$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json) Hash identifier: 0xSw7A+ZNSKcBrZxAPXaYWiPIN+LoF5izFNGgrnhFPE= Subject key identifier: 40:79:02:EC:DE:93:44:6D:62:25:39:E2:AC:32:A6:7B:F2:15:F9:0C Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0D35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft Manifest number: 0D21 Signing time: Tue 12 May 2026 18:11:55 +0000 Manifest this update: Tue 12 May 2026 18:11:55 +0000 Manifest next update: Tue 19 May 2026 18:11:55 +0000 Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: bOSwh7i+j5B6egkZ77BvuWszDWCsXHyWLRlgYylEn4w=) 2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: May 12 18:11:55 2026 GMT Not After : May 19 18:11:55 2026 GMT Subject: CN=6a036d6b-e324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:c9:6a:fc:ce:a5:5b:c0:c5:31:a1:75:5c: 36:10:c5:0f:5d:d0:08:01:68:46:e9:35:a8:da:83: 59:36:33:ec:24:05:a5:54:23:62:1a:53:ba:cd:3a: d8:24:d2:5e:bb:00:68:31:cb:f1:c8:a5:fc:6c:25: 76:2c:8c:05:ee:c5:d0:80:c8:c2:fa:14:63:bc:cc: d4:2c:a5:0b:1f:d6:56:79:dd:b0:61:f8:08:fc:be: 42:f3:66:7b:17:41:7c:2a:96:27:b2:5b:fe:43:db: 50:8b:d3:f3:2b:d2:59:f1:8f:1b:3d:f4:9e:35:d5: 70:62:90:a8:e2:05:39:e1:31:ed:1e:62:76:2b:91: 54:53:52:22:34:00:17:26:64:d3:38:ac:5d:45:c0: ff:7c:03:94:3d:8b:9c:d8:be:e4:d3:24:6a:24:0d: d7:48:49:97:1b:f3:95:29:3d:8f:7f:4d:5e:9d:1e: 34:7d:97:7e:ee:50:1b:4d:6f:ea:5a:fe:ba:e8:16: a4:8b:4a:86:80:34:47:a4:f0:83:5c:6b:d9:a7:29: 8c:c9:31:e0:92:15:2d:00:2e:38:6d:dc:4e:eb:a3: 12:83:1e:5f:82:3e:3a:39:2e:ee:b7:d6:ab:ad:f5: dc:03:dd:bf:94:a7:77:57:cc:1d:95:b9:6f:7b:2e: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:79:02:EC:DE:93:44:6D:62:25:39:E2:AC:32:A6:7B:F2:15:F9:0C X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:84:f9:e5:a8:45:91:e8:aa:1f:0b:26:62:08:78:c7:8e:34: 11:c6:af:ba:00:6a:16:c8:14:a5:61:16:d0:c9:3f:9d:41:e1: 1a:58:f3:78:b8:d6:2a:5e:14:68:e5:6c:c1:dc:a0:29:0a:b9: 11:01:68:26:76:25:4a:ea:32:c0:b7:3b:1c:ad:14:1a:5b:8e: 74:ff:45:d4:3b:b7:2a:a2:36:a0:f2:e2:36:8b:43:38:9c:13: 09:fe:ea:eb:bc:e2:ad:6c:e2:60:40:f0:75:03:9e:fe:64:75: 1d:c5:de:ec:eb:0e:ea:c3:be:de:ed:20:8a:ed:84:48:0b:9e: 6a:f7:12:58:62:a3:43:9b:20:c5:43:30:d8:ba:1d:b9:e8:ea: 95:46:af:54:cf:68:4e:5d:45:31:01:d9:14:ca:25:59:5b:4a: 14:82:a3:d3:06:16:97:c7:64:46:d5:55:2a:54:88:c9:3d:e3: 59:1e:6b:ff:5b:9c:51:dd:23:37:65:b3:7b:4b:68:42:1b:65: 9a:9f:d5:89:96:6e:e4:bb:7a:82:3f:50:84:20:d7:e0:ea:a9: 87:3c:0c:97:6a:d3:ae:bd:fb:0b:f8:a3:08:71:55:b2:f5:14: 85:bd:6a:28:0c:02:55:19:f3:0f:d7:cf:42:d4:45:7a:88:a6: 16:15:8b:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjYwNTEyMTgxMTU1WhcNMjYwNTE5MTgxMTU1WjAYMRYwFAYD VQQDEw02YTAzNmQ2Yi1lMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocPJavzOpVvAxTGhdVw2EMUPXdAIAWhG6TWo2oNZNjPsJAWlVCNiGlO6zTrY JNJeuwBoMcvxyKX8bCV2LIwF7sXQgMjC+hRjvMzULKULH9ZWed2wYfgI/L5C82Z7 F0F8KpYnslv+Q9tQi9PzK9JZ8Y8bPfSeNdVwYpCo4gU54THtHmJ2K5FUU1IiNAAX JmTTOKxdRcD/fAOUPYuc2L7k0yRqJA3XSEmXG/OVKT2Pf01enR40fZd+7lAbTW/q Wv666Baki0qGgDRHpPCDXGvZpymMyTHgkhUtAC44bdxO66MSgx5fgj46OS7ut9ar rfXcA92/lKd3V8wdlblvey7XCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEB5Auze k0RtYiU54qwypnvyFfkMMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjoT55ahFkeiqHwsmYgh4x440EcavugBqFsgUpWEW0Mk/nUHhGljzeLjWKl4U aOVswdygKQq5EQFoJnYlSuoywLc7HK0UGluOdP9F1Du3KqI2oPLiNotDOJwTCf7q 67zirWziYEDwdQOe/mR1HcXe7OsO6sO+3u0giu2ESAueavcSWGKjQ5sgxUMw2Lod uejqlUavVM9oTl1FMQHZFMolWVtKFIKj0wYWl8dkRtVVKlSIyT3jWR5r/1ucUd0j N2Wze0toQhtlmp/ViZZu5Lt6gj9QhCDX4OqphzwMl2rTrr37C/ijCHFVsvUUhb1q KAwCVRnzD9fPQtRFeoimFhWL2w== -----END CERTIFICATE-----Generated at Wed May 13 13:36:12 2026 by rpki-client