$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json) Hash identifier: yl00EBd6ZdR+3POj/1iGXbHHwjOMn+uIMN6Qf+vI/LU= Subject key identifier: 9C:2D:DE:35:8F:85:C6:21:93:A4:C9:8A:03:27:38:5C:02:52:0D:45 Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft Manifest number: 35 Signing time: Wed 13 May 2026 08:49:00 +0000 Manifest this update: Wed 13 May 2026 08:49:00 +0000 Manifest next update: Wed 20 May 2026 08:49:00 +0000 Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: JYxjL3pymkAGlQxYIeuqocp6Sa4j761fp877bR6Ij3g=) 2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Validity Not Before: May 13 08:49:00 2026 GMT Not After : May 20 08:49:00 2026 GMT Subject: CN=6a043afc-0962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:54:7c:42:51:dd:c3:3b:63:e1:8e:78:d9:fb: ac:23:5a:20:3b:23:f8:fb:c5:3b:ec:65:d9:6f:08: e9:9d:96:0e:dc:0f:2d:e7:6d:02:2c:9b:82:35:95: 6c:58:2d:d7:f4:21:81:a3:75:ed:eb:f2:72:eb:75: c4:e4:ae:1d:02:0a:5e:12:c4:a5:b4:a4:b9:98:71: 9d:9f:f5:0d:50:7a:cf:0d:49:aa:7e:06:f5:16:27: 0b:c0:8a:70:60:10:4c:89:3c:d0:31:86:b1:d3:dd: 7c:fd:d5:9b:5f:e2:a6:2a:6c:4c:97:8e:93:cd:54: d2:a4:72:9d:01:e9:cb:de:70:72:8b:80:c6:96:38: a9:8b:23:62:02:0d:ef:ef:b6:ad:08:55:89:71:f0: 97:4f:57:59:d5:05:92:f5:41:5a:c8:e0:04:36:10: 71:b9:a6:f7:d4:04:00:e6:af:1e:2b:90:4f:d8:cd: a9:68:a0:af:6e:1b:3a:b4:c3:93:80:df:21:93:24: 5e:dc:d5:81:e8:8a:7c:0d:97:b3:74:1c:18:f3:81: 39:87:95:0b:44:38:db:2d:0e:dc:f4:98:65:bb:a5: 58:39:a5:f7:0f:9f:ad:2d:65:dc:98:36:92:1b:dc: b7:d0:6a:05:bb:eb:88:5c:14:87:5a:cd:57:4e:2e: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2D:DE:35:8F:85:C6:21:93:A4:C9:8A:03:27:38:5C:02:52:0D:45 X509v3 Authority Key Identifier: keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:13:1e:b6:ff:50:d6:85:dc:9e:b2:f7:ba:26:b9:e6:e1:16: 7c:1a:17:50:56:00:53:8d:d7:66:b9:c3:57:b5:b5:5c:51:9e: 2b:4d:9e:53:49:9c:b9:3d:4b:3c:8f:13:66:d0:cb:af:dc:db: df:8f:aa:9a:4f:7f:a0:c1:8c:12:78:a2:3f:36:d0:f9:c4:4e: b8:f5:94:f8:c1:21:05:c6:76:12:40:39:bc:e7:70:f2:7f:2f: 86:4e:2e:be:fe:53:80:94:f3:50:0e:6f:68:45:7e:8b:be:b8: bc:ca:1d:f5:e7:d5:52:2a:a9:ed:44:63:e1:0b:5b:bf:45:b1: 84:f3:4f:93:84:0a:45:da:47:1b:51:20:37:79:ee:a0:8d:ba: 72:b1:6b:17:5a:b7:0f:9e:d8:1c:58:5e:61:08:53:68:4d:69: cb:cb:e5:8d:a6:c3:0a:25:d1:98:08:63:47:f1:0d:6b:61:94: 6c:14:3e:ec:14:ad:d3:af:6c:42:48:88:cb:33:b3:3a:cb:2c: 36:a6:11:e6:5f:ea:52:8d:48:18:42:18:17:9c:61:4d:e0:4b: 6a:b2:e4:84:ef:7d:07:84:09:b2:65:48:56:02:10:2c:e0:ef: 0d:99:a0:75:07:1d:09:25:a1:dd:93:d6:34:6e:e7:1f:79:91: a3:3b:ee:2c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUI0QzExMC8GA1UEBRMoRkJCQjZGMzhGNjcwM0QwMkQ3MjZFREU0NjIzOUIzQkVE OEExRjFFNDAeFw0yNjA1MTMwODQ5MDBaFw0yNjA1MjAwODQ5MDBaMBgxFjAUBgNV BAMTDTZhMDQzYWZjLTA5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKVHxCUd3DO2PhjnjZ+6wjWiA7I/j7xTvsZdlvCOmdlg7cDy3nbQIsm4I1lWxY Ldf0IYGjde3r8nLrdcTkrh0CCl4SxKW0pLmYcZ2f9Q1Qes8NSap+BvUWJwvAinBg EEyJPNAxhrHT3Xz91Ztf4qYqbEyXjpPNVNKkcp0B6cvecHKLgMaWOKmLI2ICDe/v tq0IVYlx8JdPV1nVBZL1QVrI4AQ2EHG5pvfUBADmrx4rkE/YzalooK9uGzq0w5OA 3yGTJF7c1YHoinwNl7N0HBjzgTmHlQtEONstDtz0mGW7pVg5pfcPn60tZdyYNpIb 3LfQagW764hcFIdazVdOLhFpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnC3eNY+F xiGTpMmKAyc4XAJSDUUwHwYDVR0jBBgwFoAU+7tvOPZwPQLXJu3kYjmzvtih8eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0EwQjU3OUIyMDdF MjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFMWEp1M2tZam16dnRpaDhl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLTd0dk9QWndQUUxYSnUza1lqbXp2dGloOGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QjRDL0EwQjU3OUIyMDdFMjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFM WEp1M2tZam16dnRpaDhlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7Ex62/1DWhdyesve6Jrnm4RZ8GhdQVgBTjddmucNXtbVcUZ4rTZ5TSZy5PUs8 jxNm0Muv3Nvfj6qaT3+gwYwSeKI/NtD5xE649ZT4wSEFxnYSQDm853Dyfy+GTi6+ /lOAlPNQDm9oRX6Lvri8yh3159VSKqntRGPhC1u/RbGE80+ThApF2kcbUSA3ee6g jbpysWsXWrcPntgcWF5hCFNoTWnLy+WNpsMKJdGYCGNH8Q1rYZRsFD7sFK3Tr2xC SIjLM7M6yyw2phHmX+pSjUgYQhgXnGFN4EtqsuSE730HhAmyZUhWAhAs4O8NmaB1 Bx0JJaHdk9Y0bucfeZGjO+4s -----END CERTIFICATE-----Generated at Wed May 13 15:55:49 2026 by rpki-client