$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json) Hash identifier: ffHc7S7zp+L5B8WLMIS30FD/k+E1HQUcxLDDAtCuxII= Subject key identifier: 31:F7:22:50:EF:CC:B9:62:0E:19:F4:BC:97:C3:1A:9D:1C:10:67:EA Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft Manifest number: 01E4 Signing time: Tue 12 May 2026 15:30:10 +0000 Manifest this update: Tue 12 May 2026 15:30:10 +0000 Manifest next update: Tue 19 May 2026 15:30:10 +0000 Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: 4dcaU9Xjxb8zibFwXgPmlgNGB9/+DnjXmKDrST8MC2g=) 2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: May 12 15:30:10 2026 GMT Not After : May 19 15:30:10 2026 GMT Subject: CN=6a034782-9849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:aa:68:f1:ec:2e:f7:dd:2e:5e:3a:d9:0b: f7:de:14:84:4c:99:3b:6d:fd:9c:af:a8:15:f0:7a: 2b:54:43:3a:7f:6a:40:eb:96:2b:5b:cd:ab:41:65: dd:a5:3a:29:7b:95:e9:ca:4b:96:99:60:3f:a4:e5: 73:ad:4d:5c:93:ad:10:e3:75:21:33:54:78:fc:c1: a6:3b:2e:3b:ab:92:42:c5:3a:4c:dc:7a:30:c6:3d: 8a:12:fc:f8:6e:6b:6b:7a:66:21:bd:e9:eb:64:7e: ee:ce:2b:6a:10:fd:0c:30:44:bd:ea:59:47:08:65: 6a:eb:7a:c1:1c:9b:e5:f0:55:12:bf:6d:47:8e:b6: a6:13:9c:50:44:bc:c5:33:0d:03:5e:a8:c6:2d:dc: 2d:99:37:13:d8:e3:45:b0:06:32:7f:ad:f2:e6:2e: c0:97:fc:41:c2:5c:30:be:7a:fa:2f:3b:d3:b6:2e: 83:c9:f1:f9:5c:3f:41:08:7b:30:08:3e:39:8c:23: c3:44:25:a9:12:c2:c2:b1:96:8f:70:93:cb:8f:2e: 49:c0:c9:43:c2:bc:a1:43:f6:a0:29:6e:f3:99:0c: 3b:9e:63:c6:ec:be:94:3b:04:b4:8e:90:bc:34:9d: 09:f9:b6:10:e7:30:b8:3a:2e:2e:86:f3:65:d5:1f: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F7:22:50:EF:CC:B9:62:0E:19:F4:BC:97:C3:1A:9D:1C:10:67:EA X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:99:29:52:00:1c:c3:d5:a1:7b:f0:92:7b:58:51:bd:3b: 17:39:11:a1:89:03:80:c1:7c:93:46:1c:49:51:22:28:2e:ca: 12:1e:9d:f1:05:d8:c8:ad:1d:05:38:70:5f:12:c3:8f:ea:b2: ce:32:de:c7:0d:81:71:6e:1e:d1:6f:e9:ca:77:40:6e:19:99: 86:f7:fb:47:6b:c3:73:e4:a6:0d:3c:70:a7:53:5e:0f:83:35: 86:9f:85:5c:65:52:01:d5:aa:7a:27:0b:f3:df:f8:89:72:86: 1e:93:02:fe:2f:df:83:b3:9b:a0:14:62:37:42:73:16:cd:62: 1e:1e:1a:34:04:23:18:b2:c5:b2:6a:59:7a:ab:82:06:b3:b7: 31:7b:6c:b2:4d:f5:1b:d7:ea:1c:bf:14:ce:6e:5b:e2:02:71: bf:02:b4:d5:0f:e1:ff:b8:8e:36:85:f7:71:a3:bb:c1:ce:4a: c1:95:83:57:bc:c5:29:31:c5:ba:29:9c:ce:d9:b8:54:67:83: b5:67:b3:a5:de:a5:8c:a6:a6:8c:f6:61:53:5f:7f:0b:0f:5d: 28:3c:65:c4:e9:3c:e4:e1:bb:54:62:c6:2e:25:11:b6:9b:bf: b2:53:31:f6:3a:16:6d:2d:67:d7:01:e6:28:e0:57:1c:eb:9f: 00:40:a9:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjYwNTEyMTUzMDEwWhcNMjYwNTE5MTUzMDEwWjAYMRYwFAYD VQQDEw02YTAzNDc4Mi05ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jqqaPHsLvfdLl462Qv33hSETJk7bf2cr6gV8HorVEM6f2pA65YrW82rQWXd pTope5XpykuWmWA/pOVzrU1ck60Q43UhM1R4/MGmOy47q5JCxTpM3Howxj2KEvz4 bmtremYhvenrZH7uzitqEP0MMES96llHCGVq63rBHJvl8FUSv21HjramE5xQRLzF Mw0DXqjGLdwtmTcT2ONFsAYyf63y5i7Al/xBwlwwvnr6LzvTti6DyfH5XD9BCHsw CD45jCPDRCWpEsLCsZaPcJPLjy5JwMlDwryhQ/agKW7zmQw7nmPG7L6UOwS0jpC8 NJ0J+bYQ5zC4Oi4uhvNl1R/WewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDH3IlDv zLliDhn0vJfDGp0cEGfqMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS NlNhRHMtdGJla1YwbExKZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYyqZKVIAHMPVoXvwkntYUb07FzkRoYkDgMF8k0YcSVEiKC7KEh6d8QXYyK0d BThwXxLDj+qyzjLexw2BcW4e0W/pyndAbhmZhvf7R2vDc+SmDTxwp1NeD4M1hp+F XGVSAdWqeicL89/4iXKGHpMC/i/fg7OboBRiN0JzFs1iHh4aNAQjGLLFsmpZequC BrO3MXtssk31G9fqHL8Uzm5b4gJxvwK01Q/h/7iONoX3caO7wc5KwZWDV7zFKTHF uimcztm4VGeDtWezpd6ljKamjPZhU19/Cw9dKDxlxOk85OG7VGLGLiURtpu/slMx 9joWbS1n1wHmKOBXHOufAECp3Q== -----END CERTIFICATE-----Generated at Wed May 13 14:38:47 2026 by rpki-client