$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: g5jXSFKMEjUAtUsQn21b6Dss9OopWCEqY42O4jNOAIc= Subject key identifier: 91:F9:31:BD:22:90:5C:B6:BB:48:6D:A5:77:AC:8C:EF:2B:BB:AC:A9 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 0507 Signing time: Tue 12 May 2026 17:02:23 +0000 Manifest this update: Tue 12 May 2026 17:02:22 +0000 Manifest next update: Tue 19 May 2026 17:02:22 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: 9MR8AseN2RUMPo3sIRzD3uBFrXn6lJ8Vhj0pFmdmpHA=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: 5Z7fKb2b95O7xf2REenK7dbH8KrSrAmTwTpVkXBeeOI=) 3: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Ylv7wHI65XMnQYhoDyQSygUwHrURYMjzNieL/UaPiGU=) 4: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=) 5: 1479C514596A11ECB1394271C4F9AE02.roa (hash: wpAJJYnFAicDNwa71hcmrPmPcdiAdvkl0r/mHo7+0do=) 6: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: 76p1LWBSiAURuIgRIP/lu1qZCJd79sZFpOsF7Mk4V7g=) 7: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: May 12 17:02:22 2026 GMT Not After : May 19 17:02:22 2026 GMT Subject: CN=6a035d1f-37eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:73:d1:05:98:c5:5e:73:93:ce:c2:fd:1d: 12:cd:df:de:e6:a3:82:3d:c4:23:0c:a5:b0:29:49: f1:19:08:c0:ba:9f:11:ae:16:28:0e:9a:cb:f0:5e: 8a:98:47:55:7c:ab:2e:6a:6b:bb:28:d3:4c:d5:7b: 91:1b:73:b4:93:1b:a9:25:42:d5:07:7c:de:a2:13: ab:00:02:f8:c7:14:e0:16:f2:6e:d9:0c:05:90:df: 27:a0:c2:eb:97:92:86:f7:d1:ac:b6:43:2b:fa:d6: bd:c3:43:21:ff:77:9e:fe:fe:7e:2f:e5:34:78:35: c5:49:c2:bf:77:76:5f:a9:bc:cc:43:01:ad:6e:53: 1a:5d:ba:32:af:40:4d:df:d8:48:e6:a4:5f:1d:12: 62:7b:c5:3b:a6:87:4f:06:4e:00:a6:fd:a9:07:f8: ac:dd:f3:1e:99:b9:b2:bc:05:eb:6b:32:d6:31:90: de:2c:8d:f1:ad:c9:7e:fa:0a:d1:4c:50:ca:f4:9c: 10:a1:84:df:4e:f0:0c:36:d9:ef:a3:3e:bb:30:7f: 5a:f2:1a:93:3f:ed:ca:34:ed:ae:e1:94:1d:75:d5: 7e:40:17:fb:1d:a7:63:0e:83:e1:13:09:04:30:53: 04:74:81:27:a4:ae:9f:75:89:fb:4e:0e:58:c5:a6: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F9:31:BD:22:90:5C:B6:BB:48:6D:A5:77:AC:8C:EF:2B:BB:AC:A9 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d9:03:da:c3:5f:2e:d4:a3:34:4b:89:73:e9:73:40:b6:39: c3:1a:a0:82:5f:18:21:74:07:90:1a:32:c0:de:13:e6:66:65: 97:77:8f:8e:c1:f4:0e:e3:2d:6e:b5:ee:c7:cd:6d:cd:4b:45: 82:8b:8f:9d:83:bd:14:77:86:3e:14:4b:74:b1:47:c8:3b:ac: 51:1e:29:d7:15:f1:11:cd:74:9b:5a:a5:e8:75:19:85:05:64: f5:f7:ac:21:d3:d2:c8:0a:af:74:a7:e1:52:c0:92:f7:9c:5d: 74:9d:cf:f4:8e:7f:1c:f0:cf:fc:d7:0f:1a:9b:23:bb:b8:4f: e7:78:b4:da:8d:66:4a:b9:b4:45:54:9d:15:8c:3c:a4:1c:45: a9:41:9f:bb:74:74:b5:04:00:ff:ba:4e:09:cb:6f:eb:20:9f: 77:37:bb:ed:93:c6:fe:ad:99:1b:c1:93:b0:7d:39:49:27:c0: a9:90:e0:72:2a:21:cf:b4:55:d3:9e:64:9b:68:19:16:7e:91: 63:86:1a:e4:ce:99:2e:56:4f:ac:dc:ca:18:e4:68:fd:6e:de: 95:a1:6a:9f:a0:1b:4f:67:94:ff:63:41:97:d3:fc:6d:0d:ae: 87:62:a9:b3:32:8c:e7:06:c8:ab:65:ed:e4:da:16:d4:f6:bf: e0:74:fa:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjYwNTEyMTcwMjIyWhcNMjYwNTE5MTcwMjIyWjAYMRYwFAYD VQQDEw02YTAzNWQxZi0zN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzARz0QWYxV5zk87C/R0Szd/e5qOCPcQjDKWwKUnxGQjAup8RrhYoDprL8F6K mEdVfKsuamu7KNNM1XuRG3O0kxupJULVB3zeohOrAAL4xxTgFvJu2QwFkN8noMLr l5KG99GstkMr+ta9w0Mh/3ee/v5+L+U0eDXFScK/d3ZfqbzMQwGtblMaXboyr0BN 39hI5qRfHRJie8U7podPBk4Apv2pB/is3fMembmyvAXrazLWMZDeLI3xrcl++grR TFDK9JwQoYTfTvAMNtnvoz67MH9a8hqTP+3KNO2u4ZQdddV+QBf7HadjDoPhEwkE MFMEdIEnpK6fdYn7Tg5YxaZ9gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJH5Mb0i kFy2u0htpXesjO8ru6ypMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn9kD2sNfLtSjNEuJc+lzQLY5wxqggl8YIXQHkBoywN4T5mZll3ePjsH0DuMt brXux81tzUtFgouPnYO9FHeGPhRLdLFHyDusUR4p1xXxEc10m1ql6HUZhQVk9fes IdPSyAqvdKfhUsCS95xddJ3P9I5/HPDP/NcPGpsju7hP53i02o1mSrm0RVSdFYw8 pBxFqUGfu3R0tQQA/7pOCctv6yCfdze77ZPG/q2ZG8GTsH05SSfAqZDgciohz7RV 055km2gZFn6RY4Ya5M6ZLlZPrNzKGORo/W7elaFqn6AbT2eU/2NBl9P8bQ2uh2Kp szKM5wbIq2Xt5NoW1Pa/4HT6rA== -----END CERTIFICATE-----Generated at Wed May 13 02:24:36 2026 by rpki-client