$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: iYcIe24d6VUxOMHrx0dwZnxJWgRpr9gZYZh4X9m6wIo= Subject key identifier: 6A:5C:E2:1D:E5:B8:BE:B7:D7:B1:DB:CC:6E:FE:95:F9:30:6F:C0:8A Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 0383 Signing time: Mon 11 May 2026 00:52:01 +0000 Manifest this update: Mon 11 May 2026 00:52:01 +0000 Manifest next update: Mon 18 May 2026 00:52:01 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: qi5EzMncoVdryv8QfsLhwl+gbnsh7/VRJvLrcg5fzwQ=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: Xl6LPHCgMIaL4uMyGZdF/u4P23v9oCG6fy6f1O7/cxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: May 11 00:52:01 2026 GMT Not After : May 18 00:52:01 2026 GMT Subject: CN=6a012831-e7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:09:16:27:43:53:8e:d3:80:9f:d2:4b:3d: 9e:d8:8b:54:87:f6:a7:ea:25:bc:d4:1e:cd:a0:f1: d0:1a:0d:95:f2:33:af:df:f7:9c:7a:5c:10:ff:01: 81:34:c9:4e:dd:0e:08:6e:9d:2e:22:ab:95:1e:ce: 6b:3e:d8:9d:24:1a:1c:f1:46:44:1f:c9:68:70:9b: ef:e6:ae:99:5e:65:d9:f3:05:c0:1a:f2:85:20:c2: a5:93:7d:6c:2e:5e:84:ec:03:54:8c:84:7b:6f:6b: e6:d8:67:27:d4:a9:c9:68:77:35:e4:b3:9d:90:e5: 58:43:47:fb:e5:32:21:18:41:d2:ef:50:f0:f5:85: 31:f9:c1:20:c7:70:4a:d1:9f:c7:2d:52:2c:40:0a: 29:a4:13:bb:43:1c:45:06:20:f6:da:8a:89:14:35: 20:17:e3:eb:50:a6:e1:1d:b6:46:50:73:c2:00:de: 7f:3e:ee:e5:15:ad:b1:28:8f:71:28:92:27:65:2b: 94:68:c5:28:6b:5a:c0:e7:c3:71:10:f0:0d:dd:4b: 5b:40:0f:bf:0a:38:77:7b:dd:92:3a:4c:f0:d3:5e: 3e:4e:c7:c6:7e:ac:49:59:02:45:c6:e3:12:7c:01: 96:5a:f5:fc:69:7a:53:0f:bd:19:e9:9e:12:c5:15: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:E2:1D:E5:B8:BE:B7:D7:B1:DB:CC:6E:FE:95:F9:30:6F:C0:8A X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b0:be:9e:3f:7e:a3:c8:72:82:55:6e:89:c7:30:ac:aa:ed: 98:96:d1:89:c2:11:57:a9:9e:82:e1:18:d5:52:c1:d8:0c:ef: f6:e0:0a:f4:e4:0d:79:77:7a:91:83:64:d6:3a:cf:d5:9a:4c: a9:00:d8:c3:3a:b2:1d:99:95:7e:b1:b1:e0:e5:fd:b9:bd:7d: e2:9e:f3:43:1f:5e:63:0f:d1:c6:68:2a:7a:b9:42:05:2a:e2: d7:e8:b0:b4:1b:f1:9d:cc:f6:0b:40:32:e8:cf:d0:16:cb:c4: 5f:6b:6e:6b:69:31:46:59:e5:7f:8c:06:a9:7d:ed:54:6e:99: eb:04:8a:b2:c8:2a:28:22:76:e3:46:70:8f:21:a9:9d:ec:b7: 1e:c4:fe:43:c5:63:16:a4:8b:81:60:0c:db:10:30:60:f6:2e: b8:1b:9a:8c:43:e0:97:f0:e7:fb:74:5d:1a:8a:31:4b:d3:96: 2b:83:93:62:bf:8f:06:4a:67:40:f4:26:66:e8:61:67:96:30: bc:76:ff:bd:a7:35:85:40:ee:e6:41:1d:c3:3c:a0:43:bf:3f: 89:be:a8:3d:26:4c:a7:fa:6b:1e:11:a1:41:ae:dd:d0:7c:b8: b3:e1:41:4a:26:ec:77:3f:f9:11:db:d2:92:9e:da:31:71:61: 9a:6e:d8:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjYwNTExMDA1MjAxWhcNMjYwNTE4MDA1MjAxWjAYMRYwFAYD VQQDEw02YTAxMjgzMS1lN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7cJFidDU47TgJ/SSz2e2ItUh/an6iW81B7NoPHQGg2V8jOv3/ecelwQ/wGB NMlO3Q4Ibp0uIquVHs5rPtidJBoc8UZEH8locJvv5q6ZXmXZ8wXAGvKFIMKlk31s Ll6E7ANUjIR7b2vm2Gcn1KnJaHc15LOdkOVYQ0f75TIhGEHS71Dw9YUx+cEgx3BK 0Z/HLVIsQAoppBO7QxxFBiD22oqJFDUgF+PrUKbhHbZGUHPCAN5/Pu7lFa2xKI9x KJInZSuUaMUoa1rA58NxEPAN3UtbQA+/Cjh3e92SOkzw014+TsfGfqxJWQJFxuMS fAGWWvX8aXpTD70Z6Z4SxRUUvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpc4h3l uL6317HbzG7+lfkwb8CKMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOLC+nj9+o8hyglVuiccwrKrtmJbRicIRV6meguEY1VLB2Azv9uAK9OQNeXd6 kYNk1jrP1ZpMqQDYwzqyHZmVfrGx4OX9ub194p7zQx9eYw/RxmgqerlCBSri1+iw tBvxncz2C0Ay6M/QFsvEX2tua2kxRlnlf4wGqX3tVG6Z6wSKssgqKCJ240ZwjyGp ney3HsT+Q8VjFqSLgWAM2xAwYPYuuBuajEPgl/Dn+3RdGooxS9OWK4OTYr+PBkpn QPQmZuhhZ5YwvHb/vac1hUDu5kEdwzygQ78/ib6oPSZMp/prHhGhQa7d0Hy4s+FB Sibsdz/5EdvSkp7aMXFhmm7Y1g== -----END CERTIFICATE-----Generated at Wed May 13 02:30:23 2026 by rpki-client