$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: MQpFFGP93a9qvBckiYsLr6CpcEZEnkRqyQNRIBrzmI8= Subject key identifier: 6B:23:E6:3C:AC:66:88:AE:70:98:AA:A9:4C:4F:52:2C:A8:36:7E:B0 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 14F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 14C9 Signing time: Tue 12 May 2026 16:52:13 +0000 Manifest this update: Tue 12 May 2026 16:52:13 +0000 Manifest next update: Tue 19 May 2026 16:52:13 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: DBNfxIIQS9aYIXp7UF84RR87m71ga3Gv4GWzETSO9mw=) 2: 983A5536450611F093EC3A65C4F9AE02.roa (hash: ijwzgpsaKu/9677qc+bwpPEiLD74pnpjkFQugVrQBxM=) 3: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=) 4: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0=) 5: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E=) 6: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: Lqak49Os9Ya4UTOEGKBzKyCOhe/2umYec1RSzQZJSpk=) 7: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: UX+Z+m5y60d6ZGNGCzFSXggUSxqmAM8xUHETNR0GgzI=) 8: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=) 9: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: /dfSFFokCqZHKPcfVIUa5saL4zfwsMCEJvMbseXpy4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5366 (0x14f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: May 12 16:52:13 2026 GMT Not After : May 19 16:52:13 2026 GMT Subject: CN=6a035abd-d4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3e:5f:72:18:3c:76:95:f7:58:59:42:cd:3c: 51:6e:f5:ce:af:40:21:ef:88:57:86:f0:b7:ea:60: e3:82:81:fe:b0:83:d7:c8:78:53:01:0c:e7:1a:54: a5:8c:ab:16:43:77:69:47:8b:07:cd:95:dc:d0:09: 61:d1:eb:a2:52:d3:fc:19:c8:3a:77:01:72:93:6c: b7:49:cd:ef:0b:f8:0a:82:0e:5d:88:ea:a1:47:a4: ae:4d:4c:3c:43:56:f3:2d:4c:3b:6a:96:2b:31:22: ea:51:6a:d3:65:90:1d:07:a8:ba:6b:81:82:7e:9e: 14:ba:17:36:8a:a2:02:94:f3:95:14:50:97:1e:6c: 36:e2:8a:a3:7f:69:dc:db:3a:dd:fb:5f:aa:46:04: 92:38:fb:4b:8d:f7:e0:af:01:44:d8:6b:a8:07:d3: d0:cc:27:e9:07:01:66:8a:db:d6:19:98:3c:7f:e2: 0a:7b:ec:18:c3:1f:2b:5c:f5:07:36:70:fe:83:83: 13:39:9f:cc:70:a2:53:cd:49:f8:68:b4:93:b6:6b: e1:e9:81:ff:e1:ac:88:14:1b:34:c4:6d:6d:ba:1c: 48:a0:f6:24:c7:c0:2d:d2:ae:a9:ad:59:51:1d:5d: fd:0d:a8:5b:66:5e:ee:ec:45:7c:a0:25:b3:a5:dc: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:E6:3C:AC:66:88:AE:70:98:AA:A9:4C:4F:52:2C:A8:36:7E:B0 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:9a:6a:ae:9f:d8:24:b9:27:a5:67:f3:49:23:45:87:7a:e4: 0f:75:f7:41:9b:70:70:35:df:90:db:02:b2:bd:8b:0f:77:d6: d5:fb:c0:58:45:3f:84:d7:59:2f:f3:da:ea:c2:19:b1:13:83: a9:ea:bc:88:06:17:30:c8:3a:90:68:f6:bf:8e:8f:da:80:7c: af:fb:0f:6e:b2:de:48:2d:e7:e7:fa:15:48:11:cc:d6:55:d3: 5a:ba:80:75:ac:92:cb:dd:9f:37:26:f7:5f:5d:ef:9e:8d:8d: 66:81:62:18:60:1c:dc:d1:98:76:70:f8:ad:1f:35:22:60:6a: be:86:80:02:ae:33:82:05:15:9e:6e:4c:69:6d:71:c4:58:21: 2b:e2:f0:f8:84:dd:49:6f:1f:94:78:2b:1b:fe:a8:df:cd:93: 96:64:f3:db:3c:d1:fc:98:e8:62:a2:c8:29:93:57:03:6e:51: 15:7f:1f:8d:fa:08:f4:82:cc:8a:df:e8:95:03:8c:e5:a5:67: 64:ad:46:a6:fb:4d:c3:7b:a9:c4:1f:d0:72:e8:99:0e:6d:7e: a1:dd:aa:02:70:ad:27:ac:77:a4:92:b1:6d:56:97:13:f9:6d: 4a:86:7e:ed:81:c8:a1:59:d9:2a:95:59:4e:7d:df:33:c9:6a: be:64:4f:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYwNTEyMTY1MjEzWhcNMjYwNTE5MTY1MjEzWjAYMRYwFAYD VQQDEw02YTAzNWFiZC1kNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z5fchg8dpX3WFlCzTxRbvXOr0Ah74hXhvC36mDjgoH+sIPXyHhTAQznGlSl jKsWQ3dpR4sHzZXc0Alh0euiUtP8Gcg6dwFyk2y3Sc3vC/gKgg5diOqhR6SuTUw8 Q1bzLUw7apYrMSLqUWrTZZAdB6i6a4GCfp4Uuhc2iqIClPOVFFCXHmw24oqjf2nc 2zrd+1+qRgSSOPtLjffgrwFE2GuoB9PQzCfpBwFmitvWGZg8f+IKe+wYwx8rXPUH NnD+g4MTOZ/McKJTzUn4aLSTtmvh6YH/4ayIFBs0xG1tuhxIoPYkx8At0q6prVlR HV39DahbZl7u7EV8oCWzpdzMKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsj5jys ZoiucJiqqUxPUiyoNn6wMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr5pqrp/YJLknpWfzSSNFh3rkD3X3QZtwcDXfkNsCsr2LD3fW1fvAWEU/hNdZ L/Pa6sIZsRODqeq8iAYXMMg6kGj2v46P2oB8r/sPbrLeSC3n5/oVSBHM1lXTWrqA daySy92fNyb3X13vno2NZoFiGGAc3NGYdnD4rR81ImBqvoaAAq4zggUVnm5MaW1x xFghK+Lw+ITdSW8flHgrG/6o382TlmTz2zzR/JjoYqLIKZNXA25RFX8fjfoI9ILM it/olQOM5aVnZK1GpvtNw3upxB/QcuiZDm1+od2qAnCtJ6x3pJKxbVaXE/ltSoZ+ 7YHIoVnZKpVZTn3fM8lqvmRPSQ== -----END CERTIFICATE-----Generated at Wed May 13 05:32:04 2026 by rpki-client