$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: tJ/wbW2QcMqtgZc5KSEN48WwHWXqG1E60YFaP/HqZCw= Subject key identifier: 81:6B:D7:A9:8C:21:2E:01:0C:A0:C6:44:64:BD:89:AD:F8:36:71:FE Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 0146 Signing time: Wed 13 May 2026 05:24:52 +0000 Manifest this update: Wed 13 May 2026 05:24:52 +0000 Manifest next update: Wed 20 May 2026 05:24:52 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: r/2KGQrfd9YUILw7d/uIquCt0WmXT8xhA9850iOUqu8=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: May 13 05:24:52 2026 GMT Not After : May 20 05:24:52 2026 GMT Subject: CN=6a040b24-18d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:61:53:33:68:ea:09:4d:12:17:d0:7c:bb: fc:15:a3:2a:b0:f4:16:b1:db:03:4f:a8:e6:14:13: 8a:20:d9:3f:8e:66:c8:68:da:cb:80:92:d6:23:f8: d8:83:e4:29:1a:55:4b:0b:fa:fc:60:40:78:ca:55: 9e:d7:54:cf:88:4c:d8:8b:80:cc:e6:73:73:ec:82: 50:8d:49:e1:09:c3:f5:60:ee:48:55:3b:d9:29:a5: eb:c6:8e:ad:1f:b5:c3:87:f0:6d:f7:7f:cb:26:51: e2:e0:aa:db:e1:c6:b3:9b:9f:47:f0:0c:40:f2:20: 7a:c4:02:31:f7:9c:ff:0d:28:2d:a3:b3:73:c0:ab: 3b:db:48:0f:7b:c8:9f:cd:0c:13:d6:32:fb:99:7b: 58:7f:e7:7e:66:04:3c:02:e0:46:3a:f3:22:e5:97: aa:c0:56:b3:23:1b:1e:9e:af:e6:5e:32:ba:8c:a1: 0a:f4:1d:c9:a4:4e:91:9e:39:0f:70:57:fa:1b:6c: 59:fb:5e:5d:3a:53:3c:f9:40:14:d2:19:6d:a4:4a: 0f:56:07:02:80:33:68:3c:13:aa:46:27:b3:ce:07: 36:50:39:c7:8f:58:08:14:17:b4:ba:01:f7:36:67: ab:ab:e5:fb:df:20:99:8b:26:68:f9:97:87:39:5a: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:D7:A9:8C:21:2E:01:0C:A0:C6:44:64:BD:89:AD:F8:36:71:FE X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:32:bb:de:a7:14:64:03:00:ab:3c:f8:f3:25:80:62:4d:cd: d8:e1:4d:b5:d1:2f:d8:63:f7:75:e6:85:0f:5a:b7:0f:05:f3: 0f:3c:3a:5c:0d:2b:a1:df:cb:65:e4:70:18:d5:3d:04:5b:8a: a7:e7:2e:46:76:7e:49:d4:9f:ec:23:d2:65:31:02:e2:e4:ef: 2f:75:1a:ee:f4:87:ce:a0:66:41:d9:36:78:52:97:99:73:b1: da:33:9c:1b:69:12:f2:41:54:b0:87:20:76:28:d2:3a:21:3e: ab:b3:52:d5:30:92:7f:7b:a7:31:46:69:9f:ab:82:39:35:16: 7c:64:c1:ed:3c:b5:5b:05:ac:31:a7:06:c2:9f:9f:f6:8f:29: e7:95:08:0f:76:cc:5f:a1:44:5b:0d:a3:41:f5:18:d7:7c:53: 97:88:8a:99:82:d4:e3:2a:7f:74:75:92:f3:1d:4d:9c:3d:69: 34:2b:1a:37:e6:d5:cd:62:df:6b:e6:89:cc:f1:61:63:44:db: c6:fc:ea:93:42:4f:da:5e:b1:08:d1:81:53:1d:52:32:6e:44: bd:90:56:ac:14:b2:b6:36:16:d2:e6:f2:e1:05:83:14:21:6a: 6a:87:7b:a3:d8:12:e7:64:6b:18:65:01:40:38:79:ef:03:44: 55:c2:c8:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjYwNTEzMDUyNDUyWhcNMjYwNTIwMDUyNDUyWjAYMRYwFAYD VQQDEw02YTA0MGIyNC0xOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbJhUzNo6glNEhfQfLv8FaMqsPQWsdsDT6jmFBOKINk/jmbIaNrLgJLWI/jY g+QpGlVLC/r8YEB4ylWe11TPiEzYi4DM5nNz7IJQjUnhCcP1YO5IVTvZKaXrxo6t H7XDh/Bt93/LJlHi4Krb4cazm59H8AxA8iB6xAIx95z/DSgto7NzwKs720gPe8if zQwT1jL7mXtYf+d+ZgQ8AuBGOvMi5ZeqwFazIxsenq/mXjK6jKEK9B3JpE6RnjkP cFf6G2xZ+15dOlM8+UAU0hltpEoPVgcCgDNoPBOqRiezzgc2UDnHj1gIFBe0ugH3 Nmerq+X73yCZiyZo+ZeHOVp5YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFr16mM IS4BDKDGRGS9ia34NnH+MB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAajK73qcUZAMAqzz48yWAYk3N2OFNtdEv2GP3deaFD1q3DwXzDzw6XA0rod/L ZeRwGNU9BFuKp+cuRnZ+SdSf7CPSZTEC4uTvL3Ua7vSHzqBmQdk2eFKXmXOx2jOc G2kS8kFUsIcgdijSOiE+q7NS1TCSf3unMUZpn6uCOTUWfGTB7Ty1WwWsMacGwp+f 9o8p55UID3bMX6FEWw2jQfUY13xTl4iKmYLU4yp/dHWS8x1NnD1pNCsaN+bVzWLf a+aJzPFhY0Tbxvzqk0JP2l6xCNGBUx1SMm5EvZBWrBSytjYW0uby4QWDFCFqaod7 o9gS52RrGGUBQDh57wNEVcLIaw== -----END CERTIFICATE-----Generated at Wed May 13 13:14:09 2026 by rpki-client