$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json) Hash identifier: PxXqv8DBInbUMYys1Rqk9s53LbGm6VAJFkkyvwTyvS4= Subject key identifier: F3:D3:58:B3:51:BC:A9:7C:F6:6A:71:E6:23:6C:E0:24:C2:A8:04:46 Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft Manifest number: 0858 Signing time: Tue 12 May 2026 20:52:14 +0000 Manifest this update: Tue 12 May 2026 20:52:14 +0000 Manifest next update: Tue 19 May 2026 20:52:14 +0000 Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: NSB2I+Kqq09R93oX1bpvhbRV7WdF9CS5VHfegHP90CU=) 2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: IukELGpabDdGm9dh0mRYoQIuev5GllWS4FmX9CKUBYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Validity Not Before: May 12 20:52:14 2026 GMT Not After : May 19 20:52:14 2026 GMT Subject: CN=6a0392fe-2f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:8f:cd:57:82:bf:45:de:27:6b:d3:e8:ee: 31:b7:22:d5:76:0a:d3:48:06:39:c6:ed:10:02:17: e3:64:67:24:e1:74:53:82:e3:6a:52:cb:27:ec:06: 06:0e:d5:a6:48:4e:7e:8b:e0:cc:83:eb:84:47:56: b7:5e:99:08:fa:33:59:75:ce:af:69:79:97:a1:8e: bb:8e:ee:ad:73:d5:df:2c:60:50:5b:aa:83:36:5a: 57:19:88:b2:52:7a:73:0f:4f:12:6c:9d:06:5e:6d: f8:5e:2c:bf:56:c9:17:72:30:cc:6a:55:64:fd:24: a6:06:a6:04:f9:4d:21:d0:0b:fb:7c:48:d2:69:36: 8f:cc:81:e2:8f:96:98:b4:cf:ec:fe:d5:bd:0a:8b: c8:f2:d8:ea:0b:57:75:02:26:08:e6:1b:1b:64:bf: f1:bc:ec:89:ca:ab:29:d1:56:31:ff:fa:d6:51:de: 78:48:57:96:04:b1:6c:a5:1a:58:6c:13:d7:02:e2: 00:5a:fc:bf:e9:5c:61:c0:db:87:c8:be:4d:9d:96: f9:7e:48:79:5d:5e:6e:d0:1f:4e:e0:8c:34:3c:72: 2a:7b:bb:e0:3c:84:7b:a0:a0:10:6d:64:76:f4:45: c1:47:6c:bb:ba:d8:2c:6a:b0:4a:f5:6c:cb:18:e7: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D3:58:B3:51:BC:A9:7C:F6:6A:71:E6:23:6C:E0:24:C2:A8:04:46 X509v3 Authority Key Identifier: keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:4b:3e:6f:3b:14:54:e5:5d:d6:6b:f0:bf:83:8a:bf:ea: 3a:bf:b4:eb:2f:b1:29:11:d7:98:82:41:a2:2c:9f:f7:c7:ad: 17:ca:39:8d:0f:f0:ec:4c:70:e0:f3:c5:6d:4f:ef:dc:e2:73: 43:b6:32:b9:0f:9b:8b:b1:c8:7b:58:11:d4:b1:01:6e:66:d4: 7f:87:08:d3:74:d1:22:eb:4c:42:74:02:b6:1e:b7:19:2c:20: 4f:e2:2c:69:a0:f7:62:05:f2:bd:ce:a5:0f:99:d5:9b:51:3e: 55:0b:bc:f6:e0:f1:ac:b8:42:6e:d0:d9:b3:50:18:ab:a5:6a: 0a:5a:d0:ac:02:ad:79:db:cc:ef:7c:b4:54:e8:27:14:0f:ff: 99:76:a6:43:49:f8:50:a1:87:d5:5e:62:cf:c2:83:d9:71:72: 49:d2:df:c9:81:75:a8:57:2d:b1:b0:bb:07:52:59:f7:9b:dc: 0c:c0:5c:b9:81:41:3f:58:89:b1:87:9f:fa:ec:4a:54:18:6b: d2:9d:64:db:bb:5d:88:fa:19:87:bf:d9:97:64:ed:85:38:55: 56:8d:e9:d3:59:d6:e4:8e:be:c1:5b:1a:fc:8d:ad:55:a4:c0: 03:88:98:db:cd:80:fa:fe:f3:31:43:7e:46:3d:7b:8d:22:87: 90:f4:fc:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMwNjAxMTAvBgNVBAUTKDdGREY2MjE4RkEwMTVEMEEwMDc0QTg0NDI0NTE4MDZB MjhGOURERjUwHhcNMjYwNTEyMjA1MjE0WhcNMjYwNTE5MjA1MjE0WjAYMRYwFAYD VQQDEw02YTAzOTJmZS0yZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygqPzVeCv0XeJ2vT6O4xtyLVdgrTSAY5xu0QAhfjZGck4XRTguNqUssn7AYG DtWmSE5+i+DMg+uER1a3XpkI+jNZdc6vaXmXoY67ju6tc9XfLGBQW6qDNlpXGYiy UnpzD08SbJ0GXm34Xiy/VskXcjDMalVk/SSmBqYE+U0h0Av7fEjSaTaPzIHij5aY tM/s/tW9CovI8tjqC1d1AiYI5hsbZL/xvOyJyqsp0VYx//rWUd54SFeWBLFspRpY bBPXAuIAWvy/6VxhwNuHyL5NnZb5fkh5XV5u0B9O4Iw0PHIqe7vgPIR7oKAQbWR2 9EXBR2y7utgsarBK9WzLGOfMgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPTWLNR vKl89mpx5iNs4CTCqARGMB8GA1UdIwQYMBaAFH/fYhj6AV0KAHSoRCRRgGoo+d31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzA2MC9BNzI1ODZCMDAz QjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhRb0FkS2hFSkZHQWFpajUz ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5OWlHUG9CWFFvQWRLaEVKRkdBYWlqNTNmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzA2MC9BNzI1ODZCMDAzQjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhR b0FkS2hFSkZHQWFpajUzZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFV9LPm87FFTlXdZr8L+Dir/qOr+06y+xKRHXmIJBoiyf98etF8o5jQ/w7Exw 4PPFbU/v3OJzQ7YyuQ+bi7HIe1gR1LEBbmbUf4cI03TRIutMQnQCth63GSwgT+Is aaD3YgXyvc6lD5nVm1E+VQu89uDxrLhCbtDZs1AYq6VqClrQrAKtedvM73y0VOgn FA//mXamQ0n4UKGH1V5iz8KD2XFySdLfyYF1qFctsbC7B1JZ95vcDMBcuYFBP1iJ sYef+uxKVBhr0p1k27tdiPoZh7/Zl2TthThVVo3p01nW5I6+wVsa/I2tVaTAA4iY 282A+v7zMUN+Rj17jSKHkPT8Lg== -----END CERTIFICATE-----Generated at Wed May 13 07:32:04 2026 by rpki-client