET5lWsbUpm4HuY/Yn3VMZsq5YExmyqm1OYeRZmxt/OAJNcK41cGd3tlUl/1K /ZXUTu5WT2CIcdoGyiNSG3TZag== -----END CERTIFICATE-----Generated at Wed May 13 11:43:44 2026 by rpki-client