$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json) Hash identifier: 0VHA6KPUKKyVm+vq4uJ7QenqBn5nwslU9VgMhOgw10Y= Subject key identifier: B9:64:6A:0F:90:D2:C7:BB:40:73:B6:15:29:C7:11:63:D6:CA:6E:05 Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft Manifest number: 053F Signing time: Tue 12 May 2026 23:35:48 +0000 Manifest this update: Tue 12 May 2026 23:35:48 +0000 Manifest next update: Tue 19 May 2026 23:35:48 +0000 Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: iek1XgOHKTBuPV2FBIo274bsOB6LO2VpefZfQ5vdaqU=) 2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Validity Not Before: May 12 23:35:48 2026 GMT Not After : May 19 23:35:48 2026 GMT Subject: CN=6a03b954-737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:ec:75:fa:55:e4:d1:0b:13:6c:dc:6e:69: 16:5d:68:9c:7e:f7:11:94:62:7f:34:b8:a4:fd:50: b9:bd:29:79:06:c7:64:fc:98:2d:e3:a3:9d:5d:f9: cb:4d:86:47:f6:72:85:12:61:ed:5f:04:8d:64:67: 7d:b4:66:89:b8:e9:4a:f9:bb:a6:2f:6e:21:f4:25: c1:4f:13:13:6b:c3:c1:3c:3c:62:13:90:a5:1f:c9: a4:2c:15:3e:ac:f3:40:08:08:5b:77:73:37:12:14: 89:54:4d:47:e3:48:c3:42:b8:61:3b:80:e4:64:10: 71:74:d4:95:b6:d0:05:32:41:ab:a9:ee:d0:70:70: a2:5b:d6:66:c9:04:ac:78:47:aa:1f:86:10:0f:f2: 83:d2:36:25:d5:90:ce:18:f7:79:f9:9a:36:bd:3b: 7e:80:f2:84:8c:eb:cd:5a:06:82:20:19:e4:4e:24: e3:4b:e7:be:92:e3:bc:22:89:c9:67:c4:fc:3e:e7: 3c:f2:8e:ee:f5:ef:75:b7:39:92:8d:f4:6d:1f:3e: 2f:69:9d:87:b3:a0:0d:ae:88:d9:27:4b:fc:36:98: 5a:56:c1:6c:82:a8:b0:8f:1c:f9:6e:b6:19:a5:85: 79:fe:6f:70:de:14:15:bf:c4:5e:22:88:8c:b8:44: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:64:6A:0F:90:D2:C7:BB:40:73:B6:15:29:C7:11:63:D6:CA:6E:05 X509v3 Authority Key Identifier: keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0b:c3:97:79:eb:af:63:cf:87:88:10:9a:6a:ea:56:3e:4f: 75:79:6c:da:d7:6f:04:05:e4:d8:04:a6:f3:6e:b7:a6:30:2b: 7f:ff:ed:76:94:ff:3c:06:3d:21:fb:03:bb:d3:3f:9b:74:9e: 0d:52:9a:62:c9:78:07:9c:cc:bf:a5:7b:24:d3:f3:24:24:b6: 95:1a:0e:24:9d:97:7e:58:fe:d3:1c:94:0e:37:b8:92:cd:28: a9:86:7d:86:83:b9:68:0b:6a:33:76:6e:38:f6:68:ea:e3:c0: c6:b4:a6:76:a8:3d:51:00:55:0c:66:86:4c:c3:7d:be:69:25: 1b:34:69:d4:8e:13:eb:79:21:bc:6c:0c:45:82:d0:3e:5b:99: 54:73:58:fa:21:da:9f:32:10:bf:5a:a6:ae:43:19:eb:14:58: 16:59:5d:12:bc:18:00:13:04:61:83:d6:93:80:51:94:4f:a7: 2b:b3:1f:71:3b:ca:16:9b:78:0c:ee:db:64:0f:bb:f4:2b:e2: ff:9e:7e:af:0b:9f:1a:04:cc:73:d7:c9:19:b1:78:c2:5d:db: 20:cb:16:e1:ff:76:d0:78:81:cd:63:e3:11:76:90:84:c7:04: fe:76:38:79:2a:a0:14:65:3a:9b:e7:ee:1f:2d:6d:6f:29:c2: b4:ba:b3:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD RDg4MkRBMDgwHhcNMjYwNTEyMjMzNTQ4WhcNMjYwNTE5MjMzNTQ4WjAYMRYwFAYD VQQDEw02YTAzYjk1NC03MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQHsdfpV5NELE2zcbmkWXWicfvcRlGJ/NLik/VC5vSl5Bsdk/Jgt46OdXfnL TYZH9nKFEmHtXwSNZGd9tGaJuOlK+bumL24h9CXBTxMTa8PBPDxiE5ClH8mkLBU+ rPNACAhbd3M3EhSJVE1H40jDQrhhO4DkZBBxdNSVttAFMkGrqe7QcHCiW9ZmyQSs eEeqH4YQD/KD0jYl1ZDOGPd5+Zo2vTt+gPKEjOvNWgaCIBnkTiTjS+e+kuO8IonJ Z8T8Puc88o7u9e91tzmSjfRtHz4vaZ2Hs6ANrojZJ0v8NphaVsFsgqiwjxz5brYZ pYV5/m9w3hQVv8ReIoiMuEQmcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlkag+Q 0se7QHO2FSnHEWPWym4FMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE aDVHUTNIRi1OTFROaUMyZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQvDl3nrr2PPh4gQmmrqVj5PdXls2tdvBAXk2ASm8263pjArf//tdpT/PAY9 IfsDu9M/m3SeDVKaYsl4B5zMv6V7JNPzJCS2lRoOJJ2Xflj+0xyUDje4ks0oqYZ9 hoO5aAtqM3ZuOPZo6uPAxrSmdqg9UQBVDGaGTMN9vmklGzRp1I4T63khvGwMRYLQ PluZVHNY+iHanzIQv1qmrkMZ6xRYFlldErwYABMEYYPWk4BRlE+nK7MfcTvKFpt4 DO7bZA+79Cvi/55+rwufGgTMc9fJGbF4wl3bIMsW4f920HiBzWPjEXaQhMcE/nY4 eSqgFGU6m+fuHy1tbynCtLqzPA== -----END CERTIFICATE-----Generated at Wed May 13 09:07:46 2026 by rpki-client