$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: oAT+BoL1eQASbypNEHlfhMb9CM0WEX6wazW/eob5zIg= Subject key identifier: D5:9E:1C:54:31:A8:D9:52:71:B5:A7:61:67:C0:DA:1C:65:FA:D8:2C Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 09E4 Signing time: Tue 12 May 2026 20:02:34 +0000 Manifest this update: Tue 12 May 2026 20:02:33 +0000 Manifest next update: Tue 19 May 2026 20:02:33 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: u3n+I3kpd/QiW0NIblZcq3DGfvoNUWiGGaeCeOY1Nt8=) 2: 4EB8310C43EE11F19AC895DFAD833773.roa (hash: ZZGaP1aMdg0/Z8kpA6IgDd5lfHorn6nSTgSPV8+XGJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: May 12 20:02:33 2026 GMT Not After : May 19 20:02:33 2026 GMT Subject: CN=6a03875a-1625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:4b:79:3f:39:b7:e3:c0:3f:d5:e0:cc:bd: bd:83:0d:7c:0b:6d:ce:29:bd:7c:a0:da:b4:ee:b3: 54:24:a2:e0:9f:8e:61:5a:cd:23:06:b6:15:c5:bd: 78:ad:1d:52:83:11:46:6f:a5:bc:70:4a:c6:ce:80: b8:c1:eb:3b:0e:87:74:c1:e7:1c:9c:60:90:97:66: 3c:43:8b:bc:09:93:54:c7:c9:a7:2a:4b:96:b9:f2: 7a:14:f8:83:3b:c5:4f:f2:24:b7:be:4f:01:d1:1f: 70:cd:8f:3c:c1:7f:b7:a6:d4:03:44:83:c2:8f:04: 51:e6:e3:c6:37:4b:46:86:83:89:0f:c4:77:1b:f8: 17:67:bf:ed:91:df:9e:ae:43:e3:95:c5:9f:31:e5: 01:da:52:19:ad:8d:80:19:79:6f:52:44:f0:cf:08: d7:d4:7b:74:f0:e7:9b:72:0f:32:3d:2a:4a:8b:ac: ac:ee:8f:62:bd:70:d4:1e:94:fc:43:e2:50:37:3e: af:8f:06:5e:bc:ca:6f:0b:81:6a:e8:ec:db:4a:71: 47:59:fb:c3:0f:7d:3c:c8:3f:72:b3:50:a7:d7:f6: a3:b0:f4:de:74:c3:d7:40:45:bc:62:0b:62:cd:a2: ab:e6:9c:d0:46:f3:ec:51:84:38:6a:a1:7f:6e:70: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:1C:54:31:A8:D9:52:71:B5:A7:61:67:C0:DA:1C:65:FA:D8:2C X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a5:56:cf:45:33:e7:42:64:74:82:02:63:34:66:0a:7c:78: 73:33:83:e5:c1:1b:50:49:85:69:26:13:32:5d:61:21:48:cc: 04:1c:08:1a:da:f0:f5:1f:a9:68:61:24:2e:1f:b9:84:c0:a1: 51:6d:70:1b:40:61:ef:0d:30:50:19:2a:d2:4d:d2:56:a8:20: 34:d3:2e:00:0e:be:d0:24:c7:37:48:b3:cb:e0:7a:0a:56:0d: d8:ba:fc:06:1e:ed:f3:c8:51:37:1c:0f:86:fe:0a:68:ae:4e: c0:58:78:71:2c:47:29:25:44:83:1b:3b:9e:da:ce:39:4b:4f: b8:57:4f:81:9a:f1:a0:b1:2b:48:e6:88:1d:71:54:44:43:13: 81:42:09:b8:2d:04:2a:61:4f:be:9b:d1:f0:4a:7b:ff:8d:cf: e0:fa:c8:a4:6e:c3:b7:88:d5:e7:db:00:bb:36:69:46:f4:ec: 00:1d:a5:04:19:f1:70:1c:b9:4c:79:0e:40:aa:0f:aa:31:62: 43:6b:c3:b8:a8:0e:d9:a7:f5:2e:8f:ab:ad:aa:8a:2b:2b:bf: c0:84:eb:18:e0:1d:74:f6:7c:e2:ca:1d:21:05:f1:e9:0a:69: dd:5f:c5:a3:9d:4d:19:37:ac:43:9a:c2:5f:fe:35:6d:39:1a: 56:3e:ca:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjYwNTEyMjAwMjMzWhcNMjYwNTE5MjAwMjMzWjAYMRYwFAYD VQQDEw02YTAzODc1YS0xNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDlLeT85t+PAP9XgzL29gw18C23OKb18oNq07rNUJKLgn45hWs0jBrYVxb14 rR1SgxFGb6W8cErGzoC4wes7Dod0weccnGCQl2Y8Q4u8CZNUx8mnKkuWufJ6FPiD O8VP8iS3vk8B0R9wzY88wX+3ptQDRIPCjwRR5uPGN0tGhoOJD8R3G/gXZ7/tkd+e rkPjlcWfMeUB2lIZrY2AGXlvUkTwzwjX1Ht08Oebcg8yPSpKi6ys7o9ivXDUHpT8 Q+JQNz6vjwZevMpvC4Fq6OzbSnFHWfvDD308yD9ys1Cn1/ajsPTedMPXQEW8Ygti zaKr5pzQRvPsUYQ4aqF/bnCgVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWeHFQx qNlScbWnYWfA2hxl+tgsMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaVWz0Uz50JkdIICYzRmCnx4czOD5cEbUEmFaSYTMl1hIUjMBBwIGtrw9R+p aGEkLh+5hMChUW1wG0Bh7w0wUBkq0k3SVqggNNMuAA6+0CTHN0izy+B6ClYN2Lr8 Bh7t88hRNxwPhv4KaK5OwFh4cSxHKSVEgxs7ntrOOUtPuFdPgZrxoLErSOaIHXFU REMTgUIJuC0EKmFPvpvR8Ep7/43P4PrIpG7Dt4jV59sAuzZpRvTsAB2lBBnxcBy5 THkOQKoPqjFiQ2vDuKgO2af1Lo+rraqKKyu/wITrGOAddPZ84sodIQXx6Qpp3V/F o51NGTesQ5rCX/41bTkaVj7Kfg== -----END CERTIFICATE-----Generated at Wed May 13 03:03:56 2026 by rpki-client