$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft File: pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json) Hash identifier: 5H5leJRXvpGqRleSRpN7X3KMevtYG5uUHPzIPavdGsY= Subject key identifier: 79:18:3E:82:B0:C3:48:92:C0:CE:4E:CC:2F:B1:70:1C:61:5F:C2:8E Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF Certificate issuer: /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft Manifest number: 1D Signing time: Mon 11 May 2026 09:05:57 +0000 Manifest this update: Mon 11 May 2026 09:05:57 +0000 Manifest next update: Mon 18 May 2026 09:05:57 +0000 Files and hashes: 1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: g1UHBhlCa72oNb5P0VcQjKq4qlBp3pxNBv3tL585NtE=) 2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF Validity Not Before: May 11 09:05:57 2026 GMT Not After : May 18 09:05:57 2026 GMT Subject: CN=6a019bf5-51e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:fa:9a:1a:65:6d:40:28:c2:aa:a2:74:e8: 18:53:9a:04:17:72:87:7c:36:ea:09:2a:1b:63:2d: b0:39:28:81:b0:56:db:e4:ec:3d:42:6d:b0:4d:89: c0:00:d0:16:ed:72:48:b2:8f:17:b1:cc:a2:07:b7: 8c:43:bc:2e:5a:18:9a:a3:ca:db:18:14:49:6e:fb: 61:6f:6f:82:35:bb:1d:10:34:20:fe:b6:76:cc:e1: 91:72:7c:5a:f8:fa:c5:39:cc:f7:d6:34:12:ab:31: 69:58:a6:8b:3d:ea:e3:98:0c:63:9c:95:fc:79:4c: 27:10:1f:a9:51:08:a1:33:f5:17:4a:08:14:c3:6e: 08:4f:00:e0:4b:34:7f:4b:72:a0:d7:75:2f:53:b0: bb:ea:61:1c:31:e3:94:60:d9:1c:77:22:f7:f2:10: 88:9c:32:54:46:ca:61:6b:86:0a:b4:aa:bd:bc:fe: 21:f3:59:a0:a1:44:9a:4c:cd:97:73:fe:b2:43:8e: 3d:31:56:77:7d:c1:c8:f9:ea:f9:db:4f:ca:c7:66: c4:dc:d4:71:54:b4:87:4e:40:87:40:15:e4:6a:02: dc:11:25:a0:bd:1e:4c:4e:95:ef:95:36:65:2e:00: a8:63:a8:bf:e5:15:ee:a0:bd:b7:32:73:79:b9:98: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:18:3E:82:B0:C3:48:92:C0:CE:4E:CC:2F:B1:70:1C:61:5F:C2:8E X509v3 Authority Key Identifier: keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:6a:01:14:53:82:e1:62:40:3e:6a:e0:4e:29:9d:bb:d3: 37:c7:61:b2:d4:0a:b6:25:90:0c:b9:43:83:a8:96:42:ed:c0: 89:b7:22:4b:54:7d:d7:85:60:35:7b:d4:4b:85:fa:c7:e7:bf: 92:bf:f0:25:00:56:73:d7:ee:c2:e8:49:ad:57:4f:29:d9:d7: 9c:2f:48:c0:96:7d:0d:23:5d:a2:53:57:f1:81:45:cf:17:f9: 06:26:b5:9c:e7:d6:91:58:a4:da:83:a7:15:f8:47:cd:14:6b: 3f:b7:f0:57:bc:70:69:3e:c9:1a:6b:b0:6f:cb:bc:91:89:06: 5f:cb:74:f3:23:39:86:49:64:95:66:e4:51:60:79:72:af:b3: 6b:fa:be:b5:43:51:3f:82:05:db:d0:63:65:59:04:e6:33:a2: 85:2d:e4:9b:2e:46:64:83:b3:7e:d1:5b:d0:3c:8e:b1:8c:6f: c1:5d:8e:cf:74:58:c3:6c:fa:93:06:54:0e:fe:4e:3b:c5:5c: 3f:c3:d6:bd:61:b2:21:4c:dc:87:30:f2:7c:38:2c:4e:83:0e: 25:d6:f5:c9:26:d3:d8:a6:59:35:ea:a8:09:20:88:68:0e:c0: f5:ea:b3:3a:3f:8b:30:37:b2:c2:3c:52:63:61:03:1d:e4:19: cb:cb:44:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NENCRTExMC8GA1UEBRMoQTYzMzNFODUxNjE5OTdCNzMwQjQ2ODdGMDVFOTY2MTkz RjZCQTFBRjAeFw0yNjA1MTEwOTA1NTdaFw0yNjA1MTgwOTA1NTdaMBgxFjAUBgNV BAMTDTZhMDE5YmY1LTUxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRdvqaGmVtQCjCqqJ06BhTmgQXcod8NuoJKhtjLbA5KIGwVtvk7D1CbbBNicAA 0BbtckiyjxexzKIHt4xDvC5aGJqjytsYFElu+2Fvb4I1ux0QNCD+tnbM4ZFyfFr4 +sU5zPfWNBKrMWlYpos96uOYDGOclfx5TCcQH6lRCKEz9RdKCBTDbghPAOBLNH9L cqDXdS9TsLvqYRwx45Rg2Rx3IvfyEIicMlRGymFrhgq0qr28/iHzWaChRJpMzZdz /rJDjj0xVnd9wcj56vnbT8rHZsTc1HFUtIdOQIdAFeRqAtwRJaC9HkxOle+VNmUu AKhjqL/lFe6gvbcyc3m5mPOnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeRg+grDD SJLAzk7ML7FwHGFfwo4wHwYDVR0jBBgwFoAUpjM+hRYZl7cwtGh/BelmGT9roa8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0Q0JFL0IzQkYzNTQyMjQ1 RDExRjFBQjEyNUY5QUM0ODMzNzczL3BqTS1oUllabDdjd3RHaF9CZWxtR1Q5cm9h OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGpNLWhSWVpsN2N3dEdoX0JlbG1HVDlyb2E4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 Q0JFL0IzQkYzNTQyMjQ1RDExRjFBQjEyNUY5QUM0ODMzNzczL3BqTS1oUllabDdj d3RHaF9CZWxtR1Q5cm9hOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxJGoBFFOC4WJAPmrgTimdu9M3x2Gy1Aq2JZAMuUODqJZC7cCJtyJLVH3XhWA1 e9RLhfrH57+Sv/AlAFZz1+7C6EmtV08p2decL0jAln0NI12iU1fxgUXPF/kGJrWc 59aRWKTag6cV+EfNFGs/t/BXvHBpPskaa7Bvy7yRiQZfy3TzIzmGSWSVZuRRYHly r7Nr+r61Q1E/ggXb0GNlWQTmM6KFLeSbLkZkg7N+0VvQPI6xjG/BXY7PdFjDbPqT BlQO/k47xVw/w9a9YbIhTNyHMPJ8OCxOgw4l1vXJJtPYplk16qgJIIhoDsD16rM6 P4swN7LCPFJjYQMd5BnLy0RS -----END CERTIFICATE-----Generated at Wed May 13 04:13:26 2026 by rpki-client