$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json) Hash identifier: +/umyN0dh1qTBnTLBaXbNxO13He2eHJi/9kczf4EszQ= Subject key identifier: 04:A7:0A:64:E0:41:9E:4F:93:D2:5D:9E:91:21:C5:91:6D:C2:4C:A3 Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft Manifest number: 37 Signing time: Mon 11 May 2026 08:45:46 +0000 Manifest this update: Mon 11 May 2026 08:45:46 +0000 Manifest next update: Mon 18 May 2026 08:45:46 +0000 Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: f19PLiCIp57FUokaAjXfAg/YWdIJSEIEA0EYwV/dbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Validity Not Before: May 11 08:45:46 2026 GMT Not After : May 18 08:45:46 2026 GMT Subject: CN=6a01973a-c7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:ab:de:a1:45:85:7c:d9:4f:dd:26:95:54: e0:7b:34:90:6e:03:8f:04:a8:a5:84:e2:34:e1:3e: 97:f9:49:9c:c7:02:25:a6:28:b4:ed:fd:39:4d:49: b8:4a:b3:82:29:df:9e:62:c2:52:87:e2:26:25:42: 53:ec:df:23:17:95:4d:de:aa:15:70:d8:e1:95:71: a3:51:af:58:d0:42:39:ea:57:56:25:d1:90:ce:c8: 86:4f:4f:c9:c4:55:8a:e3:65:00:2f:fe:65:b2:ef: 8b:48:55:47:91:83:c7:ea:56:31:48:60:a0:34:19: d6:31:02:02:a3:6f:0f:f7:40:7b:28:9a:4d:fb:65: 5a:6f:46:c5:73:74:4a:7b:f6:a0:dd:90:41:dd:30: f2:3a:86:f6:21:ec:aa:30:c2:d9:80:91:49:f8:cf: b0:7d:f0:0a:2d:75:50:e1:db:ee:ff:97:df:c9:63: 97:42:a7:cf:25:45:dd:70:7e:d4:dd:95:fd:cd:b4: 77:61:64:b9:e9:93:50:01:f6:49:80:5c:b7:51:f2: be:95:71:10:99:68:e9:7b:03:b2:3c:82:be:8a:1d: 9d:33:12:65:eb:85:2b:84:43:50:5b:b5:9f:90:b7: 8c:f7:84:c4:bb:96:11:d0:82:f1:53:49:73:bb:23: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A7:0A:64:E0:41:9E:4F:93:D2:5D:9E:91:21:C5:91:6D:C2:4C:A3 X509v3 Authority Key Identifier: keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:cf:99:5a:fb:1a:0d:f0:51:0a:80:9c:a1:ae:79:52:bb:01: 00:f5:8c:03:1d:49:7a:3d:53:6c:5d:25:5a:d1:3d:ba:d4:9b: 4e:21:24:a2:b3:65:e4:e7:41:55:08:1d:9a:fe:b3:d2:ce:c9: ac:2f:4c:50:ea:95:b8:b3:1c:18:d0:89:b6:b2:64:f2:6a:39: 05:f0:45:5f:fd:08:61:23:3b:64:b4:32:22:2f:ee:ad:16:69: ac:72:8b:0c:cd:b1:12:84:3c:6f:7d:3b:ec:1b:60:c9:04:b8: df:ea:c1:da:99:51:50:9f:79:58:8a:58:59:8c:0f:12:8f:e3: 03:74:69:ea:c1:c1:42:9b:c0:81:ec:4e:f5:47:a2:dd:01:ef: c9:44:46:31:67:d8:d0:3a:67:e6:88:8f:c0:21:62:fb:0e:15: 7b:6a:4e:ee:4e:b1:2f:f2:1c:4d:b9:68:47:81:d8:f2:c0:e4: f6:04:f0:3b:5b:2f:28:9a:1f:70:11:b8:c1:f3:ea:07:ec:f3: b1:7e:0e:bc:c3:3c:9d:f6:3c:f1:6a:95:aa:55:16:0c:a9:64: 2a:09:74:fa:96:d3:11:25:c2:7e:0e:7d:45:82:eb:72:81:76: d6:05:62:8c:5a:88:2c:7a:a4:33:99:13:d3:2c:ac:f8:59:aa: 60:db:73:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoN0Y2MzhFMTBENkJGM0Y0QTg1NEJDNjBBMTNDMjM5QjJG MzVEMTRFMTAeFw0yNjA1MTEwODQ1NDZaFw0yNjA1MTgwODQ1NDZaMBgxFjAUBgNV BAMTDTZhMDE5NzNhLWM3ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSQ6veoUWFfNlP3SaVVOB7NJBuA48EqKWE4jThPpf5SZzHAiWmKLTt/TlNSbhK s4Ip355iwlKH4iYlQlPs3yMXlU3eqhVw2OGVcaNRr1jQQjnqV1Yl0ZDOyIZPT8nE VYrjZQAv/mWy74tIVUeRg8fqVjFIYKA0GdYxAgKjbw/3QHsomk37ZVpvRsVzdEp7 9qDdkEHdMPI6hvYh7KowwtmAkUn4z7B98AotdVDh2+7/l9/JY5dCp88lRd1wftTd lf3NtHdhZLnpk1AB9kmAXLdR8r6VcRCZaOl7A7I8gr6KHZ0zEmXrhSuEQ1BbtZ+Q t4z3hMS7lhHQgvFTSXO7I0tJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBKcKZOBB nk+T0l2ekSHFkW3CTKMwHwYDVR0jBBgwFoAUf2OOENa/P0qFS8YKE8I5svNdFOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzJBQTZFMjQ0RkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBxRlM4WUtFOEk1c3ZOZEZP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjJPT0VOYV9QMHFGUzhZS0U4STVzdk5kRk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzJBQTZFMjQ0RkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBx RlM4WUtFOEk1c3ZOZEZPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAz5la+xoN8FEKgJyhrnlSuwEA9YwDHUl6PVNsXSVa0T261JtOISSis2Xk50FV CB2a/rPSzsmsL0xQ6pW4sxwY0Im2smTyajkF8EVf/QhhIztktDIiL+6tFmmscosM zbEShDxvfTvsG2DJBLjf6sHamVFQn3lYilhZjA8Sj+MDdGnqwcFCm8CB7E71R6Ld Ae/JREYxZ9jQOmfmiI/AIWL7DhV7ak7uTrEv8hxNuWhHgdjywOT2BPA7Wy8omh9w EbjB8+oH7POxfg68wzyd9jzxapWqVRYMqWQqCXT6ltMRJcJ+Dn1FgutygXbWBWKM WogseqQzmRPTLKz4Wapg23Po -----END CERTIFICATE-----Generated at Wed May 13 05:10:07 2026 by rpki-client