$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: DISrsnoE0mLV84mVGoc3hcZiZ+4J27R1VraFaRYm2v8= Subject key identifier: 15:97:96:75:17:C9:49:6E:A2:07:7C:FE:C0:CB:38:86:7F:8E:AE:37 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 094E Signing time: Tue 12 May 2026 20:12:27 +0000 Manifest this update: Tue 12 May 2026 20:12:26 +0000 Manifest next update: Tue 19 May 2026 20:12:26 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: PhEv23Ro8/8ZoNwOMNjxd93GIIjYwg20Pma2b4Jg4Ds=) 2: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=) 3: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: May 12 20:12:26 2026 GMT Not After : May 19 20:12:26 2026 GMT Subject: CN=6a0389ab-39cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:98:51:1f:62:d6:f8:f1:19:b7:07:42:9a: 78:ab:ef:00:04:03:43:fd:ec:a1:15:63:a7:ea:ea: 36:38:96:7b:f6:3a:4b:af:f8:c3:13:49:38:0b:fb: 38:fc:68:5b:7c:a6:cd:f2:10:5a:8f:4b:79:aa:80: 12:97:c3:a1:7b:4f:07:bd:9a:bf:89:19:d9:e5:f6: a6:e4:ba:ab:6c:62:25:8a:08:e4:82:3f:5e:fb:32: 3f:f2:42:f2:5e:f2:dc:a7:26:4c:b0:95:79:d9:5e: b3:ba:65:ab:41:93:3f:52:4b:09:c5:6c:07:b0:46: f7:96:83:4b:a4:11:13:73:bc:bc:04:99:e1:a4:65: 19:76:13:93:7c:91:ec:6f:e8:37:64:d8:19:32:a5: d9:3b:a4:fc:ef:13:a6:6e:0e:eb:a9:7f:81:38:77: fa:85:75:6f:9a:e4:6f:60:57:f4:ab:f9:13:38:5e: 39:47:7f:b4:70:23:c7:08:67:a8:f3:62:70:78:e1: 38:fb:94:a2:4d:ba:db:2d:10:0b:dc:2d:34:61:ad: 96:22:a7:14:7a:9d:eb:1b:95:16:a5:a2:cf:c8:0d: c7:ef:9d:b5:b1:75:5e:c1:19:d8:3e:88:9b:de:3b: 18:a4:b8:fe:bf:27:57:43:b3:67:f9:66:81:a6:0d: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:97:96:75:17:C9:49:6E:A2:07:7C:FE:C0:CB:38:86:7F:8E:AE:37 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:74:97:aa:81:ab:84:bc:6a:72:8a:d0:cf:8b:a2:e6:d3:c4: 3c:68:85:06:e8:54:bf:0e:e2:b2:a8:fd:45:e4:be:a7:ee:8d: d2:f1:1f:cf:fe:79:e3:da:e6:50:12:75:01:a6:31:9b:4a:9a: fc:0e:65:3f:8a:4b:35:87:ca:a5:1f:c9:84:0a:71:72:01:79: 6c:75:e0:b7:4f:ca:13:7a:80:dd:9a:8b:2b:a5:37:9e:ca:ca: d4:c3:ec:e9:3c:78:50:81:1a:9c:15:d7:cf:23:c0:08:84:81: 42:9a:be:ce:08:23:fa:16:9b:26:51:39:7a:93:df:77:3a:a2: 53:de:fe:b0:08:dd:aa:d6:f4:d5:11:35:d4:cd:4e:4b:ac:c8: 2f:b6:4b:b0:1f:98:91:36:b8:b2:92:58:ed:19:7f:b5:3e:cf: 83:0f:9b:af:1a:07:ce:c5:11:66:96:ad:0b:a3:10:04:85:c1: fb:d0:dd:9e:69:d6:58:4b:3d:3d:92:d3:ca:40:a5:87:87:63: ce:37:08:f6:fc:fc:4a:c8:5c:e7:1a:21:13:0a:21:94:93:1b: ae:16:24:2a:bb:83:2f:40:67:d3:a6:95:07:2b:49:72:b6:5c: 2b:e4:b4:7c:7e:43:77:e7:3b:c6:30:02:8d:65:c8:6f:ed:0d: 37:4b:ff:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjYwNTEyMjAxMjI2WhcNMjYwNTE5MjAxMjI2WjAYMRYwFAYD VQQDEw02YTAzODlhYi0zOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpuYUR9i1vjxGbcHQpp4q+8ABAND/eyhFWOn6uo2OJZ79jpLr/jDE0k4C/s4 /GhbfKbN8hBaj0t5qoASl8Ohe08HvZq/iRnZ5fam5LqrbGIligjkgj9e+zI/8kLy XvLcpyZMsJV52V6zumWrQZM/UksJxWwHsEb3loNLpBETc7y8BJnhpGUZdhOTfJHs b+g3ZNgZMqXZO6T87xOmbg7rqX+BOHf6hXVvmuRvYFf0q/kTOF45R3+0cCPHCGeo 82JweOE4+5SiTbrbLRAL3C00Ya2WIqcUep3rG5UWpaLPyA3H7521sXVewRnYPoib 3jsYpLj+vydXQ7Nn+WaBpg0KIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWXlnUX yUluogd8/sDLOIZ/jq43MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnSXqoGrhLxqcorQz4ui5tPEPGiFBuhUvw7isqj9ReS+p+6N0vEfz/5549rm UBJ1AaYxm0qa/A5lP4pLNYfKpR/JhApxcgF5bHXgt0/KE3qA3ZqLK6U3nsrK1MPs 6Tx4UIEanBXXzyPACISBQpq+zggj+habJlE5epPfdzqiU97+sAjdqtb01RE11M1O S6zIL7ZLsB+YkTa4spJY7Rl/tT7Pgw+brxoHzsURZpatC6MQBIXB+9DdnmnWWEs9 PZLTykClh4djzjcI9vz8Sshc5xohEwohlJMbrhYkKruDL0Bn06aVBytJcrZcK+S0 fH5Dd+c7xjACjWXIb+0NN0v/0g== -----END CERTIFICATE-----Generated at Wed May 13 01:12:39 2026 by rpki-client