$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json) Hash identifier: oQK9vZ1VzVjk+ZoOCREiIoRO8kEO0AyDsbtrjTTc11U= Subject key identifier: B1:78:C6:ED:A9:56:45:F2:AD:13:4F:70:59:9B:8B:AB:FF:9F:C0:E6 Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft Manifest number: 3E Signing time: Wed 13 May 2026 08:46:04 +0000 Manifest this update: Wed 13 May 2026 08:46:04 +0000 Manifest next update: Wed 20 May 2026 08:46:04 +0000 Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: eYWB442MVLJ+eya0F4tZ7jgSQ7pxHb9cv6MDZTpDWuE=) 2: A5E69774485411F1907D205D9E833773.roa (hash: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Validity Not Before: May 13 08:46:04 2026 GMT Not After : May 20 08:46:04 2026 GMT Subject: CN=6a043a4c-becd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:7c:b6:64:c3:77:73:fc:31:3d:5f:68:09: b0:00:3b:f0:a0:4e:3a:2d:32:61:2f:47:f7:d4:44: 79:c2:ec:0a:2f:39:45:93:90:89:a0:fc:37:90:31: 79:a9:07:4b:5f:90:9b:c7:cd:aa:13:b8:d9:29:22: 5e:56:e3:20:fc:52:16:2e:73:20:08:f4:86:86:bc: e6:af:4b:60:c0:e1:06:4a:a8:b9:2f:91:03:f7:b8: 3f:6e:04:f2:69:00:2f:3b:ef:13:47:ea:b7:99:25: 33:a0:c8:ef:c3:19:57:58:fe:5d:f8:6d:56:3d:60: 6c:6a:19:12:63:36:35:70:7f:cb:a4:7b:5c:f7:76: 3d:2f:c1:d1:31:af:5f:9d:1d:78:cf:e5:71:99:21: 44:d3:e9:87:98:37:08:b4:fc:ec:8b:b1:97:07:6c: e1:df:eb:4d:61:55:7f:01:fb:b8:47:ae:2e:c9:ab: fe:63:47:ad:40:bb:f9:7f:08:1d:ca:0f:12:2e:ee: 5c:13:db:a2:76:4b:90:b8:d1:29:41:04:09:72:c4: d9:c9:3f:56:89:41:23:33:87:80:9a:df:b7:a8:c5: 41:f9:2c:66:0b:b8:23:8e:b9:df:61:37:4c:18:6d: 0f:79:cd:72:98:9a:2f:75:da:e4:30:a8:7c:c8:26: 7f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:C6:ED:A9:56:45:F2:AD:13:4F:70:59:9B:8B:AB:FF:9F:C0:E6 X509v3 Authority Key Identifier: keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:65:3f:65:ae:2a:c5:fd:75:da:52:85:c4:d8:33:26:95:54: fe:f8:82:7e:69:3d:2c:e5:50:12:19:ae:5f:cb:48:25:61:87: aa:f8:74:1e:20:fd:f0:75:d5:29:fd:aa:cb:61:c2:74:ef:e9: c0:f1:b7:59:49:fe:0e:9a:a3:6f:68:cc:5d:95:f8:5a:d3:d0: 63:80:df:eb:df:47:b8:a5:12:3b:56:88:74:d7:93:87:ed:8d: 04:c4:b6:40:17:91:53:50:f3:74:b7:70:c3:e6:62:45:0f:f5: 84:47:f9:c3:c4:f7:46:61:bb:fd:89:a5:be:45:c0:e3:0c:19: 26:1c:49:18:11:48:16:2c:91:81:3a:04:64:5f:a0:c6:1e:ef: 07:e6:56:42:7c:8a:c2:ff:15:0e:a0:93:3b:3d:44:4a:51:c8: 5f:fa:64:87:a8:0e:f4:4e:d4:6c:2e:ff:18:eb:6c:34:4a:30: 3a:68:ac:28:8e:21:af:67:36:4a:49:a9:d9:29:7c:19:6a:c5: 56:73:1b:38:3c:f2:b6:27:f1:21:0e:cb:32:0d:43:2c:29:e0: 81:23:ed:2e:3e:00:0c:20:f3:71:1e:96:ad:26:76:a9:01:bc: fc:b8:10:4e:90:1a:b9:1e:9a:e3:40:21:d3:ee:28:4b:94:3b: 16:af:db:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1 OTU4REMwNTAeFw0yNjA1MTMwODQ2MDRaFw0yNjA1MjAwODQ2MDRaMBgxFjAUBgNV BAMTDTZhMDQzYTRjLWJlY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpQny2ZMN3c/wxPV9oCbAAO/CgTjotMmEvR/fURHnC7AovOUWTkImg/DeQMXmp B0tfkJvHzaoTuNkpIl5W4yD8UhYucyAI9IaGvOavS2DA4QZKqLkvkQP3uD9uBPJp AC877xNH6reZJTOgyO/DGVdY/l34bVY9YGxqGRJjNjVwf8uke1z3dj0vwdExr1+d HXjP5XGZIUTT6YeYNwi0/OyLsZcHbOHf601hVX8B+7hHri7Jq/5jR61Au/l/CB3K DxIu7lwT26J2S5C40SlBBAlyxNnJP1aJQSMzh4Ca37eoxUH5LGYLuCOOud9hN0wY bQ95zXKYmi912uQwqHzIJn/pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsXjG7alW RfKtE09wWZuLq/+fwOYwHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0M3QjBBM0JDMDBERTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFdu S3Z6UGp6a1hJcWxsWTNBVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApZT9lrirF/XXaUoXE2DMmlVT++IJ+aT0s5VASGa5fy0glYYeq+HQeIP3wddUp /arLYcJ07+nA8bdZSf4OmqNvaMxdlfha09BjgN/r30e4pRI7Voh015OH7Y0ExLZA F5FTUPN0t3DD5mJFD/WER/nDxPdGYbv9iaW+RcDjDBkmHEkYEUgWLJGBOgRkX6DG Hu8H5lZCfIrC/xUOoJM7PURKUchf+mSHqA70TtRsLv8Y62w0SjA6aKwojiGvZzZK SanZKXwZasVWcxs4PPK2J/EhDssyDUMsKeCBI+0uPgAMIPNxHpatJnapAbz8uBBO kBq5HprjQCHT7ihLlDsWr9tH -----END CERTIFICATE-----Generated at Wed May 13 16:39:22 2026 by rpki-client