$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json) Hash identifier: gy5Oj4SdR05EtdCbKwlWjJv6oijoysL/UGEAVOOF1E0= Subject key identifier: 3B:4B:A6:4C:72:31:CD:27:9C:4F:AC:29:3C:D8:2D:D5:58:1D:40:3F Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft Manifest number: 0159 Signing time: Wed 13 May 2026 05:03:53 +0000 Manifest this update: Wed 13 May 2026 05:03:53 +0000 Manifest next update: Wed 20 May 2026 05:03:53 +0000 Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: ZfGmumBxEXABAJAG6/NWHfpSyKYChPl8xwbRxKdd7/A=) 2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 21CMC+4jrqt9R3YVeyqV8PFYMlUBz4//FXWyuGoWN2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Validity Not Before: May 13 05:03:53 2026 GMT Not After : May 20 05:03:53 2026 GMT Subject: CN=6a040639-fa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:3a:c8:2f:50:04:5c:0e:48:59:e8:84:91: 8f:62:26:c9:58:ab:c2:34:18:25:25:89:19:98:0a: 6a:a8:0b:43:c4:1d:4b:81:29:58:13:88:c0:23:b5: 83:02:c9:d9:82:67:9f:77:ce:c0:28:b4:9a:0d:03: 9e:5f:ea:59:97:1a:1a:8b:e8:4e:c9:4a:f0:50:c6: 11:01:cf:e7:29:f2:91:69:4d:28:63:61:da:47:b8: 18:ff:42:67:41:3c:cb:20:c8:b1:e3:00:8c:94:05: be:70:e2:29:b5:f3:c2:fc:79:06:3a:27:a6:4e:f9: ae:1b:10:40:71:d3:35:28:29:ab:f4:a9:62:20:5c: 1c:b9:d2:80:81:4b:b5:27:f7:27:d2:7a:ab:6b:40: 8b:7c:1b:27:29:49:a3:96:d7:23:1b:52:0f:02:08: e0:4f:0c:b2:69:5b:cd:e8:40:e3:28:e6:1c:7c:0f: ee:da:fe:e9:d0:7d:ab:10:71:95:62:85:36:26:61: 80:25:a1:c9:d1:33:15:03:fc:cf:88:56:c4:f8:13: b7:d0:42:10:4c:5b:71:9f:18:e5:e5:14:e0:66:38: d5:f5:93:33:6e:7f:75:f4:27:4f:fa:e9:e2:9d:9f: ec:b4:ca:23:c8:98:16:0b:f3:8a:7b:05:a0:f1:3d: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4B:A6:4C:72:31:CD:27:9C:4F:AC:29:3C:D8:2D:D5:58:1D:40:3F X509v3 Authority Key Identifier: keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e6:99:e8:44:48:d2:76:aa:5b:4e:5b:ce:a2:f3:68:43:64: f1:5c:41:27:8f:e3:2e:ab:ab:b6:60:8f:a2:0d:a1:2e:9c:83: 47:0e:1a:da:a4:a9:e9:3f:04:e1:cc:57:41:97:1f:a6:9c:9b: 71:7e:47:98:f1:b0:d0:e8:ed:28:ef:84:0f:eb:25:b5:1f:4c: b5:6a:55:d7:fa:0e:95:59:8f:fb:ad:9e:e4:58:f0:ea:cc:87: a3:68:cc:68:fc:3d:ae:05:76:d5:ce:1b:4b:e7:d3:25:46:9d: 96:95:a8:c6:a7:b1:34:dd:80:b0:78:e1:68:28:5f:0f:8e:d8: d9:84:47:27:3f:7b:7c:d4:fd:47:57:cf:45:b6:00:fa:b7:1e: aa:df:0d:e8:c4:6f:9c:7c:52:e3:27:a9:6f:1b:56:87:e5:3d: a1:5e:e1:fc:0f:65:09:1e:f4:f1:64:9c:b8:c6:21:c6:f2:6f: 33:d5:14:45:a4:6c:98:a9:b7:f2:61:0f:19:34:95:f6:31:6a: 60:70:79:1d:c8:37:68:5e:21:8d:27:4b:8b:89:40:a2:ed:fc: e4:eb:aa:4c:80:cd:7a:52:f7:02:2f:6c:17:0b:5b:0f:37:4a: 2a:e5:ac:d6:d7:25:a1:26:fc:a9:4a:81:3a:16:60:e1:48:b1: c0:5d:7e:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDk2NTRBMkYwODQ1OTdBMkI5MUFDMDAyQTc2MDdFMTND MTVEMDk0OTEwHhcNMjYwNTEzMDUwMzUzWhcNMjYwNTIwMDUwMzUzWjAYMRYwFAYD VQQDEw02YTA0MDYzOS1mYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4s6yC9QBFwOSFnohJGPYibJWKvCNBglJYkZmApqqAtDxB1LgSlYE4jAI7WD AsnZgmefd87AKLSaDQOeX+pZlxoai+hOyUrwUMYRAc/nKfKRaU0oY2HaR7gY/0Jn QTzLIMix4wCMlAW+cOIptfPC/HkGOiemTvmuGxBAcdM1KCmr9KliIFwcudKAgUu1 J/cn0nqra0CLfBsnKUmjltcjG1IPAgjgTwyyaVvN6EDjKOYcfA/u2v7p0H2rEHGV YoU2JmGAJaHJ0TMVA/zPiFbE+BO30EIQTFtxnxjl5RTgZjjV9ZMzbn919CdP+uni nZ/stMojyJgWC/OKewWg8T1AtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtLpkxy Mc0nnE+sKTzYLdVYHUA/MB8GA1UdIwQYMBaAFJZUovCEWXorkawAKnYH4TwV0JSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy84MEJGMUE2MjNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVpdVJyQUFxZGdmaFBCWFFs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsU2k4SVJaZWl1UnJBQXFkZ2ZoUEJYUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy84MEJGMUE2MjNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVp dVJyQUFxZGdmaFBCWFFsSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANeaZ6ERI0naqW05bzqLzaENk8VxBJ4/jLqurtmCPog2hLpyDRw4a2qSp6T8E 4cxXQZcfppybcX5HmPGw0OjtKO+ED+sltR9MtWpV1/oOlVmP+62e5Fjw6syHo2jM aPw9rgV21c4bS+fTJUadlpWoxqexNN2AsHjhaChfD47Y2YRHJz97fNT9R1fPRbYA +rceqt8N6MRvnHxS4yepbxtWh+U9oV7h/A9lCR708WScuMYhxvJvM9UURaRsmKm3 8mEPGTSV9jFqYHB5Hcg3aF4hjSdLi4lAou385OuqTIDNelL3Ai9sFwtbDzdKKuWs 1tcloSb8qUqBOhZg4UixwF1+0w== -----END CERTIFICATE-----Generated at Wed May 13 14:06:13 2026 by rpki-client