$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft File: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json) Hash identifier: bM8xEbWB1mRz+Lyl0R3z3TB9Dc+Jpu36NV/1MInS5R0= Subject key identifier: FE:D4:C0:F4:6A:17:2A:5F:8E:02:96:D0:57:BC:67:25:A5:76:C7:79 Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24 Certificate issuer: /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft Manifest number: 0160 Signing time: Tue 12 May 2026 23:08:33 +0000 Manifest this update: Tue 12 May 2026 23:08:32 +0000 Manifest next update: Tue 19 May 2026 23:08:32 +0000 Files and hashes: 1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: Jw/dS+V3jbUd3MHV6KuYgkyBJC3+7Dw9jFBsphRag5A=) 2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: 2/r4oR0iCi4LexUGtmPzKzEWeEmDyv6SAtyEMBATvFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124 Validity Not Before: May 12 23:08:32 2026 GMT Not After : May 19 23:08:32 2026 GMT Subject: CN=6a03b2f1-69c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:09:01:24:b9:99:12:6b:ca:ad:fa:1b:84: 77:8e:54:74:86:fd:cf:24:10:24:51:e0:0f:a2:3e: 00:c9:6d:9e:04:13:af:c6:8f:41:e6:8d:a9:9f:8d: ba:ec:05:26:97:02:d3:4e:79:9e:76:ac:fa:e2:9f: 16:70:95:52:27:9a:77:f6:f6:6d:e0:b3:ab:5b:a3: bd:24:66:45:38:d2:e3:bb:a5:b1:a4:56:af:28:fb: a7:e9:66:1c:89:ee:8a:c2:5f:22:43:68:74:8c:18: 0a:d3:70:85:e1:46:13:b7:22:7d:4f:5c:af:91:11: fa:fd:da:2d:27:25:37:17:b6:10:ea:7c:82:62:ae: 54:e8:8d:3f:5c:3f:22:b1:43:7e:2d:43:1e:ac:6b: 64:62:7c:20:21:4d:79:19:15:1b:5a:b4:14:42:fe: d8:1f:a6:cb:aa:ab:96:d6:7f:d1:26:5b:4d:bb:6c: 23:19:46:63:9d:1a:f7:38:8c:78:e4:87:3e:26:74: f6:87:8e:36:a2:94:2a:6e:14:29:77:81:d3:5e:9b: f5:f6:c1:94:e3:61:65:d6:b4:38:0f:99:fc:91:3d: 78:4b:e3:46:83:d6:b8:de:8a:f0:7a:6b:34:c3:3b: b4:ec:49:24:e8:e4:ef:38:c4:a0:ae:44:09:ae:12: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D4:C0:F4:6A:17:2A:5F:8E:02:96:D0:57:BC:67:25:A5:76:C7:79 X509v3 Authority Key Identifier: keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fd:48:c6:2c:00:dc:c0:59:7d:61:79:0c:56:b0:0a:5d:75: 27:54:77:b1:b3:fb:4e:eb:1f:0e:ce:2d:6f:a3:2f:b6:61:b8: 26:6e:92:6e:15:c5:45:3c:1b:bb:b4:7b:e1:fd:1f:d2:0f:e9: b0:f5:fc:b9:b9:cf:e6:b2:c9:02:db:80:61:9c:a5:9d:36:1f: 79:28:30:be:17:a0:c2:a5:23:53:9a:be:ed:52:47:f6:45:6d: a2:0f:8b:1d:1c:eb:2a:ef:6e:f4:c0:fe:2b:8f:b2:81:19:05: c9:14:4d:f5:de:0e:31:ee:b7:16:c4:76:d1:bb:9d:b3:fc:a4: 35:56:89:91:a6:b7:73:cc:6a:12:66:75:cb:a8:4c:92:7f:88: 7a:c3:48:8a:29:b2:b7:ab:ec:9b:9f:4e:59:86:2a:9a:3c:27: f6:73:e8:c9:3f:fd:e4:58:ef:5b:6b:3f:89:3f:4f:b6:41:c6: 72:9a:d2:34:cd:58:bd:0e:87:d3:af:2f:b5:da:06:74:02:fd: a2:3a:d7:0b:54:b4:02:e0:69:37:ec:a8:b6:d5:bc:eb:13:7b: 6d:f6:15:d6:87:3d:60:43:4f:37:f1:3b:0f:6e:c2:a5:c9:5c: ed:e5:36:72:c2:fb:16:2f:2d:82:f2:10:02:3c:0b:87:f9:82: bc:4a:29:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEQ5NURBMTE3MTQxMjMwMEFCNTNCM0U0ODcwRjJGNDQx RjA2QzgxMjQwHhcNMjYwNTEyMjMwODMyWhcNMjYwNTE5MjMwODMyWjAYMRYwFAYD VQQDEw02YTAzYjJmMS02OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUEJASS5mRJryq36G4R3jlR0hv3PJBAkUeAPoj4AyW2eBBOvxo9B5o2pn426 7AUmlwLTTnmedqz64p8WcJVSJ5p39vZt4LOrW6O9JGZFONLju6WxpFavKPun6WYc ie6Kwl8iQ2h0jBgK03CF4UYTtyJ9T1yvkRH6/dotJyU3F7YQ6nyCYq5U6I0/XD8i sUN+LUMerGtkYnwgIU15GRUbWrQUQv7YH6bLqquW1n/RJltNu2wjGUZjnRr3OIx4 5Ic+JnT2h442opQqbhQpd4HTXpv19sGU42Fl1rQ4D5n8kT14S+NGg9a43orwems0 wzu07Ekk6OTvOMSgrkQJrhJWrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7UwPRq FypfjgKW0Fe8ZyWldsd5MB8GA1UdIwQYMBaAFNldoRcUEjAKtTs+SHDy9EHwbIEk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC9FRjYzODNFMjNE OUYxMUVGOTkwMzM3NjhDNEY5QUUwMi8yVjJoRnhRU01BcTFPejVJY1BMMFFmQnNn U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJWMmhGeFFTTUFxMU96NUljUEwwUWZCc2dTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC9FRjYzODNFMjNEOUYxMUVGOTkwMzM3NjhDNEY5QUUwMi8yVjJoRnhRU01B cTFPejVJY1BMMFFmQnNnU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWv1IxiwA3MBZfWF5DFawCl11J1R3sbP7TusfDs4tb6MvtmG4Jm6SbhXFRTwb u7R74f0f0g/psPX8ubnP5rLJAtuAYZylnTYfeSgwvhegwqUjU5q+7VJH9kVtog+L HRzrKu9u9MD+K4+ygRkFyRRN9d4OMe63FsR20buds/ykNVaJkaa3c8xqEmZ1y6hM kn+IesNIiimyt6vsm59OWYYqmjwn9nPoyT/95FjvW2s/iT9PtkHGcprSNM1YvQ6H 068vtdoGdAL9ojrXC1S0AuBpN+yottW86xN7bfYV1oc9YENPN/E7D27Cpclc7eU2 csL7Fi8tgvIQAjwLh/mCvEopcA== -----END CERTIFICATE-----Generated at Wed May 13 07:13:16 2026 by rpki-client