$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: 2qKdUFyjlwGKPAqxmicN/rPZxVZE5hU8OVZoPcZsH9c= Subject key identifier: D4:E7:8A:A5:C2:2F:DC:95:B9:BE:2B:C6:5B:58:57:47:66:5B:87:52 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 35D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 3588 Signing time: Tue 12 May 2026 14:46:38 +0000 Manifest this update: Tue 12 May 2026 14:46:37 +0000 Manifest next update: Tue 19 May 2026 14:46:37 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: rKIMumxdirQ+aIxLNsS2GhQJjdn5R8oNQlHhxaQrhF8=) 2: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: pcuAAC+IUpsYuzJSHTVcRBBHLD10GWUF30W0iZ2kHRM=) 3: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) 4: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13781 (0x35d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: May 12 14:46:37 2026 GMT Not After : May 19 14:46:37 2026 GMT Subject: CN=6a033d4d-95d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:a8:07:f1:cc:46:fc:4b:11:16:af:05:ff: 8f:97:12:7f:51:72:d0:29:3a:ef:3a:cf:58:12:b7: 67:ec:a8:3b:6d:fc:62:96:79:25:d5:2b:90:89:65: b6:61:5b:2e:9f:c0:f1:ef:e7:b7:66:9e:14:69:f7: 96:99:db:e8:ac:8e:84:ab:3c:05:bb:d5:64:e6:bb: 88:20:39:3a:b7:ef:91:d4:89:7f:98:13:9e:af:c0: ca:68:e5:f0:ef:ff:b4:61:7d:04:0d:ee:89:b3:89: e4:72:2a:52:95:9a:08:b3:49:18:72:d0:74:93:01: f9:d4:6f:eb:6e:2d:d5:a0:83:11:92:87:0e:2c:85: b7:0d:fa:5a:db:35:e6:81:21:d6:b9:22:1b:6a:5b: 4e:3d:d4:77:d6:a3:00:0e:b6:5e:a0:a7:de:22:8b: f8:4c:f8:a4:ac:bb:93:e8:b7:41:c8:18:ab:f1:f9: e0:cb:d1:9c:d1:75:ce:00:b1:9d:c6:8f:83:7c:b4: b2:a4:45:d9:4f:9b:c0:08:25:ad:62:d1:f5:89:1c: e7:21:b5:0a:c6:67:f8:ca:95:4a:d1:03:0f:71:f8: 23:d9:ff:40:d6:b8:fd:22:ef:4d:f1:05:51:b3:c5: 19:a2:4a:26:7d:b8:28:ac:fd:95:ef:ae:ca:dd:77: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E7:8A:A5:C2:2F:DC:95:B9:BE:2B:C6:5B:58:57:47:66:5B:87:52 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d0:37:5b:bc:98:16:b2:c8:19:fa:ba:4d:b2:f1:2f:90:ac: 02:47:17:35:db:e4:be:5e:d6:b8:67:e0:5f:7e:22:b4:94:86: 25:c6:4d:3b:71:fa:d3:bc:ff:54:a1:b6:18:9f:9a:f3:79:fd: 56:32:f7:ca:46:b6:45:05:5f:2c:e1:5e:6b:b8:c3:16:d2:b4: 24:d0:33:85:bf:58:2b:15:32:77:bc:a4:57:ec:83:6b:c1:d1: 66:58:2b:8a:54:d3:2f:96:c9:d6:70:9a:24:6e:be:7d:09:b7: 5a:e6:3c:f0:4f:3b:7f:cd:a2:78:11:0c:7c:1c:1d:f6:e7:72: 90:cf:d8:50:7d:3a:88:b3:60:e0:2c:cd:96:bf:15:a6:7b:8e: cd:08:30:19:fb:bb:7b:13:36:e6:5e:7c:b1:0e:e1:51:98:2f: a9:28:5c:24:09:74:64:38:87:75:dc:d5:2f:59:d0:1b:8d:95: cd:13:96:09:21:5c:b3:7c:d9:ed:26:87:c0:9d:32:54:b1:dc: 6e:f6:d4:44:f4:b1:cc:f0:fd:00:74:4e:e6:91:15:19:c3:10: fb:0d:e2:6e:39:16:60:67:b1:77:af:5b:fb:7d:2d:c9:ba:37: cd:ec:a3:ac:65:22:fe:da:f7:91:e8:2f:66:02:9c:5d:25:1a: ca:05:0b:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwNTEyMTQ0NjM3WhcNMjYwNTE5MTQ0NjM3WjAYMRYwFAYD VQQDEw02YTAzM2Q0ZC05NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38aoB/HMRvxLERavBf+PlxJ/UXLQKTrvOs9YErdn7Kg7bfxilnkl1SuQiWW2 YVsun8Dx7+e3Zp4UafeWmdvorI6EqzwFu9Vk5ruIIDk6t++R1Il/mBOer8DKaOXw 7/+0YX0EDe6Js4nkcipSlZoIs0kYctB0kwH51G/rbi3VoIMRkocOLIW3Dfpa2zXm gSHWuSIbaltOPdR31qMADrZeoKfeIov4TPikrLuT6LdByBir8fngy9Gc0XXOALGd xo+DfLSypEXZT5vACCWtYtH1iRznIbUKxmf4ypVK0QMPcfgj2f9A1rj9Iu9N8QVR s8UZokomfbgorP2V767K3XfusQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNTniqXC L9yVub4rxltYV0dmW4dSMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEdA3W7yYFrLIGfq6TbLxL5CsAkcXNdvkvl7WuGfgX34itJSGJcZNO3H607z/ VKG2GJ+a83n9VjL3yka2RQVfLOFea7jDFtK0JNAzhb9YKxUyd7ykV+yDa8HRZlgr ilTTL5bJ1nCaJG6+fQm3WuY88E87f82ieBEMfBwd9udykM/YUH06iLNg4CzNlr8V pnuOzQgwGfu7exM25l58sQ7hUZgvqShcJAl0ZDiHddzVL1nQG42VzROWCSFcs3zZ 7SaHwJ0yVLHcbvbURPSxzPD9AHRO5pEVGcMQ+w3ibjkWYGexd69b+30tybo3zeyj rGUi/tr3kegvZgKcXSUaygULxQ== -----END CERTIFICATE-----Generated at Wed May 13 07:04:59 2026 by rpki-client