$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: IAV8t3JUDdEMyQF55TwSvKUKSbGuzhB7LeZ2FlvWcGo= Subject key identifier: FB:B3:92:FF:1D:A4:6B:76:24:8E:DD:A5:46:88:BE:35:13:E5:CB:88 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 0136 Signing time: Wed 13 May 2026 05:35:31 +0000 Manifest this update: Wed 13 May 2026 05:35:30 +0000 Manifest next update: Wed 20 May 2026 05:35:30 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: ailyfxoiYkIk+rVLQ3kNM/zvn/NJedjPt1Gg8nlV/lw=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: May 13 05:35:30 2026 GMT Not After : May 20 05:35:30 2026 GMT Subject: CN=6a040da2-b3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:31:c5:19:5a:44:36:0d:17:1f:20:d1:dc: 48:27:8b:fa:ea:ee:a7:83:04:eb:b7:88:e1:53:84: eb:a9:84:a0:9d:e8:ef:5b:47:d1:11:38:e1:ed:7c: 30:a3:7c:92:10:7a:d1:7d:29:8a:e0:4f:e4:60:7a: c3:76:c4:d9:14:0f:4e:41:2b:2c:7b:18:6e:75:81: c3:d0:c5:78:a9:45:ef:aa:ed:24:fb:a7:19:75:aa: f5:b9:75:ef:2e:17:3e:4d:d2:c6:85:5d:93:f6:b8: e3:47:7c:9d:94:76:b3:7c:d1:fa:cd:6e:3b:96:5c: 6b:9b:a8:f2:22:59:fb:75:81:2c:17:df:dc:00:2e: 54:81:75:78:bb:a1:04:82:72:c7:f6:fd:0a:ec:b7: 62:cf:07:ff:94:7e:81:95:78:79:b8:cf:ab:d2:05: bf:15:14:72:fd:6e:1d:a3:d5:6b:40:17:95:c3:d4: ec:62:13:91:f7:8d:a5:64:6e:87:bb:c7:16:45:55: ae:22:35:a5:d8:f1:32:89:36:54:93:26:9b:47:38: 6c:b8:fe:b3:eb:af:1d:8e:29:28:16:a4:6d:8e:70: 8f:4b:40:7e:9f:72:3f:65:62:a4:71:a6:0a:b9:bd: 0e:39:37:b6:93:ac:a7:1b:dc:04:5c:28:17:ab:25: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B3:92:FF:1D:A4:6B:76:24:8E:DD:A5:46:88:BE:35:13:E5:CB:88 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:54:36:3d:d8:1c:e8:2e:a2:d1:8d:56:49:dc:3c:de:f9:7a: 53:61:ea:50:1e:64:8b:a9:d3:cb:a7:11:4f:09:25:93:60:ea: cc:3a:4b:fc:a6:be:8b:ea:f7:9d:36:80:89:8c:9c:89:3f:26: 45:f7:40:8b:11:89:aa:1d:30:30:9c:ef:f7:6f:a6:34:b6:07: 64:23:02:f6:cc:ac:b7:f8:1a:72:d3:6e:4c:58:bd:43:61:d1: 7f:8f:2e:4e:dd:9b:be:1d:be:45:30:cb:f3:a6:6c:89:74:43: 99:76:d8:da:eb:49:25:39:b2:dc:89:aa:1b:73:ee:ff:ee:86: 85:3c:0f:a4:85:db:8b:99:10:f1:07:4f:82:4e:1c:31:54:fe: d5:fb:ad:aa:20:9e:25:a9:0c:d3:41:63:eb:4c:d7:43:8d:05: 81:59:20:30:80:c7:7e:67:7a:d6:ec:56:4f:b6:26:e1:6f:fc: 96:ef:25:1f:89:d6:f6:ff:97:f0:42:f1:14:17:69:17:f5:51: 1c:7e:52:2a:e3:95:d1:ed:8b:bc:79:a3:c2:c0:08:15:d8:c3: 69:09:00:1d:da:11:d8:e2:5e:ef:6c:89:fb:01:31:f6:c7:77: e4:f2:3e:f9:10:f1:eb:7a:ce:fc:64:0f:40:f2:3b:ae:82:bb: 07:f4:1f:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwNTEzMDUzNTMwWhcNMjYwNTIwMDUzNTMwWjAYMRYwFAYD VQQDEw02YTA0MGRhMi1iM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD4xxRlaRDYNFx8g0dxIJ4v66u6ngwTrt4jhU4TrqYSgnejvW0fRETjh7Xww o3ySEHrRfSmK4E/kYHrDdsTZFA9OQSssexhudYHD0MV4qUXvqu0k+6cZdar1uXXv Lhc+TdLGhV2T9rjjR3ydlHazfNH6zW47llxrm6jyIln7dYEsF9/cAC5UgXV4u6EE gnLH9v0K7Ldizwf/lH6BlXh5uM+r0gW/FRRy/W4do9VrQBeVw9TsYhOR942lZG6H u8cWRVWuIjWl2PEyiTZUkyabRzhsuP6z668djikoFqRtjnCPS0B+n3I/ZWKkcaYK ub0OOTe2k6ynG9wEXCgXqyX49QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuzkv8d pGt2JI7dpUaIvjUT5cuIMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhlQ2Pdgc6C6i0Y1WSdw83vl6U2HqUB5ki6nTy6cRTwklk2DqzDpL/Ka+i+r3 nTaAiYyciT8mRfdAixGJqh0wMJzv92+mNLYHZCMC9syst/gactNuTFi9Q2HRf48u Tt2bvh2+RTDL86ZsiXRDmXbY2utJJTmy3ImqG3Pu/+6GhTwPpIXbi5kQ8QdPgk4c MVT+1futqiCeJakM00Fj60zXQ40FgVkgMIDHfmd61uxWT7Ym4W/8lu8lH4nW9v+X 8ELxFBdpF/VRHH5SKuOV0e2LvHmjwsAIFdjDaQkAHdoR2OJe72yJ+wEx9sd35PI+ +RDx63rO/GQPQPI7roK7B/QfqQ== -----END CERTIFICATE-----Generated at Wed May 13 08:14:43 2026 by rpki-client