$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json) Hash identifier: Y08NtM0/oGxFT+wE+oD48ivkBMFHE7lgoSmAG284y1c= Subject key identifier: 0B:B2:F4:4B:66:CC:F8:85:51:53:6F:5F:D2:CD:5B:7D:0B:1B:C0:ED Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft Manifest number: B9 Signing time: Mon 11 May 2026 07:11:05 +0000 Manifest this update: Mon 11 May 2026 07:11:04 +0000 Manifest next update: Mon 18 May 2026 07:11:04 +0000 Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: cYAPD85ffQlX44KMtNA0dPU9zJlWo4dFWBwpNcnHlcY=) 2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Validity Not Before: May 11 07:11:04 2026 GMT Not After : May 18 07:11:04 2026 GMT Subject: CN=6a018108-c308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:20:91:d2:4c:e4:e1:ab:51:d2:4e:51:5d: 5f:74:66:13:c5:2a:4b:2c:e7:d4:6a:ca:5f:5c:a6: 2e:71:1e:19:d0:c9:f8:68:86:46:a6:ad:1c:5d:e2: 6e:e9:3b:f1:90:83:da:1e:9d:75:b6:a3:4b:5c:af: a2:7a:94:7d:92:d2:5c:51:7f:2f:7e:2e:0a:8c:cf: 5e:94:9e:f4:07:6a:cc:b7:62:d5:9c:dd:e2:27:3a: 0d:cc:0d:0d:08:43:ce:28:92:98:0e:62:2d:7b:53: ab:a5:ec:7d:bb:ef:c3:6a:12:43:7c:e6:b7:41:84: 15:0a:28:87:f7:ef:df:7a:26:f1:6b:83:f7:68:73: 64:bf:9b:07:eb:34:e8:36:00:5c:e7:9c:57:f3:55: 7e:f2:8d:7c:d3:e5:28:04:4f:6b:c8:ee:49:10:a0: 9f:81:10:1a:91:4f:e2:ed:08:c7:f6:74:9d:36:c5: b1:93:f3:21:eb:1d:e3:93:2a:0a:88:68:24:4c:0d: e7:ae:41:a2:fa:fc:6f:ac:bd:32:9f:2c:60:91:15: 7b:8f:25:e3:3b:dd:3e:f9:45:16:93:b9:57:9c:00: a2:91:32:2e:87:30:54:ae:55:b7:7d:98:2e:18:ea: 5e:17:ab:0a:27:b5:69:a1:e3:81:7e:f3:a1:27:f9: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B2:F4:4B:66:CC:F8:85:51:53:6F:5F:D2:CD:5B:7D:0B:1B:C0:ED X509v3 Authority Key Identifier: keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:96:fc:2b:92:72:4e:81:e6:a0:d9:92:ea:0c:1a:64:10:75: 8f:de:1c:c2:ee:dc:c4:ff:a5:10:68:05:80:86:25:57:c4:fa: c3:68:2a:e8:b8:ac:65:a6:d6:a0:40:8f:e3:f5:1a:e0:1a:3f: c2:4c:ac:75:55:a4:6a:3f:f1:d9:bb:80:3d:1c:75:db:2d:31: 28:c9:a4:64:b0:5c:1f:f5:47:da:be:1f:a5:40:b2:48:cd:41: 2d:c6:83:1d:1e:45:0a:af:40:f4:4a:da:1b:e7:ab:cd:a7:30: 6b:17:4a:9c:7f:d1:d8:81:db:6c:17:24:17:88:22:7a:d5:25: 08:d3:86:a4:bc:c6:a8:15:d0:18:fa:ae:ec:92:e4:6e:76:3c: 39:41:1f:6b:3a:1d:bb:5f:aa:cd:a6:1a:e5:e0:1a:5d:d2:52: 8d:fe:84:d6:ff:2d:d7:d1:d9:d1:06:2a:7e:79:40:72:f6:87: 10:9c:3e:a3:b4:47:e3:33:2f:a0:16:a0:28:62:49:9e:d8:83: 76:28:b0:f8:a0:6d:16:fe:49:57:f7:39:3e:3e:a8:21:f6:59: 0d:05:b1:41:4f:ba:46:f4:27:43:8d:21:49:49:bf:2c:44:06: 1d:0f:10:f3:7f:9c:fc:cd:15:d6:6b:16:20:98:29:22:e1:e7: e8:7a:bb:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNzQxMTAvBgNVBAUTKEJGODg2MEIyQzAzNzdCQjVFRkVEQkUzQUQ0MEYxQ0Yx ODlGMkFDQjIwHhcNMjYwNTExMDcxMTA0WhcNMjYwNTE4MDcxMTA0WjAYMRYwFAYD VQQDEw02YTAxODEwOC1jMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwogkdJM5OGrUdJOUV1fdGYTxSpLLOfUaspfXKYucR4Z0Mn4aIZGpq0cXeJu 6TvxkIPaHp11tqNLXK+iepR9ktJcUX8vfi4KjM9elJ70B2rMt2LVnN3iJzoNzA0N CEPOKJKYDmIte1Orpex9u+/DahJDfOa3QYQVCiiH9+/feibxa4P3aHNkv5sH6zTo NgBc55xX81V+8o180+UoBE9ryO5JEKCfgRAakU/i7QjH9nSdNsWxk/Mh6x3jkyoK iGgkTA3nrkGi+vxvrL0ynyxgkRV7jyXjO90++UUWk7lXnACikTIuhzBUrlW3fZgu GOpeF6sKJ7VpoeOBfvOhJ/kDlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuy9Etm zPiFUVNvX9LNW30LG8DtMB8GA1UdIwQYMBaAFL+IYLLAN3u17+2+OtQPHPGJ8qyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3NC9DRTAwNDI1QTM2 QkMxMUYwODFENTVGMTdDNEY5QUUwMi92NGhnc3NBM2U3WHY3YjQ2MUE4YzhZbnly TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I3NC9DRTAwNDI1QTM2QkMxMUYwODFENTVGMTdDNEY5QUUwMi92NGhnc3NBM2U3 WHY3YjQ2MUE4YzhZbnlyTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpb8K5JyToHmoNmS6gwaZBB1j94cwu7cxP+lEGgFgIYlV8T6w2gq6LisZabW oECP4/Ua4Bo/wkysdVWkaj/x2buAPRx12y0xKMmkZLBcH/VH2r4fpUCySM1BLcaD HR5FCq9A9EraG+erzacwaxdKnH/R2IHbbBckF4gietUlCNOGpLzGqBXQGPqu7JLk bnY8OUEfazodu1+qzaYa5eAaXdJSjf6E1v8t19HZ0QYqfnlAcvaHEJw+o7RH4zMv oBagKGJJntiDdiiw+KBtFv5JV/c5Pj6oIfZZDQWxQU+6RvQnQ40hSUm/LEQGHQ8Q 83+c/M0V1msWIJgpIuHn6Hq7eg== -----END CERTIFICATE-----Generated at Wed May 13 07:18:20 2026 by rpki-client