$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: CkboHkIDqs7b0QkZ8ND688g2hEWv0/ckEJ3e2/+9Q04= Subject key identifier: F4:37:EB:A8:AF:82:7C:BD:04:00:FC:98:6A:27:0F:E9:B1:CB:FE:78 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 01C9 Signing time: Mon 11 May 2026 03:45:44 +0000 Manifest this update: Mon 11 May 2026 03:45:44 +0000 Manifest next update: Mon 18 May 2026 03:45:44 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: Sbg5yBICISPhtBovsJGEDoHmd6KcM9jqX0+xuNBHKHY=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: GM/TYAUFUCny0Saz92cbiRCqbmb1aqzepH4OiX/MKnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: May 11 03:45:44 2026 GMT Not After : May 18 03:45:44 2026 GMT Subject: CN=6a0150e8-a1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:72:b0:04:83:72:16:44:2a:a9:8c:a1:a0: 09:e2:90:0c:53:ba:59:98:24:2f:aa:eb:ed:ec:c0: 62:24:7d:ca:50:10:a7:b6:7b:b9:06:e9:50:2b:5b: b9:d4:31:19:90:7c:ca:ad:98:b2:dc:f1:1c:ab:e0: 7e:40:a6:dd:62:b1:f5:c1:18:d0:c2:e8:bd:94:de: 18:2d:9e:7d:28:72:1c:3a:0a:4b:78:4c:72:68:a7: 7b:76:59:b0:b2:3b:43:4e:ef:5a:a0:75:d2:01:21: e7:26:6a:23:de:55:4d:b5:85:c6:c3:15:88:36:cb: ef:bd:5f:b1:48:3f:ef:f6:86:df:d4:2c:d5:41:39: 9e:c0:5d:0d:db:5e:9e:16:cd:a9:63:03:ff:be:c9: 52:a9:83:3e:aa:c4:a8:a0:c1:6a:ba:5f:39:f0:d4: d1:79:e3:24:f2:84:19:ac:7f:7d:34:fa:e4:28:01: f4:0e:82:40:92:64:02:c6:73:f5:ff:22:2d:6b:5d: d5:e2:3f:d1:e8:6f:77:ba:ed:5c:1b:98:15:4a:b2: b4:c9:9f:d7:fb:c4:7f:8e:04:c3:df:43:36:08:03: d9:f9:a7:f5:88:b1:fd:1d:ea:95:b0:6e:17:3a:bc: ac:29:31:aa:78:44:8c:22:55:51:f3:cb:b3:76:a8: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:EB:A8:AF:82:7C:BD:04:00:FC:98:6A:27:0F:E9:B1:CB:FE:78 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e9:79:11:fc:fc:d8:be:a2:72:a6:2f:a9:91:44:33:3f:3b: 3b:5e:86:66:ef:7d:ad:0e:cf:a2:cb:be:18:c7:d7:c5:74:65: 1c:c9:51:bc:b0:fa:c0:aa:e1:a8:49:d8:7c:8e:50:5d:76:7f: 1a:76:e3:34:18:d3:f0:ad:e1:4a:26:a4:4c:3e:4c:a1:39:a9: 08:67:8a:ba:2d:bc:48:71:ce:65:bc:1a:ad:bc:59:6f:18:0d: 52:e0:31:6e:31:ed:b8:5d:af:d1:c3:40:bf:17:3a:10:e6:bd: f2:f3:67:1c:2b:21:11:da:02:09:97:19:32:37:71:03:e0:27: 88:4d:5c:63:ed:de:0e:07:60:2c:87:69:7e:86:c2:c8:e5:32: 98:f7:72:3b:be:9a:99:ea:ca:28:f9:90:78:21:3a:36:80:0c: c6:1f:66:7e:e5:a7:57:59:dc:08:92:71:b4:8f:fb:24:92:2f: 7f:7e:f8:91:26:88:eb:a9:a3:40:a0:90:64:ad:02:83:07:45: 18:7e:8c:fe:6e:7c:3a:05:55:49:48:70:ab:b1:e0:ad:00:30: 7f:ba:d7:0a:8f:71:d3:fd:94:3c:97:47:75:90:ea:1d:38:8f: 4b:af:a2:0d:20:df:bc:0a:63:3c:84:ea:95:3b:47:71:6e:da: c9:ef:12:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjYwNTExMDM0NTQ0WhcNMjYwNTE4MDM0NTQ0WjAYMRYwFAYD VQQDEw02YTAxNTBlOC1hMWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfRysASDchZEKqmMoaAJ4pAMU7pZmCQvquvt7MBiJH3KUBCntnu5BulQK1u5 1DEZkHzKrZiy3PEcq+B+QKbdYrH1wRjQwui9lN4YLZ59KHIcOgpLeExyaKd7dlmw sjtDTu9aoHXSASHnJmoj3lVNtYXGwxWINsvvvV+xSD/v9obf1CzVQTmewF0N216e Fs2pYwP/vslSqYM+qsSooMFqul858NTReeMk8oQZrH99NPrkKAH0DoJAkmQCxnP1 /yIta13V4j/R6G93uu1cG5gVSrK0yZ/X+8R/jgTD30M2CAPZ+af1iLH9HeqVsG4X OrysKTGqeESMIlVR88uzdqi2pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQ366iv gny9BAD8mGonD+mxy/54MB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIul5Efz82L6icqYvqZFEMz87O16GZu99rQ7Posu+GMfXxXRlHMlRvLD6wKrh qEnYfI5QXXZ/GnbjNBjT8K3hSiakTD5MoTmpCGeKui28SHHOZbwarbxZbxgNUuAx bjHtuF2v0cNAvxc6EOa98vNnHCshEdoCCZcZMjdxA+AniE1cY+3eDgdgLIdpfobC yOUymPdyO76amerKKPmQeCE6NoAMxh9mfuWnV1ncCJJxtI/7JJIvf374kSaI66mj QKCQZK0CgwdFGH6M/m58OgVVSUhwq7HgrQAwf7rXCo9x0/2UPJdHdZDqHTiPS6+i DSDfvApjPITqlTtHcW7aye8S7A== -----END CERTIFICATE-----Generated at Wed May 13 04:29:14 2026 by rpki-client