$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: o4bdWvdF1UU2I7ydk8TPyKdYknWgb2fOBA2cyDOlRp0= Subject key identifier: B8:39:B4:88:FA:11:8D:41:7C:B0:01:A1:40:BF:1F:49:F5:4B:67:35 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0CFB Signing time: Tue 12 May 2026 18:17:49 +0000 Manifest this update: Tue 12 May 2026 18:17:48 +0000 Manifest next update: Tue 19 May 2026 18:17:48 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: DzvPTDkgUxbrySwnuNL+IKU047i3oeEz70DNtWVyhL4=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: iq52SS5rKgtAhBHnN907lIALCsokLuoxuGMG7jMGP+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: May 12 18:17:48 2026 GMT Not After : May 19 18:17:48 2026 GMT Subject: CN=6a036ecd-8216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:83:56:72:7f:35:89:ce:52:31:7a:e2:d1: 7e:c2:75:5f:fc:bf:48:2a:f7:d1:28:d6:e2:6a:61: 52:ce:f8:f5:38:95:6d:1d:7b:48:fd:c5:36:03:36: 88:0a:95:74:b2:03:e4:98:e2:4f:bc:49:e6:0c:35: 3d:e9:2c:ed:54:ff:c0:87:69:9f:e3:f4:06:0e:d3: d8:4d:cc:6b:38:50:ec:8c:27:08:e0:af:52:94:42: 17:c0:90:30:46:60:ae:cd:59:01:c0:73:e0:6f:27: 60:b4:a2:56:81:25:25:04:94:fb:67:e4:74:f0:83: 00:0c:fa:ac:f7:34:95:54:25:d1:2d:6d:e1:91:ae: 9a:dc:3b:ad:e1:4b:d2:81:8c:1e:26:fa:b3:ca:de: 0a:39:0a:0c:d0:69:5c:32:30:68:a8:d4:03:0f:a3: 44:b4:88:26:c5:07:bc:3a:c7:d3:6e:fc:10:03:52: 2d:9d:2d:97:0b:0a:55:b3:9e:b9:df:65:a4:24:e5: 0e:c4:09:23:60:8a:43:bb:58:eb:03:d8:80:b9:6f: ec:36:0a:2e:04:50:d9:cc:76:80:ad:09:ee:29:bf: 7a:c1:4b:2e:ce:6e:1b:65:75:fa:17:18:67:92:85: f0:87:7a:b2:6f:70:c4:f5:7e:23:19:f4:9d:00:86: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:39:B4:88:FA:11:8D:41:7C:B0:01:A1:40:BF:1F:49:F5:4B:67:35 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b0:be:7d:66:a2:1d:7e:29:7a:3a:9c:e5:4c:da:a0:c3:36: 89:f5:54:0c:60:0d:f1:2c:6a:37:1b:56:ed:4a:23:b2:9a:68: 1b:40:19:94:a9:ea:d4:2b:6d:e3:b7:d9:73:49:f9:11:05:99: 1b:63:5c:fb:33:f9:1b:9f:35:49:6b:c7:a5:f0:4e:51:6e:bd: 86:7a:dc:05:c5:65:eb:e7:bb:e0:cb:4f:63:7f:da:6c:ec:00: 9e:74:54:8c:73:0a:ea:44:de:98:2f:f0:c4:72:2a:31:e9:44: b6:40:ad:ca:33:1e:3a:32:9b:30:0e:d4:ac:2e:88:ea:b8:fc: 0a:6c:6c:5e:ae:9d:a4:c7:12:13:85:9e:69:36:ea:31:42:ef: 4b:e2:a2:04:9e:74:eb:93:c8:70:2b:d2:3d:33:58:6e:2d:60: e7:1d:a6:57:d7:d5:e1:41:fc:22:6d:b6:28:84:11:9f:28:48: fe:26:8c:45:95:21:d9:47:97:a2:60:14:02:48:2c:28:ef:20: 66:24:d9:3e:ff:bd:03:d1:53:17:e9:bd:b6:6d:69:04:cf:84: e7:8c:8a:40:7f:65:91:62:3e:1d:5f:01:c2:63:4a:4a:76:bf: 2e:85:13:71:8a:3b:cb:7f:83:00:0a:b0:ec:72:87:24:39:bb: a4:03:68:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjYwNTEyMTgxNzQ4WhcNMjYwNTE5MTgxNzQ4WjAYMRYwFAYD VQQDEw02YTAzNmVjZC04MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxODVnJ/NYnOUjF64tF+wnVf/L9IKvfRKNbiamFSzvj1OJVtHXtI/cU2AzaI CpV0sgPkmOJPvEnmDDU96SztVP/Ah2mf4/QGDtPYTcxrOFDsjCcI4K9SlEIXwJAw RmCuzVkBwHPgbydgtKJWgSUlBJT7Z+R08IMADPqs9zSVVCXRLW3hka6a3Dut4UvS gYweJvqzyt4KOQoM0GlcMjBoqNQDD6NEtIgmxQe8OsfTbvwQA1ItnS2XCwpVs565 32WkJOUOxAkjYIpDu1jrA9iAuW/sNgouBFDZzHaArQnuKb96wUsuzm4bZXX6Fxhn koXwh3qyb3DE9X4jGfSdAIZ24wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLg5tIj6 EY1BfLABoUC/H0n1S2c1MB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQrC+fWaiHX4pejqc5UzaoMM2ifVUDGAN8SxqNxtW7UojsppoG0AZlKnq1Ctt 47fZc0n5EQWZG2Nc+zP5G581SWvHpfBOUW69hnrcBcVl6+e74MtPY3/abOwAnnRU jHMK6kTemC/wxHIqMelEtkCtyjMeOjKbMA7UrC6I6rj8CmxsXq6dpMcSE4WeaTbq MULvS+KiBJ5065PIcCvSPTNYbi1g5x2mV9fV4UH8Im22KIQRnyhI/iaMRZUh2UeX omAUAkgsKO8gZiTZPv+9A9FTF+m9tm1pBM+E54yKQH9lkWI+HV8BwmNKSna/LoUT cYo7y3+DAAqw7HKHJDm7pANoRA== -----END CERTIFICATE-----Generated at Wed May 13 16:54:26 2026 by rpki-client