$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: QPmRWktlSek5tYLvq9+Mh7bDjPtQTopRV5AwWJ32aIY= Subject key identifier: 4F:71:24:1C:0A:53:A2:AD:C2:6D:2A:33:1D:2E:69:24:C1:14:EB:99 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A65 Signing time: Tue 12 May 2026 19:44:51 +0000 Manifest this update: Tue 12 May 2026 19:44:50 +0000 Manifest next update: Tue 19 May 2026 19:44:50 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: QMpA3m6pZd8/TehHhoY8Bek4MKhWZWG90q0tgO5rd5k=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: May 12 19:44:50 2026 GMT Not After : May 19 19:44:50 2026 GMT Subject: CN=6a038332-e92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:ac:a9:85:65:10:13:02:6a:db:b3:5e:fa: a5:e8:63:46:cf:a0:30:51:e3:04:7b:8b:b3:d3:df: 32:62:32:db:ce:67:14:7f:1b:7c:25:28:bd:f9:bf: 02:2b:f8:2c:72:06:54:35:3e:51:51:5f:4a:5e:f1: a3:40:37:0c:f7:fc:26:d5:0b:1d:d9:d3:60:79:1f: ce:68:7d:82:c7:22:af:04:10:a2:d6:1c:e8:55:9a: b8:b7:08:c1:cc:f8:6e:71:3c:93:44:6d:bc:11:28: 4f:12:10:22:01:2e:02:4e:d1:7e:21:95:39:b4:82: 04:2c:72:04:54:be:06:66:88:0d:05:88:d5:d7:1f: d2:b7:f0:af:eb:90:2d:36:24:49:a4:48:11:9a:bd: 13:41:b5:e8:53:10:48:f6:7e:74:c2:74:16:be:56: 62:59:99:54:64:76:55:1b:87:75:f5:a9:7e:e1:af: 68:db:2e:5b:da:98:c1:70:85:9b:96:b1:54:7a:c5: a1:44:0a:b3:4e:7e:c2:c3:8a:d6:e5:68:ac:d6:e7: 25:3f:c9:72:ae:7c:bc:d5:95:08:12:01:f0:6c:9f: db:ee:43:16:e1:10:a7:0c:48:2c:0c:e7:60:64:8c: bc:7c:6f:54:f2:98:98:ab:5b:4e:41:5f:9e:9b:f5: 70:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:71:24:1C:0A:53:A2:AD:C2:6D:2A:33:1D:2E:69:24:C1:14:EB:99 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:29:e9:30:21:d5:75:49:4e:d7:51:fa:ff:a1:9d:14:7f:99: c9:8a:44:76:c3:10:a8:b1:f0:d6:c2:fd:85:2a:f3:2a:2e:fe: d5:91:76:47:a7:71:3a:a5:ca:0d:e6:7f:79:6c:37:a3:68:bf: 4a:be:59:87:df:04:cf:ea:c9:0a:d2:de:c5:35:79:17:b0:a3: 65:7f:ae:3e:bb:72:4c:92:b0:16:94:ca:2a:d7:54:40:44:de: 93:de:5c:82:eb:5f:83:2d:f6:c9:fd:51:a0:87:31:74:94:87: a2:78:5b:f1:73:5a:32:fb:a5:4b:03:6e:47:59:40:98:52:80: fc:ba:cc:97:f4:da:2b:0e:54:63:79:b0:3d:79:d2:95:ef:99: 8d:c1:fc:98:4b:8a:7c:c3:8e:da:00:6e:8f:91:f2:8f:34:c2: e6:87:e0:eb:1d:47:d4:48:8b:ac:d5:a7:0b:a5:c6:f5:b4:56: 9b:43:5a:de:62:19:67:2d:80:19:d4:57:1e:11:be:92:19:94: 6a:59:5a:c6:dd:ae:96:4e:96:ab:f6:e5:88:89:fe:a5:db:f7: 1f:77:e0:ce:d5:a6:3f:11:60:a5:72:df:73:04:7c:89:af:5b: 51:11:68:73:17:d8:41:92:da:59:d2:ca:d8:bf:a3:5d:88:d4: 3c:1b:3a:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwNTEyMTk0NDUwWhcNMjYwNTE5MTk0NDUwWjAYMRYwFAYD VQQDEw02YTAzODMzMi1lOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNOsqYVlEBMCatuzXvql6GNGz6AwUeMEe4uz098yYjLbzmcUfxt8JSi9+b8C K/gscgZUNT5RUV9KXvGjQDcM9/wm1Qsd2dNgeR/OaH2CxyKvBBCi1hzoVZq4twjB zPhucTyTRG28EShPEhAiAS4CTtF+IZU5tIIELHIEVL4GZogNBYjV1x/St/Cv65At NiRJpEgRmr0TQbXoUxBI9n50wnQWvlZiWZlUZHZVG4d19al+4a9o2y5b2pjBcIWb lrFUesWhRAqzTn7Cw4rW5Wis1uclP8lyrny81ZUIEgHwbJ/b7kMW4RCnDEgsDOdg ZIy8fG9U8piYq1tOQV+em/VwGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9xJBwK U6Ktwm0qMx0uaSTBFOuZMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAainpMCHVdUlO11H6/6GdFH+ZyYpEdsMQqLHw1sL9hSrzKi7+1ZF2R6dxOqXK DeZ/eWw3o2i/Sr5Zh98Ez+rJCtLexTV5F7CjZX+uPrtyTJKwFpTKKtdUQETek95c gutfgy32yf1RoIcxdJSHonhb8XNaMvulSwNuR1lAmFKA/LrMl/TaKw5UY3mwPXnS le+ZjcH8mEuKfMOO2gBuj5HyjzTC5ofg6x1H1EiLrNWnC6XG9bRWm0Na3mIZZy2A GdRXHhG+khmUallaxt2ulk6Wq/bliIn+pdv3H3fgztWmPxFgpXLfcwR8ia9bURFo cxfYQZLaWdLK2L+jXYjUPBs6VA== -----END CERTIFICATE-----Generated at Wed May 13 04:18:27 2026 by rpki-client