$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json) Hash identifier: dsg72mwuREgfa7cnR2mRWn1bCNaDso38E5s9L2/nlk4= Subject key identifier: 6A:C1:7A:A7:B3:5C:E8:20:F7:BF:5B:A9:D4:E8:B4:15:A1:AA:85:86 Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft Manifest number: 22 Signing time: Wed 13 May 2026 08:59:21 +0000 Manifest this update: Wed 13 May 2026 08:59:20 +0000 Manifest next update: Wed 20 May 2026 08:59:20 +0000 Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: 38b/j6Z4mA1YT3TaE/PIAjKuyTMg3zvRqUV30tpGK/M=) 2: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=) 3: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Validity Not Before: May 13 08:59:20 2026 GMT Not After : May 20 08:59:20 2026 GMT Subject: CN=6a043d69-4161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:ff:08:89:0d:05:25:2e:82:a9:d4:e2:fe: 9b:e5:e1:14:24:bc:77:5e:81:5a:5a:12:ad:73:61: f4:16:a5:f1:9f:d4:1b:25:1e:ad:3a:b7:ec:56:e9: 2a:1c:86:52:af:9f:7d:f7:78:af:3b:8b:5a:8e:ca: 0f:3c:cc:19:43:3b:47:39:af:e7:8f:98:00:f4:20: 55:ac:e1:51:10:1d:cc:ac:16:e7:60:36:2b:a3:08: 09:73:79:a9:99:4f:f8:54:6d:74:30:ad:7e:13:3f: e7:4c:b5:01:24:9b:98:cb:99:9b:0a:54:65:3c:01: 62:6e:88:78:cf:5d:2d:5c:77:e4:58:ad:6d:6f:29: 96:17:8a:68:ea:69:55:ee:49:93:2d:22:e5:78:b8: f0:f2:01:0a:56:d6:a5:2a:04:7d:97:d5:12:26:58: de:6d:f5:bd:a9:d4:86:9c:70:af:5a:5a:8c:30:17: 7f:2c:4b:96:3c:93:7d:ea:b2:df:8d:10:93:28:f0: 58:ce:78:5e:cb:8b:29:27:aa:6d:80:ac:b1:09:5a: e7:fb:c0:f3:bb:60:0c:d5:11:80:8f:4a:4f:49:c9: 8f:5c:cc:b5:4a:2b:3f:e6:4e:1f:00:4c:9c:c2:da: b1:e0:0d:8c:d0:f0:4b:d4:cc:df:6c:80:96:25:21: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C1:7A:A7:B3:5C:E8:20:F7:BF:5B:A9:D4:E8:B4:15:A1:AA:85:86 X509v3 Authority Key Identifier: keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8c:7c:39:e7:ba:8d:b5:d5:68:9c:13:98:f4:2e:78:ef:34: c3:63:93:d5:d9:f8:0a:f4:59:df:d3:1e:2c:fd:6d:8a:f0:0f: c9:f4:64:e1:7e:08:44:e1:70:6e:1f:0b:53:99:0f:ab:37:1b: f2:1a:df:bd:cb:dc:2b:b5:c3:6e:8c:b7:d9:c6:80:de:db:87: 0f:0f:5d:2f:12:29:0b:52:0e:a6:b9:39:72:77:b3:df:fa:62: a9:ca:f7:a5:f3:55:74:53:a5:ed:5f:84:8c:f4:c3:54:7a:1d: 23:18:6c:b8:24:fe:b1:44:af:7f:d2:0c:42:68:d8:3d:07:7d: 91:ce:6f:e8:7c:fd:a4:b1:4e:4b:8c:61:f2:ab:74:c2:69:a2: a5:ca:15:d7:4f:f2:bf:00:db:d5:25:60:df:e5:fa:7f:35:db: b4:0c:e3:b3:e9:4d:1f:60:08:48:bd:8d:1a:a6:19:ad:f2:98: 24:fc:88:51:2c:c6:15:93:50:35:3d:39:6c:2e:92:4b:bc:2c: 00:6d:f3:5b:b7:ce:43:28:42:80:c2:74:a3:3c:07:0a:a6:5a: 32:24:af:90:28:fa:23:16:37:56:8e:ed:31:6b:cb:c6:76:0e: db:47:95:64:8e:bf:ae:d1:cc:b4:26:a5:cf:42:2d:71:95:22: ec:2b:2f:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUMwNTExMC8GA1UEBRMoMDA4RDRGOUY1ODY4RUMyMkE3QTkxRUNBQURDRDdFMEQz QjMxMTE3RjAeFw0yNjA1MTMwODU5MjBaFw0yNjA1MjAwODU5MjBaMBgxFjAUBgNV BAMTDTZhMDQzZDY5LTQxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKaf8IiQ0FJS6CqdTi/pvl4RQkvHdegVpaEq1zYfQWpfGf1BslHq06t+xW6Soc hlKvn333eK87i1qOyg88zBlDO0c5r+ePmAD0IFWs4VEQHcysFudgNiujCAlzeamZ T/hUbXQwrX4TP+dMtQEkm5jLmZsKVGU8AWJuiHjPXS1cd+RYrW1vKZYXimjqaVXu SZMtIuV4uPDyAQpW1qUqBH2X1RImWN5t9b2p1IaccK9aWowwF38sS5Y8k33qst+N EJMo8FjOeF7Liyknqm2ArLEJWuf7wPO7YAzVEYCPSk9JyY9czLVKKz/mTh8ATJzC 2rHgDYzQ8EvUzN9sgJYlIZE1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUasF6p7Nc 6CD3v1up1Oi0FaGqhYYwHwYDVR0jBBgwFoAUAI1Pn1ho7CKnqR7Krc1+DTsxEX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzA1Lzc3QkFDNDMwMUQw MDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NLbnFSN0tyYzEtRFRzeEVY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUkxUG4xaG83Q0tucVI3S3JjMS1EVHN4RVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzA1Lzc3QkFDNDMwMUQwMDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NL bnFSN0tyYzEtRFRzeEVYOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCPjHw557qNtdVonBOY9C547zTDY5PV2fgK9Fnf0x4s/W2K8A/J9GThfghE4XBu HwtTmQ+rNxvyGt+9y9wrtcNujLfZxoDe24cPD10vEikLUg6muTlyd7Pf+mKpyvel 81V0U6XtX4SM9MNUeh0jGGy4JP6xRK9/0gxCaNg9B32Rzm/ofP2ksU5LjGHyq3TC aaKlyhXXT/K/ANvVJWDf5fp/Ndu0DOOz6U0fYAhIvY0aphmt8pgk/IhRLMYVk1A1 PTlsLpJLvCwAbfNbt85DKEKAwnSjPAcKployJK+QKPojFjdWju0xa8vGdg7bR5Vk jr+u0cy0JqXPQi1xlSLsKy9T -----END CERTIFICATE-----Generated at Wed May 13 12:28:04 2026 by rpki-client