$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: Aza+wpiJdJMvPoujARBQNyJpdm3XU5/GWILttGyiung= Subject key identifier: E0:DA:72:21:BA:66:5B:6D:F7:6F:39:59:0D:BE:7F:36:68:C2:D3:A5 Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: C7 Signing time: Mon 11 May 2026 06:57:59 +0000 Manifest this update: Mon 11 May 2026 06:57:59 +0000 Manifest next update: Mon 18 May 2026 06:57:59 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: UDpJx/1gEDZlw92LZx7vbDor7fbyZoP1iHj2JQdvup0=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: QZXloWUQ7ddz+/KBWMrxv7U+rSs8GnWshPY4O7WqH3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: May 11 06:57:59 2026 GMT Not After : May 18 06:57:59 2026 GMT Subject: CN=6a017df7-bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:59:ab:6f:f7:e1:b9:c4:af:c1:02:20:27: ff:f4:3f:08:22:0d:24:07:8d:66:be:a6:bd:20:28: 74:c6:5f:60:f1:c8:20:c6:47:57:ed:ca:e2:28:30: 42:10:7a:8f:d8:f9:82:90:7a:c3:2f:b3:43:d2:0a: 47:90:e3:b5:b8:4f:75:a0:2d:7b:54:6d:37:b7:c4: bd:09:7b:44:ee:f0:aa:e8:f5:49:fd:e3:ca:f8:15: b8:41:79:80:e5:65:15:d3:37:25:2e:a9:89:71:59: 72:06:4a:87:59:17:56:1d:df:ca:83:8c:57:95:51: 7d:ff:fe:e5:04:29:ef:1f:f6:8a:b0:62:66:ac:34: 92:92:17:93:56:db:2f:e8:42:e8:4b:36:f7:61:b4: b2:c3:61:5c:c8:24:55:f9:9f:6f:08:3e:0e:d6:58: 1f:4b:32:74:c8:7d:f2:f4:03:7a:4e:b9:4f:fb:73: 29:78:b8:28:8e:b6:1c:63:b7:7e:ce:4f:9c:33:e1: 77:b2:5d:20:bb:60:72:cc:38:6e:d3:35:cb:60:72: 55:5f:58:aa:64:05:8f:60:13:a3:7c:11:10:1a:a5: a8:f4:82:dc:5d:6c:31:76:06:d7:db:be:f0:ee:68: 27:a3:b0:ef:31:be:f7:a8:50:a7:2b:19:72:fc:cf: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DA:72:21:BA:66:5B:6D:F7:6F:39:59:0D:BE:7F:36:68:C2:D3:A5 X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:57:65:d4:44:34:ee:5f:e3:18:fe:76:4e:ef:b6:f6:ed: c8:76:94:61:8b:ea:45:19:ce:3d:ec:3a:c9:b7:77:09:9a:ea: 03:5e:44:f1:d7:cf:67:f8:16:b7:92:37:59:9d:41:ec:84:89: ff:d8:e7:dd:a7:d7:90:ba:d7:95:31:01:ed:26:5b:df:da:da: 93:df:f5:49:96:ae:f4:12:c8:67:6b:b2:22:bd:fb:ce:e1:66: ff:e6:df:c7:be:9a:00:04:ee:9b:37:44:d7:82:9c:6b:68:55: b3:00:cc:b9:9e:a2:ed:72:d1:b2:72:84:fd:cb:19:52:96:39: f0:42:2e:60:2d:22:f3:33:c3:52:01:81:cb:e7:89:5d:be:04: 9f:e6:20:7e:5c:a5:36:1d:ff:2a:c6:d7:54:13:b2:98:03:93: 0c:10:7e:01:e0:ad:70:67:73:0b:ad:dd:5c:b5:f6:79:0a:bd: 2f:73:36:86:c7:4c:ca:77:5b:71:53:61:33:c8:2a:2b:c1:ba: 76:ea:c6:16:02:3c:a1:ad:60:22:04:09:29:49:23:03:e8:97: 42:81:d4:f7:8f:f9:e3:b4:7f:df:57:9d:6c:51:e7:d4:ac:71: b6:31:0d:f4:f3:89:19:d7:54:e5:5a:b0:58:25:ff:b7:25:22: 87:81:94:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDRDMxMTAvBgNVBAUTKDY5RkU5NzNCN0VFQkVCMEZGODlCMjlCOUNCNUJFQkFC RDBFMzFENkIwHhcNMjYwNTExMDY1NzU5WhcNMjYwNTE4MDY1NzU5WjAYMRYwFAYD VQQDEw02YTAxN2RmNy1iYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto9Zq2/34bnEr8ECICf/9D8IIg0kB41mvqa9ICh0xl9g8cggxkdX7criKDBC EHqP2PmCkHrDL7ND0gpHkOO1uE91oC17VG03t8S9CXtE7vCq6PVJ/ePK+BW4QXmA 5WUV0zclLqmJcVlyBkqHWRdWHd/Kg4xXlVF9//7lBCnvH/aKsGJmrDSSkheTVtsv 6ELoSzb3YbSyw2FcyCRV+Z9vCD4O1lgfSzJ0yH3y9AN6TrlP+3MpeLgojrYcY7d+ zk+cM+F3sl0gu2ByzDhu0zXLYHJVX1iqZAWPYBOjfBEQGqWo9ILcXWwxdgbX277w 7mgno7DvMb73qFCnKxly/M/JQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODaciG6 Zltt9285WQ2+fzZowtOlMB8GA1UdIwQYMBaAFGn+lzt+6+sP+Jspuctb66vQ4x1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENEMy9GMEE2NUMzRTFC NjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3XzRteW01eTF2cnE5RGpI V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENEMy9GMEE2NUMzRTFCNjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3 XzRteW01eTF2cnE5RGpIV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHw1XZdRENO5f4xj+dk7vtvbtyHaUYYvqRRnOPew6ybd3CZrqA15E8dfPZ/gW t5I3WZ1B7ISJ/9jn3afXkLrXlTEB7SZb39rak9/1SZau9BLIZ2uyIr37zuFm/+bf x76aAATumzdE14Kca2hVswDMuZ6i7XLRsnKE/csZUpY58EIuYC0i8zPDUgGBy+eJ Xb4En+YgflylNh3/KsbXVBOymAOTDBB+AeCtcGdzC63dXLX2eQq9L3M2hsdMyndb cVNhM8gqK8G6durGFgI8oa1gIgQJKUkjA+iXQoHU94/547R/31edbFHn1KxxtjEN 9POJGddU5VqwWCX/tyUih4GUBw== -----END CERTIFICATE-----Generated at Wed May 13 04:27:49 2026 by rpki-client