$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: Rii2nWLJ7KQZAaHJVmao+GDfEWpfc/sjc2pnpMq5kc0= Subject key identifier: 2A:C8:F4:29:78:A9:B8:74:A9:D3:92:87:11:28:35:FA:12:32:26:7B Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: AD Signing time: Wed 13 May 2026 07:24:40 +0000 Manifest this update: Wed 13 May 2026 07:24:40 +0000 Manifest next update: Wed 20 May 2026 07:24:40 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: vcJJM514tM0o2Rqm3xeK/ldUCS/U1/jxa3IQHmBuRuU=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: May 13 07:24:40 2026 GMT Not After : May 20 07:24:40 2026 GMT Subject: CN=6a042738-75d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:ea:c6:5c:ce:ac:3a:ae:fe:1e:ae:2b:1f: 20:e2:8f:61:d3:9b:64:04:3d:c7:78:57:57:02:ef: 24:f4:4b:46:20:f1:18:df:03:8c:f3:1e:6a:ec:04: 20:84:3a:1b:ee:77:cd:b1:1a:6b:9a:a5:68:14:58: 8e:25:e4:5a:d8:92:8d:61:d3:27:36:58:67:aa:35: 6c:fd:2d:47:a1:ab:c4:1c:46:0b:8e:3f:f7:3f:2d: a2:b0:16:34:8a:4d:87:06:ee:ee:17:a4:15:6b:4e: 8d:7a:a5:ad:58:b9:25:58:86:9d:f1:29:86:b9:72: 6e:56:65:3c:9c:f6:3b:bf:0e:54:4a:53:9d:23:64: 1d:3a:b0:88:cf:62:b0:d4:89:3d:a5:b8:d8:8b:02: ba:0e:45:93:2f:0f:f2:2d:6a:91:bf:24:46:20:e5: c5:c9:26:5e:c4:65:ac:3c:3c:c5:0a:f7:41:97:d7: 67:91:d9:8b:22:de:2d:04:44:a3:b7:6d:7b:21:7b: 4c:56:28:f2:ea:8d:0a:0a:61:ed:4c:d6:f8:f9:0f: 9d:a0:24:a9:96:d8:82:eb:32:91:de:ea:a5:0c:fb: 99:f2:43:b7:28:91:90:78:07:0f:fd:e3:e1:67:c7: 0e:47:59:5f:39:3b:dd:c3:00:10:30:e2:21:7d:8d: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C8:F4:29:78:A9:B8:74:A9:D3:92:87:11:28:35:FA:12:32:26:7B X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:67:b0:2a:96:af:3d:83:0f:ac:e5:15:47:13:72:a0:d2:4a: f0:fb:31:90:0c:e4:c4:7b:aa:cb:2d:47:ab:28:a5:fd:1e:f2: 7b:da:0f:c1:21:2a:2a:11:79:56:a7:03:6f:be:d2:5e:7c:a6: e8:ee:48:2f:24:93:13:1d:b6:f1:55:ec:56:31:f7:bb:bb:51: c2:b6:8b:e6:2f:2f:16:b7:3b:3c:f2:66:9f:20:bf:8f:ee:1b: 48:6b:f3:a2:47:75:3e:19:9e:c1:8f:02:72:58:78:3f:ab:19: a0:4c:de:5a:53:91:e9:89:72:ad:61:87:c0:96:bb:4c:dd:54: c0:08:89:66:29:ed:0f:3b:ed:c7:d5:79:a6:a0:09:e1:f3:d0: 5b:be:c6:a0:f8:4b:e2:70:5a:e5:8f:aa:a3:88:9c:51:ea:6e: 9c:3b:6c:18:f4:97:c9:49:dd:25:c1:ba:1f:be:eb:6c:f0:25: 3d:89:d1:97:a0:9d:0f:f6:8b:f4:2a:4a:2d:96:48:d4:ef:73: 38:a0:88:a5:c9:cd:cb:ea:8a:da:07:d3:8d:1f:30:70:fb:20: 87:31:a6:eb:69:d4:29:a0:ff:b2:42:21:c3:bc:d8:f6:93:c0: f2:85:63:3a:b1:ce:5d:7e:32:69:f8:e0:92:a5:25:43:f5:ce: 10:8c:98:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2NjExMTAvBgNVBAUTKDBGOTE0QTFEQzk0RjVCRTQyRTg4M0MyQURENTQzMEJD REY2REYzMzQwHhcNMjYwNTEzMDcyNDQwWhcNMjYwNTIwMDcyNDQwWjAYMRYwFAYD VQQDEw02YTA0MjczOC03NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxnqxlzOrDqu/h6uKx8g4o9h05tkBD3HeFdXAu8k9EtGIPEY3wOM8x5q7AQg hDob7nfNsRprmqVoFFiOJeRa2JKNYdMnNlhnqjVs/S1HoavEHEYLjj/3Py2isBY0 ik2HBu7uF6QVa06NeqWtWLklWIad8SmGuXJuVmU8nPY7vw5USlOdI2QdOrCIz2Kw 1Ik9pbjYiwK6DkWTLw/yLWqRvyRGIOXFySZexGWsPDzFCvdBl9dnkdmLIt4tBESj t217IXtMVijy6o0KCmHtTNb4+Q+doCSpltiC6zKR3uqlDPuZ8kO3KJGQeAcP/ePh Z8cOR1lfOTvdwwAQMOIhfY3pkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrI9Cl4 qbh0qdOShxEoNfoSMiZ7MB8GA1UdIwQYMBaAFA+RSh3JT1vkLog8Kt1UMLzfbfM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8wRjQzRUMzQzU4 RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFctUXVpRHdxM1ZRd3ZOOXQ4 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTY2MS8wRjQzRUMzQzU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFct UXVpRHdxM1ZRd3ZOOXQ4elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANWewKpavPYMPrOUVRxNyoNJK8PsxkAzkxHuqyy1Hqyil/R7ye9oPwSEqKhF5 VqcDb77SXnym6O5ILySTEx228VXsVjH3u7tRwraL5i8vFrc7PPJmnyC/j+4bSGvz okd1PhmewY8Cclh4P6sZoEzeWlOR6YlyrWGHwJa7TN1UwAiJZintDzvtx9V5pqAJ 4fPQW77GoPhL4nBa5Y+qo4icUepunDtsGPSXyUndJcG6H77rbPAlPYnRl6CdD/aL 9CpKLZZI1O9zOKCIpcnNy+qK2gfTjR8wcPsghzGm62nUKaD/skIhw7zY9pPA8oVj OrHOXX4yafjgkqUlQ/XOEIyYog== -----END CERTIFICATE-----Generated at Wed May 13 11:15:47 2026 by rpki-client