$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: dTEF/BiS1uYhcban0pGbjKN51O5rTqaBbTsnwFOfjlU= Subject key identifier: DE:72:89:9A:DA:AC:F3:36:ED:74:E6:6E:50:4B:E6:3E:FB:89:99:F2 Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 0340 Signing time: Wed 13 May 2026 01:10:56 +0000 Manifest this update: Wed 13 May 2026 01:10:56 +0000 Manifest next update: Wed 20 May 2026 01:10:56 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: zUsXhjQYNXXD+B0OBX64tEfqB0VcBOvy34mWKRF7hms=) 2: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: ERom4Ei0HIGCTmZt1BesT0wAL5vdqp/U/eF25sHImyc=) 3: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: pI7DQlML4G8nsrMbEd9F1IKO++WC4YpDB08JHhvsskQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: May 13 01:10:56 2026 GMT Not After : May 20 01:10:56 2026 GMT Subject: CN=6a03cfa0-0525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:68:f4:0d:88:09:1d:bb:fa:0c:52:33:29: d5:a6:48:2e:35:b1:71:74:e9:9b:10:79:4d:4f:e7: 83:51:e8:59:33:51:20:5b:16:00:ab:cc:34:8d:78: 58:6e:54:0a:a8:00:f2:74:c8:85:b5:8b:7c:13:12: bf:49:77:b3:de:76:5e:1c:e6:82:26:ec:cc:a8:94: 81:e2:8e:23:dd:74:ce:6a:b7:a1:45:4b:ea:ab:c5: 4e:34:77:46:36:20:11:e5:c0:d2:0d:0e:06:7e:f5: e5:b3:04:ff:98:73:05:c9:8f:db:26:cc:50:5a:0b: a2:3c:6b:bd:4a:b5:56:77:3c:fe:46:75:79:1d:f3: e0:1d:f1:64:24:c8:a5:65:7b:de:25:5b:e7:e5:e0: 8f:68:14:a8:fb:41:5e:00:43:d8:36:0b:ac:27:74: bb:25:4f:6f:49:bf:d8:98:e6:2d:ef:04:0b:d4:4f: de:f0:7f:ce:58:ed:89:e9:20:aa:bd:a1:c0:8f:66: b0:bb:c4:44:bf:9a:93:72:df:0f:f3:f9:f3:2e:62: b9:b8:3d:62:d8:1e:32:31:ea:15:69:b9:60:0d:66: 8c:ba:0b:56:8e:b7:c4:b4:f5:4e:24:a2:48:eb:3f: fe:dc:85:f4:a3:a4:f5:3e:71:64:01:7b:5e:2b:d4: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:72:89:9A:DA:AC:F3:36:ED:74:E6:6E:50:4B:E6:3E:FB:89:99:F2 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0d:c4:c1:f8:c6:da:8d:2e:4d:a5:99:bb:0c:84:a3:2c:a5: a7:29:69:4e:dc:c7:07:8e:ce:c0:02:82:84:84:19:c7:86:83: a8:97:19:33:7d:81:b3:90:b3:aa:7a:07:57:1f:b6:83:76:fa: 14:c1:ee:6e:91:40:24:7b:76:5a:93:d9:4e:61:1e:68:dd:59: b6:b1:e2:3e:2a:61:28:c6:f2:4e:a5:fa:0b:4f:ee:0c:49:dc: 11:8a:1c:7c:4b:ef:90:d6:ba:d2:e0:f3:6d:7b:80:4d:df:15: 40:ca:bf:19:06:4a:b4:31:60:8d:e6:74:af:fa:70:35:03:39: 9f:f2:01:18:d8:8c:fd:78:a4:5f:aa:94:fa:dd:e4:6f:11:9f: fc:e1:9e:a8:7b:27:19:f7:b8:de:b8:04:a4:f6:18:ad:7f:0f: 9e:e6:ab:cd:39:f4:19:e1:64:9f:a4:8a:cd:84:48:42:e1:76: eb:d7:c2:8b:16:21:28:cc:f2:af:d7:5a:03:67:4b:c5:d0:e8: f6:ac:8a:df:f3:ec:7e:a4:59:52:c6:02:32:23:0c:72:a6:d8: ff:b1:de:6b:1a:53:81:69:85:f6:19:e0:a4:44:af:fb:c4:a5: cc:91:a9:f0:39:9a:a9:df:90:12:ee:dc:09:65:c7:e1:8e:39: 88:cf:e0:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjYwNTEzMDExMDU2WhcNMjYwNTIwMDExMDU2WjAYMRYwFAYD VQQDEw02YTAzY2ZhMC0wNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/Fo9A2ICR27+gxSMynVpkguNbFxdOmbEHlNT+eDUehZM1EgWxYAq8w0jXhY blQKqADydMiFtYt8ExK/SXez3nZeHOaCJuzMqJSB4o4j3XTOarehRUvqq8VONHdG NiAR5cDSDQ4GfvXlswT/mHMFyY/bJsxQWguiPGu9SrVWdzz+RnV5HfPgHfFkJMil ZXveJVvn5eCPaBSo+0FeAEPYNgusJ3S7JU9vSb/YmOYt7wQL1E/e8H/OWO2J6SCq vaHAj2awu8REv5qTct8P8/nzLmK5uD1i2B4yMeoVablgDWaMugtWjrfEtPVOJKJI 6z/+3IX0o6T1PnFkAXteK9RSwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5yiZra rPM27XTmblBL5j77iZnyMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANA3EwfjG2o0uTaWZuwyEoyylpylpTtzHB47OwAKChIQZx4aDqJcZM32Bs5Cz qnoHVx+2g3b6FMHubpFAJHt2WpPZTmEeaN1ZtrHiPiphKMbyTqX6C0/uDEncEYoc fEvvkNa60uDzbXuATd8VQMq/GQZKtDFgjeZ0r/pwNQM5n/IBGNiM/XikX6qU+t3k bxGf/OGeqHsnGfe43rgEpPYYrX8PnuarzTn0GeFkn6SKzYRIQuF269fCixYhKMzy r9daA2dLxdDo9qyK3/PsfqRZUsYCMiMMcqbY/7HeaxpTgWmF9hngpESv+8SlzJGp 8Dmaqd+QEu7cCWXH4Y45iM/gLQ== -----END CERTIFICATE-----Generated at Wed May 13 11:26:50 2026 by rpki-client