$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json) Hash identifier: ixx5veCMFPX5J85mqZdu0wVqWcwwyxvXXlQErlfCKfM= Subject key identifier: 56:02:2A:C8:C1:4C:A6:1A:A7:69:04:AE:B8:81:D9:58:A8:C9:C7:CB Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft Manifest number: 23 Signing time: Mon 11 May 2026 09:02:23 +0000 Manifest this update: Mon 11 May 2026 09:02:23 +0000 Manifest next update: Mon 18 May 2026 09:02:23 +0000 Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: 75ES4enHGGv8ZN84DZiAsfLB+UkSUPONAonRCkOcobA=) 2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: SY4VqkxyGoejCFuLzZISWSny3WC42+Mi6EDjqr/Szpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: May 11 09:02:23 2026 GMT Not After : May 18 09:02:23 2026 GMT Subject: CN=6a019b1f-1a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:15:dd:ae:03:da:c1:9d:07:85:88:22:a8: d3:88:71:1d:a1:a9:61:d2:55:d6:d4:93:0c:6a:fd: de:c5:5b:d9:80:89:59:1c:93:9a:71:de:87:b6:d5: 83:df:7e:17:7c:af:2b:44:0b:18:b4:5a:c0:39:b8: 82:be:bb:a2:f7:7c:e2:c5:ba:31:21:bc:e9:07:b7: 85:6d:dd:10:3c:33:e6:ae:ba:2f:91:99:34:a7:fd: 71:e8:ee:6c:5b:e4:a4:29:ee:25:78:92:ac:1f:99: 62:d5:c1:97:b1:14:50:cb:ba:6b:eb:a2:8a:8c:69: db:67:a2:88:4c:55:56:90:1a:8a:90:cf:31:78:56: 5c:aa:4e:d3:36:0c:23:f1:de:86:31:20:ba:7b:11: 5f:7c:1b:e6:09:cb:f2:65:c9:95:86:9a:d7:20:f4: 3f:86:f0:e3:44:3e:75:a4:b7:68:a3:f9:41:be:4f: 5d:b7:73:25:dd:ca:43:13:28:59:08:92:35:00:bf: 73:02:d2:de:6e:d6:74:6a:55:c3:ac:1d:ff:8e:b8: a7:db:be:21:ec:71:79:e9:6d:78:2b:50:da:ce:bf: 76:d8:ac:4d:a8:68:1f:75:ec:7a:3e:6e:ff:08:2c: 2d:fd:57:56:a3:41:95:9f:eb:11:4e:6c:ff:44:8b: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:2A:C8:C1:4C:A6:1A:A7:69:04:AE:B8:81:D9:58:A8:C9:C7:CB X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4c:d8:46:c3:f1:f8:b0:94:a7:e7:ce:42:12:6f:76:23:5c: b5:2e:be:ed:fb:89:15:43:2a:b9:3d:5c:4d:e8:70:94:28:ac: 9b:80:d5:43:15:a6:06:32:3d:b5:09:09:24:1f:03:fa:d5:f5: c1:b1:27:0a:55:cb:0e:51:de:01:91:79:0f:49:ed:02:98:3e: 73:92:f5:ab:6d:ec:99:97:a0:ce:f8:ea:a3:a2:47:ca:f5:a4: a4:4e:29:b6:2d:bf:07:a4:71:15:8c:aa:9a:7c:d7:34:50:bb: dc:98:4c:46:3c:18:72:be:4f:8f:b2:b2:c2:81:43:61:89:d0: 73:64:3b:35:b0:b6:1f:b2:4d:b7:21:09:8f:18:f6:fa:25:d0: 5a:c4:3c:25:5a:5d:9f:6f:38:6a:10:d1:b4:76:d2:d3:13:81: da:2d:ce:ab:6a:9f:8f:4a:e2:cf:b2:75:c1:0d:39:a7:6c:05: e0:5c:61:fc:23:35:3e:f8:b8:02:d1:42:6c:aa:96:55:31:e6: c6:8d:56:c3:cf:eb:3a:38:f3:7f:6f:c3:ab:87:f8:43:8a:8d: 50:7f:0b:3a:56:e3:ed:05:02:9c:d3:ff:a9:be:f3:bc:07:16: d8:a1:a9:d4:ad:b8:88:3b:34:6f:6e:7f:9a:5c:8f:ce:ef:5b: 0e:07:b9:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjA1MTEwOTAyMjNaFw0yNjA1MTgwOTAyMjNaMBgxFjAUBgNV BAMTDTZhMDE5YjFmLTFhNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoYhXdrgPawZ0HhYgiqNOIcR2hqWHSVdbUkwxq/d7FW9mAiVkck5px3oe21YPf fhd8rytECxi0WsA5uIK+u6L3fOLFujEhvOkHt4Vt3RA8M+auui+RmTSn/XHo7mxb 5KQp7iV4kqwfmWLVwZexFFDLumvrooqMadtnoohMVVaQGoqQzzF4VlyqTtM2DCPx 3oYxILp7EV98G+YJy/JlyZWGmtcg9D+G8ONEPnWkt2ij+UG+T123cyXdykMTKFkI kjUAv3MC0t5u1nRqVcOsHf+OuKfbviHscXnpbXgrUNrOv3bYrE2oaB917Ho+bv8I LC39V1ajQZWf6xFObP9Ei0cHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVgIqyMFM phqnaQSuuIHZWKjJx8swHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXTNhGw/H4sJSn585CEm92I1y1Lr7t+4kVQyq5PVxN6HCUKKybgNVDFaYGMj21 CQkkHwP61fXBsScKVcsOUd4BkXkPSe0CmD5zkvWrbeyZl6DO+OqjokfK9aSkTim2 Lb8HpHEVjKqafNc0ULvcmExGPBhyvk+PsrLCgUNhidBzZDs1sLYfsk23IQmPGPb6 JdBaxDwlWl2fbzhqENG0dtLTE4HaLc6rap+PSuLPsnXBDTmnbAXgXGH8IzU++LgC 0UJsqpZVMebGjVbDz+s6OPN/b8Orh/hDio1Qfws6VuPtBQKc0/+pvvO8BxbYoanU rbiIOzRvbn+aXI/O71sOB7mV -----END CERTIFICATE-----Generated at Wed May 13 10:34:08 2026 by rpki-client