$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: phMKZn/PpKivV7qQi9QsjdsrkcIEHdfQIi/ccs0xLgs= Subject key identifier: E8:A7:E8:C6:C1:35:87:B2:D8:B5:0F:A8:7D:4C:DE:95:D7:9B:48:66 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0910 Signing time: Tue 12 May 2026 14:46:40 +0000 Manifest this update: Tue 12 May 2026 14:46:40 +0000 Manifest next update: Tue 19 May 2026 14:46:40 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: b0ZQ5/CBEW22Hqf7rp4qoWHOmbQNBsS0fyFcEeljl1I=) 2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) 3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: BoL9UlNE8f39H5zPW1byPvXmDiZbS/dSQi7Q0NywADo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: May 12 14:46:40 2026 GMT Not After : May 19 14:46:40 2026 GMT Subject: CN=6a033d50-b313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:f3:f0:b9:9f:2c:e4:ab:b0:c2:c4:4e:3f: 44:29:84:6e:ed:02:0b:c5:7c:92:07:09:6e:99:e0: 30:0a:1c:5b:2c:45:f3:31:25:af:76:52:a0:8c:3a: 2b:86:05:78:76:04:f4:7d:c7:66:de:09:a5:83:fd: 93:97:a4:bb:cc:ee:cf:ce:12:b9:6b:af:2d:2d:58: 2c:ae:80:fb:d4:4d:4e:94:08:98:8d:4f:08:80:de: 00:e7:be:c6:1c:9b:fa:a1:b3:dc:dc:e6:65:ba:12: d2:f8:43:00:93:6b:7d:5a:09:cc:63:7b:02:e4:c1: 0e:9e:6f:b1:ad:70:5b:42:a1:44:ec:04:ea:9a:12: e8:3c:05:8d:72:dc:51:08:b3:5b:8e:d4:41:70:40: 8d:bd:5e:de:08:51:be:c0:25:fb:8f:44:5b:53:87: 31:6e:50:32:93:05:10:dd:c8:12:fc:0a:bd:00:c0: 7a:a9:ea:c7:ad:c5:8c:9c:76:7c:bd:d6:cb:ab:ee: f0:8e:fb:4f:ac:6f:90:10:88:eb:eb:b6:80:e0:26: 03:54:d5:25:84:c9:38:35:f5:0a:e8:7f:15:13:97: b8:cf:b9:5e:c7:6d:2a:e7:ab:a7:9d:1c:ef:af:24: eb:d4:e4:17:66:7e:04:c2:81:60:b2:60:f4:f3:ac: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:E8:C6:C1:35:87:B2:D8:B5:0F:A8:7D:4C:DE:95:D7:9B:48:66 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f1:e2:8a:dd:f9:d0:5d:b9:d6:cc:ba:47:8c:25:51:19:43: 62:01:45:45:cb:f8:a2:ac:f7:5f:ae:74:9b:18:0a:6e:f8:e2: 61:aa:49:16:22:03:12:67:8e:d6:de:df:90:55:64:4c:d2:0e: 75:2a:6a:d1:b9:6d:e1:d5:af:63:80:ae:31:13:4c:b0:fa:6d: 9a:a4:4a:9c:9a:26:45:4f:8a:a2:12:df:28:13:c6:d3:cf:a3: 77:b6:fa:b9:79:37:f6:3a:84:4f:ae:7d:1c:90:16:c9:1f:d7: c3:0e:aa:6a:b8:e8:da:8d:ee:7c:4e:86:33:0b:0d:cb:68:f3: 5b:6f:28:69:76:63:e9:04:3e:c0:77:f3:f9:a2:07:fb:27:ab: 62:06:92:a5:77:79:cd:8c:f1:8b:83:fb:1d:11:47:f7:90:33: ee:dd:5e:b2:95:da:5a:ec:c6:74:b4:e0:3e:03:24:25:9e:a6: 60:0a:21:d4:dc:ba:22:ac:24:20:5e:04:32:1d:57:48:00:00: 65:43:9a:67:1f:be:72:1b:e1:59:80:54:dd:64:8e:12:6e:57: c3:48:4b:05:33:38:10:e8:a1:2d:09:54:bc:03:62:e0:7c:b7: d5:e0:be:37:3f:c1:b8:3c:3a:a2:b0:32:30:e5:97:f0:ab:f7: 89:52:b5:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNTEyMTQ0NjQwWhcNMjYwNTE5MTQ0NjQwWjAYMRYwFAYD VQQDEw02YTAzM2Q1MC1iMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzanz8LmfLOSrsMLETj9EKYRu7QILxXySBwlumeAwChxbLEXzMSWvdlKgjDor hgV4dgT0fcdm3gmlg/2Tl6S7zO7PzhK5a68tLVgsroD71E1OlAiYjU8IgN4A577G HJv6obPc3OZluhLS+EMAk2t9WgnMY3sC5MEOnm+xrXBbQqFE7ATqmhLoPAWNctxR CLNbjtRBcECNvV7eCFG+wCX7j0RbU4cxblAykwUQ3cgS/Aq9AMB6qerHrcWMnHZ8 vdbLq+7wjvtPrG+QEIjr67aA4CYDVNUlhMk4NfUK6H8VE5e4z7lex20q56unnRzv ryTr1OQXZn4EwoFgsmD086zsEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOin6MbB NYey2LUPqH1M3pXXm0hmMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOfHiit350F251sy6R4wlURlDYgFFRcv4oqz3X650mxgKbvjiYapJFiIDEmeO 1t7fkFVkTNIOdSpq0blt4dWvY4CuMRNMsPptmqRKnJomRU+KohLfKBPG08+jd7b6 uXk39jqET659HJAWyR/Xww6qarjo2o3ufE6GMwsNy2jzW28oaXZj6QQ+wHfz+aIH +yerYgaSpXd5zYzxi4P7HRFH95Az7t1espXaWuzGdLTgPgMkJZ6mYAoh1Ny6Iqwk IF4EMh1XSAAAZUOaZx++chvhWYBU3WSOEm5Xw0hLBTM4EOihLQlUvANi4Hy31eC+ Nz/BuDw6orAyMOWX8Kv3iVK19w== -----END CERTIFICATE-----Generated at Wed May 13 04:34:55 2026 by rpki-client