$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: V2qHMWzySg7etfRtMIUSbFiIX9vtRpdAu3QJ4Zj+i/U= Subject key identifier: 21:F0:6F:70:4D:37:05:7A:D8:EC:65:5C:8F:CC:59:05:D2:13:AB:E1 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 09DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 09BE Signing time: Tue 12 May 2026 19:59:29 +0000 Manifest this update: Tue 12 May 2026 19:59:28 +0000 Manifest next update: Tue 19 May 2026 19:59:28 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: RXMJRovciP1M/rcKL1ZYR/y9zTXlLZJQ5KRAu/FWYVE=) 2: 1B2BB85E3F1111F1B02AA5A9CD833773.roa (hash: Ty6kAwFYmOBnFBYpoJLfmsxaOgDw2oRipWgqmMo4aic=) 3: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=) 4: F663B6DE3F1011F1A8E91BA6CD833773.roa (hash: IZD04qWcSQMB/mUWA7EYMNUhoPSV5yvjCVWYX5OKWc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2522 (0x9da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: May 12 19:59:28 2026 GMT Not After : May 19 19:59:28 2026 GMT Subject: CN=6a0386a1-7915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:1e:40:fa:e1:2c:bd:29:a8:f4:c2:7a:9d: f3:58:37:40:78:ec:d8:2b:16:0b:be:8e:9c:42:cd: 2e:a9:b6:8b:93:d4:be:d6:e3:ad:0b:80:35:a8:04: 15:5a:ed:15:18:ff:f2:15:62:95:e5:db:c6:ed:42: 32:fc:dc:78:b4:c6:b2:dd:96:52:f7:c6:c7:9c:f8: 6d:19:84:46:9b:fb:69:e2:e0:42:f7:e2:8f:02:35: 91:6e:07:09:51:0b:30:11:1a:b9:f3:81:c3:4e:1b: 3d:aa:43:2f:31:b5:75:5d:ee:77:4c:c2:cb:01:f3: 8e:de:1c:80:f7:f1:5d:59:dd:b5:e4:59:76:40:3c: 96:d0:4f:8a:c0:ef:30:c0:c4:24:52:72:5f:e3:62: fe:73:2c:5a:32:4b:ae:35:52:1a:10:ae:21:d4:92: 2f:24:eb:4c:4d:12:f5:99:f1:9f:2c:28:ae:c1:56: 4e:af:8c:31:f1:b9:62:26:0c:22:c2:b8:94:4f:76: cb:a5:79:eb:0d:58:32:79:d2:fd:e5:85:fb:5c:d5: f4:cf:b1:2b:ea:ed:bc:2b:89:0f:b2:fb:6b:38:70: 53:7b:22:12:18:a8:1e:5c:48:7e:1d:4a:70:e9:49: 4c:ee:83:c2:d9:1f:bd:c0:35:cc:c6:dc:0d:6c:2b: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:6F:70:4D:37:05:7A:D8:EC:65:5C:8F:CC:59:05:D2:13:AB:E1 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9a:68:e4:9f:18:00:d2:f2:c2:63:ad:f0:b0:4b:4b:2c:73: 78:64:87:64:35:70:37:b4:4f:2d:eb:0b:04:5c:fc:04:98:92: c1:68:c9:1e:f8:9a:85:b4:55:e0:97:ba:fa:6b:28:be:42:05: 3f:1a:6a:e8:06:bd:dd:9d:3c:7d:d0:c2:9b:03:75:e3:07:4a: 99:ff:59:3a:ba:d7:de:5c:63:b2:53:98:f0:55:ef:a0:35:2d: 0f:2a:17:57:3c:d5:9e:f5:83:55:f7:41:75:0a:16:7d:0d:7c: fa:6c:a7:21:e8:33:1e:0d:c0:03:55:81:fe:c9:29:36:07:5d: f2:75:77:0b:26:f5:bc:9b:cf:49:f0:c8:cd:68:2a:8a:10:18: 27:5e:d9:a5:5b:c6:8b:66:08:2b:95:13:dc:2d:bf:00:d4:ad: ef:3f:b2:8b:c0:ee:bb:52:96:80:0b:b9:a8:9c:c9:c1:2f:01: ba:08:d4:58:8a:f5:92:13:f9:d6:03:e5:95:83:6c:b0:af:9a: e8:35:f4:85:03:35:e8:a3:9e:f2:06:25:0e:66:bc:c4:5e:9d: 44:5a:5c:e0:84:e7:a9:ab:4f:65:b5:b5:c7:93:b2:ae:69:c1: d0:44:c4:e9:09:68:fc:db:10:29:2f:e1:64:33:32:ed:b7:e3: 92:f5:5a:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjYwNTEyMTk1OTI4WhcNMjYwNTE5MTk1OTI4WjAYMRYwFAYD VQQDEw02YTAzODZhMS03OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwAeQPrhLL0pqPTCep3zWDdAeOzYKxYLvo6cQs0uqbaLk9S+1uOtC4A1qAQV Wu0VGP/yFWKV5dvG7UIy/Nx4tMay3ZZS98bHnPhtGYRGm/tp4uBC9+KPAjWRbgcJ UQswERq584HDThs9qkMvMbV1Xe53TMLLAfOO3hyA9/FdWd215Fl2QDyW0E+KwO8w wMQkUnJf42L+cyxaMkuuNVIaEK4h1JIvJOtMTRL1mfGfLCiuwVZOr4wx8bliJgwi wriUT3bLpXnrDVgyedL95YX7XNX0z7Er6u28K4kPsvtrOHBTeyISGKgeXEh+HUpw 6UlM7oPC2R+9wDXMxtwNbCvKCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHwb3BN NwV62OxlXI/MWQXSE6vhMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaJpo5J8YANLywmOt8LBLSyxzeGSHZDVwN7RPLesLBFz8BJiSwWjJHviahbRV 4Je6+msovkIFPxpq6Aa93Z08fdDCmwN14wdKmf9ZOrrX3lxjslOY8FXvoDUtDyoX VzzVnvWDVfdBdQoWfQ18+mynIegzHg3AA1WB/skpNgdd8nV3Cyb1vJvPSfDIzWgq ihAYJ17ZpVvGi2YIK5UT3C2/ANSt7z+yi8Duu1KWgAu5qJzJwS8BugjUWIr1khP5 1gPllYNssK+a6DX0hQM16KOe8gYlDma8xF6dRFpc4ITnqatPZbW1x5OyrmnB0ETE 6Qlo/NsQKS/hZDMy7bfjkvVagQ== -----END CERTIFICATE-----Generated at Wed May 13 11:18:13 2026 by rpki-client