$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: ysruRbPKPpWhhjHwMZocwkI59pahAgjfSyP/5sInwgM= Subject key identifier: 7F:F3:96:62:CD:0C:44:4C:64:34:A3:03:CA:40:EE:D1:9A:97:CE:41 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: 9E Signing time: Mon 11 May 2026 07:34:33 +0000 Manifest this update: Mon 11 May 2026 07:34:32 +0000 Manifest next update: Mon 18 May 2026 07:34:32 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: /XZ+vtzYGhfw8ZXoFUPtOUPcTmzPSBWiY7vF2YpDBq0=) 2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=) 3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: May 11 07:34:32 2026 GMT Not After : May 18 07:34:32 2026 GMT Subject: CN=6a018689-f211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:4f:68:4d:6f:1f:c0:00:fc:85:0d:f9:cb: 65:e8:f4:5c:47:03:c5:f2:5e:67:b9:be:74:8e:94: f3:74:7b:aa:78:b6:39:db:a5:20:fb:e8:55:27:46: c4:fc:0c:dc:c0:bc:c8:b0:51:f7:68:22:76:c9:ec: 3f:3d:af:85:4c:f2:ba:1e:b6:ec:ff:1d:6b:e4:fd: 34:b3:34:8e:26:13:47:78:c2:b8:63:b6:60:40:f7: 8c:c5:aa:ec:08:56:5d:78:14:ee:6a:7f:6d:e3:db: 8c:16:e5:4f:7a:b1:4f:e7:53:03:2f:9b:95:ec:17: 57:36:50:16:f0:bb:a4:a5:97:6d:de:57:6f:1b:51: 93:2a:4a:ef:1a:c1:d7:af:e4:0e:a8:59:ce:ee:05: 59:75:ac:0e:c6:b1:11:40:eb:8d:36:e3:64:32:bd: 82:93:65:bc:b8:e7:b2:b2:19:52:77:87:1f:e6:f4: ff:b6:6a:0c:eb:09:d8:3c:e7:de:81:74:a8:1a:dd: fc:39:a2:d8:24:af:0d:61:9d:a3:aa:61:53:f2:93: 1c:0a:4d:42:be:8c:88:23:6e:85:cc:1a:c1:64:fb: b8:65:3f:bc:14:a3:9a:19:42:86:f4:83:70:3f:49: c8:57:c9:90:55:e0:0f:1e:20:dd:02:dc:c8:9f:ef: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F3:96:62:CD:0C:44:4C:64:34:A3:03:CA:40:EE:D1:9A:97:CE:41 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:95:72:99:1f:5e:a3:ac:fd:db:86:c9:c0:11:a9:38:41:15: 04:2c:26:eb:7b:57:6f:4e:cd:8e:39:8e:c0:d6:f3:c6:56:9f: 18:5e:e7:7c:a0:7b:95:1b:0e:dc:7b:4b:e4:8d:f5:3b:92:83: 89:d2:62:f2:ae:16:88:48:39:d0:14:59:d6:2e:b2:06:17:fa: 1f:6a:9b:12:ed:f2:9a:67:90:52:ef:40:56:b8:de:db:54:ac: cc:ac:cf:a8:a9:c5:e1:bf:70:79:bf:4c:3a:68:15:36:ed:3a: fe:e9:c9:5d:78:f4:ce:6a:33:32:b7:35:dc:91:ac:f6:b8:e4: 52:ce:58:ef:9f:59:0c:6c:30:b9:45:32:17:7d:cf:e9:cb:a7: bc:d6:0e:6e:0a:4b:55:f0:dd:08:9e:68:b3:98:d3:ba:83:ed: 0b:e4:a8:5e:17:9c:75:d4:69:b7:44:89:f2:e9:dc:56:fb:e7: 73:2f:da:f8:dd:c5:74:e7:51:81:f1:ab:48:7b:d9:e6:f3:f3: 9c:65:d9:8a:10:55:74:29:99:a9:23:95:b0:9f:93:b7:33:86: 12:4c:e7:73:d5:dd:19:26:14:6d:d0:4b:be:be:e9:68:73:d5: 68:d5:e7:5a:60:9e:ca:20:88:b3:59:b6:22:e0:56:e0:0c:b5: 4b:47:8b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwNTExMDczNDMyWhcNMjYwNTE4MDczNDMyWjAYMRYwFAYD VQQDEw02YTAxODY4OS1mMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxlPaE1vH8AA/IUN+ctl6PRcRwPF8l5nub50jpTzdHuqeLY526Ug++hVJ0bE /AzcwLzIsFH3aCJ2yew/Pa+FTPK6Hrbs/x1r5P00szSOJhNHeMK4Y7ZgQPeMxars CFZdeBTuan9t49uMFuVPerFP51MDL5uV7BdXNlAW8LukpZdt3ldvG1GTKkrvGsHX r+QOqFnO7gVZdawOxrERQOuNNuNkMr2Ck2W8uOeyshlSd4cf5vT/tmoM6wnYPOfe gXSoGt38OaLYJK8NYZ2jqmFT8pMcCk1CvoyII26FzBrBZPu4ZT+8FKOaGUKG9INw P0nIV8mQVeAPHiDdAtzIn+9aJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/zlmLN DERMZDSjA8pA7tGal85BMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUZVymR9eo6z924bJwBGpOEEVBCwm63tXb07NjjmOwNbzxlafGF7nfKB7lRsO 3HtL5I31O5KDidJi8q4WiEg50BRZ1i6yBhf6H2qbEu3ymmeQUu9AVrje21SszKzP qKnF4b9web9MOmgVNu06/unJXXj0zmozMrc13JGs9rjkUs5Y759ZDGwwuUUyF33P 6cunvNYObgpLVfDdCJ5os5jTuoPtC+SoXhecddRpt0SJ8uncVvvncy/a+N3FdOdR gfGrSHvZ5vPznGXZihBVdCmZqSOVsJ+TtzOGEkznc9XdGSYUbdBLvr7paHPVaNXn WmCeyiCIs1m2IuBW4Ay1S0eLyA== -----END CERTIFICATE-----Generated at Wed May 13 03:43:41 2026 by rpki-client