$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: RLQFhvnLmo6Ea6SIsWd0KSUNaq/926a8w8UiGoRYWPU= Subject key identifier: 57:5F:CC:2A:EB:92:9C:5A:AD:72:B3:4C:EA:C9:B6:A4:09:11:EB:E4 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 35CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 3575 Signing time: Tue 12 May 2026 14:33:22 +0000 Manifest this update: Tue 12 May 2026 14:33:21 +0000 Manifest next update: Tue 19 May 2026 14:33:21 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: X4kyAjI36VCZAxfB959HvXRpA8CnAIj0fTtmgvnLXLI=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: jXl+86vCs3KiG7eJ3MpATQjLUSqhs8yk2VzZe0i6DIs=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: ATzhpEQ3sWsRctxwBO/oEigCG80DEQbCszCIkMpVBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13770 (0x35ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: May 12 14:33:21 2026 GMT Not After : May 19 14:33:21 2026 GMT Subject: CN=6a033a32-26ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:0e:56:17:fc:0b:6d:e2:5f:e0:c1:9e:ce: b2:a3:a0:aa:6a:c3:72:c3:b5:a1:42:99:c8:7c:68: 99:b0:b3:20:df:be:46:56:05:79:92:4a:76:1f:25: 14:26:e1:54:4d:8a:45:e7:5c:06:f0:ad:03:9f:44: 45:ae:99:a8:93:c3:8c:13:ee:1c:d0:34:c6:88:e1: 66:3e:8c:c5:c5:45:d3:ce:f5:09:6e:22:02:b3:7f: 61:3d:44:ea:4a:49:18:99:72:0f:79:3d:79:0b:5b: 1a:13:a6:37:e7:8f:2c:93:a6:3a:65:6a:77:59:88: 53:92:70:33:ca:c1:ec:2f:10:59:ef:33:ab:a1:d3: cd:9b:cb:03:0a:ba:09:c8:de:55:c2:a8:af:36:03: e0:7f:66:14:db:bb:c6:c9:dd:1b:49:fb:c0:40:e8: 65:f4:96:1a:f8:67:65:c0:9e:b9:b0:49:43:de:b0: a7:cf:6f:48:75:2d:15:18:de:8f:2b:66:fb:d6:f5: bf:28:5a:6c:ad:29:82:9d:ec:1a:20:9f:6d:60:fb: a8:1d:83:81:1c:a6:a4:ac:38:fc:d0:6d:80:9b:f1: 77:eb:c6:7e:5c:18:3c:d4:00:1e:31:75:7c:17:0b: 1d:ac:bf:ab:34:8a:23:86:fe:d7:cb:87:66:5a:1b: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5F:CC:2A:EB:92:9C:5A:AD:72:B3:4C:EA:C9:B6:A4:09:11:EB:E4 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:67:38:d3:a8:55:1b:8f:7e:b5:49:7d:c9:ad:d7:8e:e3:34: 61:01:61:85:85:9d:4c:43:03:43:c7:a3:ef:40:f9:5c:34:63: 76:0d:c7:06:93:1e:61:e2:fb:04:2f:50:8b:e9:64:7b:c6:f3: d4:5f:00:93:a3:a9:a6:44:bd:4e:c6:6f:46:2e:1e:8b:3c:02: 86:08:5e:16:05:b0:e6:e2:4d:75:f6:9a:d3:0e:85:1f:7a:5a: 6a:48:ea:de:97:6e:1e:09:12:bc:f0:83:8f:bf:14:fc:d5:88: b5:25:5f:e0:80:e5:df:74:88:d6:42:8b:70:4f:8b:23:18:ca: da:f2:ae:3a:e1:dc:d2:23:ee:d4:e0:d9:ba:9e:ae:32:d9:de: f5:c4:ac:11:63:ee:68:cd:59:db:9b:53:39:08:50:f4:53:52: 4b:44:96:57:3f:fa:6d:63:2f:3a:28:2c:12:09:4d:f9:e5:22: 72:30:79:de:c6:a8:8c:59:47:84:07:46:c4:40:d9:5d:9f:9d: ff:3d:b3:4c:9b:74:b7:4e:ac:cf:c8:db:62:c8:d5:f4:5b:5d: 15:98:99:9d:35:e3:c7:d5:8b:9a:cb:c4:fa:ef:1e:27:d3:42: 76:7b:a2:65:9a:c8:e3:27:9a:04:62:e5:e8:3b:7f:97:53:a8: e7:cb:d4:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwNTEyMTQzMzIxWhcNMjYwNTE5MTQzMzIxWjAYMRYwFAYD VQQDEw02YTAzM2EzMi0yNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKsOVhf8C23iX+DBns6yo6CqasNyw7WhQpnIfGiZsLMg375GVgV5kkp2HyUU JuFUTYpF51wG8K0Dn0RFrpmok8OME+4c0DTGiOFmPozFxUXTzvUJbiICs39hPUTq SkkYmXIPeT15C1saE6Y3548sk6Y6ZWp3WYhTknAzysHsLxBZ7zOrodPNm8sDCroJ yN5VwqivNgPgf2YU27vGyd0bSfvAQOhl9JYa+GdlwJ65sElD3rCnz29IdS0VGN6P K2b71vW/KFpsrSmCnewaIJ9tYPuoHYOBHKakrDj80G2Am/F368Z+XBg81AAeMXV8 FwsdrL+rNIojhv7Xy4dmWhtFpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdfzCrr kpxarXKzTOrJtqQJEevkMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAymc406hVG49+tUl9ya3XjuM0YQFhhYWdTEMDQ8ej70D5XDRjdg3HBpMeYeL7 BC9Qi+lke8bz1F8Ak6OppkS9TsZvRi4eizwChgheFgWw5uJNdfaa0w6FH3paakjq 3pduHgkSvPCDj78U/NWItSVf4IDl33SI1kKLcE+LIxjK2vKuOuHc0iPu1ODZup6u Mtne9cSsEWPuaM1Z25tTOQhQ9FNSS0SWVz/6bWMvOigsEglN+eUicjB53saojFlH hAdGxEDZXZ+d/z2zTJt0t06sz8jbYsjV9FtdFZiZnTXjx9WLmsvE+u8eJ9NCdnui ZZrI4yeaBGLl6Dt/l1Oo58vUhA== -----END CERTIFICATE-----Generated at Wed May 13 08:52:29 2026 by rpki-client