$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft File: sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json) Hash identifier: 985zUakef7+graE6rAMr2nCBhH66KGg1wJpB3cGvN+g= Subject key identifier: 99:2F:05:57:E1:E0:D4:AC:99:6C:F6:B9:8D:0B:37:8C:F2:82:71:ED Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 Certificate issuer: /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft Manifest number: 41 Signing time: Wed 13 May 2026 08:36:35 +0000 Manifest this update: Wed 13 May 2026 08:36:35 +0000 Manifest next update: Wed 20 May 2026 08:36:35 +0000 Files and hashes: 1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: GgoiezZWlJ+LiIAGhSiYEjK7wr9Ay+28Em6zb7yz/R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Validity Not Before: May 13 08:36:35 2026 GMT Not After : May 20 08:36:35 2026 GMT Subject: CN=6a043813-b907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:36:1f:66:95:23:b0:de:23:08:8c:76:3c: fc:2f:c0:d5:d3:ed:cf:89:c4:fe:55:86:b8:4f:0e: b9:59:93:6d:80:bd:4d:84:c6:ec:47:ef:9b:23:82: d1:29:a5:68:54:ef:18:ae:cd:90:6e:0e:98:d6:6a: e4:f7:80:0f:62:e5:06:8c:d9:cf:6d:68:34:7a:b8: 8e:b2:ae:8c:bd:20:4c:b4:a8:9e:fa:f7:d1:82:00: da:96:a1:e2:00:40:2d:af:51:d1:dd:6b:37:e6:f5: 21:3c:b5:48:ea:f0:8f:b0:5c:58:f5:db:66:fb:59: f5:8c:56:9d:dc:f3:87:50:28:76:e4:ee:50:ec:49: 98:7c:f6:3b:96:1a:5a:56:92:07:d2:19:f4:16:98: e0:bb:82:77:44:5f:4f:41:d0:ef:cd:f4:7c:c0:d4: 73:44:46:68:86:b7:c9:1d:55:30:fa:e7:a6:4a:f7: 3f:ba:79:34:93:66:f2:39:65:36:dc:ff:cb:b5:71: fc:0f:ef:e4:93:aa:ff:df:39:76:64:6b:ad:be:ec: 06:69:05:42:63:cf:d5:c8:39:7f:e9:4d:f8:1e:36: f6:7d:54:3f:48:60:d3:48:e7:47:58:33:19:28:84: f3:e4:73:da:93:3c:6e:b9:20:49:16:d4:e3:b7:62: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:05:57:E1:E0:D4:AC:99:6C:F6:B9:8D:0B:37:8C:F2:82:71:ED X509v3 Authority Key Identifier: keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6a:32:6c:07:c9:76:07:e6:2e:bd:a5:f2:37:3f:a2:af:af: 06:f7:a0:cc:4d:92:eb:69:34:f3:d3:b4:02:9b:9e:0a:5c:9e: 9f:4d:f9:cd:2f:e5:09:5e:dd:9b:c2:8a:0b:3d:99:a9:32:6b: 84:8f:89:3a:bb:d2:d1:9a:7a:9c:fe:45:f2:49:a1:33:44:12: d1:a3:cd:40:ca:b3:b0:bf:55:19:31:1d:89:64:bb:3d:71:40: d1:c9:1a:b2:0c:30:b0:cc:04:47:a6:91:b6:00:6e:d5:68:69: 02:09:89:50:df:a9:5d:4f:20:81:e8:3e:39:bc:e6:67:4d:b1: e5:d1:a7:c8:8d:1e:62:9b:3c:a7:f8:6f:78:54:e8:2d:45:54: ba:ce:aa:dd:62:e7:86:be:55:ac:79:ab:38:df:01:bc:8d:d2: 08:d9:05:1f:be:c3:2c:c4:4f:18:20:9a:d9:d2:af:3c:8c:e5: 26:d5:9c:79:d5:60:d5:64:7a:36:ac:cd:bf:0a:7a:bf:98:42: 86:27:e8:72:59:76:76:22:fd:18:02:0b:3e:e2:78:8e:fa:5e: 41:12:70:19:46:1c:16:a5:bd:d3:46:35:3b:6f:cf:50:0f:0b: de:e0:64:8c:45:a6:f4:c8:52:a7:e4:d9:00:3a:a5:68:e5:71: 6a:b5:43:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODQ5NzExMC8GA1UEBRMoQjFDRDgzQjg5OUNFNjAyOUFDOEE0MjJFREJCRjE1ODMz NTM5MUQwODAeFw0yNjA1MTMwODM2MzVaFw0yNjA1MjAwODM2MzVaMBgxFjAUBgNV BAMTDTZhMDQzODEzLWI5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY5DYfZpUjsN4jCIx2PPwvwNXT7c+JxP5VhrhPDrlZk22AvU2ExuxH75sjgtEp pWhU7xiuzZBuDpjWauT3gA9i5QaM2c9taDR6uI6yroy9IEy0qJ7699GCANqWoeIA QC2vUdHdazfm9SE8tUjq8I+wXFj122b7WfWMVp3c84dQKHbk7lDsSZh89juWGlpW kgfSGfQWmOC7gndEX09B0O/N9HzA1HNERmiGt8kdVTD656ZK9z+6eTSTZvI5ZTbc /8u1cfwP7+STqv/fOXZka62+7AZpBUJjz9XIOX/pTfgeNvZ9VD9IYNNI50dYMxko hPPkc9qTPG65IEkW1OO3YpeNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmS8FV+Hg 1KyZbPa5jQs3jPKCce0wHwYDVR0jBBgwFoAUsc2DuJnOYCmsikIu278VgzU5HQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDk3LzAzMzJCQzY0RjEz NDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNtc2lrSXUyNzhWZ3pVNUhR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvc2MyRHVKbk9ZQ21zaWtJdTI3OFZnelU1SFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NDk3LzAzMzJCQzY0RjEzNDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNt c2lrSXUyNzhWZ3pVNUhRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaajJsB8l2B+YuvaXyNz+ir68G96DMTZLraTTz07QCm54KXJ6fTfnNL+UJXt2b wooLPZmpMmuEj4k6u9LRmnqc/kXySaEzRBLRo81AyrOwv1UZMR2JZLs9cUDRyRqy DDCwzARHppG2AG7VaGkCCYlQ36ldTyCB6D45vOZnTbHl0afIjR5imzyn+G94VOgt RVS6zqrdYueGvlWseas43wG8jdII2QUfvsMsxE8YIJrZ0q88jOUm1Zx51WDVZHo2 rM2/Cnq/mEKGJ+hyWXZ2Iv0YAgs+4niO+l5BEnAZRhwWpb3TRjU7b89QDwve4GSM Rab0yFKn5NkAOqVo5XFqtUND -----END CERTIFICATE-----Generated at Wed May 13 12:16:08 2026 by rpki-client