$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: ad8Dt3nGkqxP1GuBL+ov6Nl+DW9jqnp8oc4i+eyNeZs= Subject key identifier: 94:8B:CA:14:8D:88:22:04:ED:E9:26:E6:51:B7:37:64:50:15:7D:93 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 11E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 11DA Signing time: Tue 12 May 2026 17:11:02 +0000 Manifest this update: Tue 12 May 2026 17:11:01 +0000 Manifest next update: Tue 19 May 2026 17:11:01 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: RwE3yQm2mVB40ekGItElC0MeSYZ78uLTp4doIEJTFjs=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4581 (0x11e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: May 12 17:11:01 2026 GMT Not After : May 19 17:11:01 2026 GMT Subject: CN=6a035f25-bcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:73:69:83:8d:90:38:95:4a:c4:a7:d0:e8: 12:d8:b8:85:b8:cb:39:ae:ff:a2:00:af:2f:45:e0: 75:fd:0d:56:8d:18:4f:5f:f4:c0:c3:aa:83:26:a0: 1f:70:de:a1:36:a1:26:9f:f9:d7:80:32:69:4d:a2: cf:22:f4:c5:fd:44:c3:01:57:23:4d:1e:ab:fc:19: a5:24:27:84:d1:11:1d:9c:b4:da:29:a4:1b:15:62: 22:70:92:ca:43:13:82:24:14:a0:b9:3d:df:0b:be: 8f:ef:1f:3d:dc:2a:5e:4a:83:3c:bb:90:e8:0a:10: ee:e6:41:d0:a1:40:8c:f4:68:5d:cf:1d:4f:76:d3: ad:b7:10:7a:36:37:9d:17:ac:3a:f3:ed:c5:99:8a: 1a:d3:33:eb:08:16:43:44:17:94:72:6f:75:70:a0: 6e:dc:33:8a:82:5a:1d:71:52:84:b8:75:a1:14:11: 5c:1d:28:b1:8c:d9:b3:53:a4:1a:cc:42:8a:a4:0d: 5c:7f:52:c8:57:75:f0:a8:4c:32:16:2b:95:6b:4e: b4:5d:ab:81:8b:c6:64:af:bd:49:46:dc:6d:58:74: c1:cd:74:09:85:87:ca:e3:99:4f:57:96:5c:25:ad: b7:c6:3f:26:eb:b2:12:3a:02:90:9c:96:51:0d:fd: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8B:CA:14:8D:88:22:04:ED:E9:26:E6:51:B7:37:64:50:15:7D:93 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:42:45:05:89:82:ce:63:01:a3:89:d5:b7:44:6a:0c:19:80: 62:62:e1:0d:60:9b:76:58:8a:52:a4:76:72:d9:6c:5f:1c:3e: 3a:e6:44:18:f2:a8:03:5b:f6:11:46:f4:77:2f:d7:ac:c6:30: 1d:c6:2c:fa:3d:a1:24:0f:9c:43:d7:77:ed:0d:bf:5f:67:85: d9:4f:e8:38:6c:84:0e:d5:3d:72:81:48:af:28:6d:91:aa:3e: 71:fb:15:b2:92:38:8b:94:e1:3a:c0:d6:2d:1b:d5:6e:44:f4: df:4f:ed:2a:d6:d7:89:70:f7:cc:dd:9c:73:6e:dd:c9:e6:dc: 21:19:76:e1:66:4a:4c:9d:11:95:6d:a6:07:d7:e8:18:40:4a: 2d:fd:46:1b:31:41:ae:1d:64:43:81:ae:2a:37:84:12:5f:7e: 22:5b:44:1c:87:53:09:41:2c:10:67:03:81:a6:74:e3:5d:0e: 2e:f6:53:cf:f5:53:1b:cf:f0:6b:e2:33:be:42:cb:ca:53:86: 45:8d:23:ff:6a:2c:e8:13:73:f9:81:69:18:73:60:fd:37:99: 76:a9:29:bf:9d:9c:36:17:c0:02:e0:a9:40:90:01:b9:bd:f3: d3:76:24:12:c6:d3:b6:7f:79:49:da:40:92:b4:6c:c6:08:6d: b9:c8:33:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjYwNTEyMTcxMTAxWhcNMjYwNTE5MTcxMTAxWjAYMRYwFAYD VQQDEw02YTAzNWYyNS1iY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHtzaYONkDiVSsSn0OgS2LiFuMs5rv+iAK8vReB1/Q1WjRhPX/TAw6qDJqAf cN6hNqEmn/nXgDJpTaLPIvTF/UTDAVcjTR6r/BmlJCeE0REdnLTaKaQbFWIicJLK QxOCJBSguT3fC76P7x893CpeSoM8u5DoChDu5kHQoUCM9Ghdzx1PdtOttxB6Njed F6w68+3FmYoa0zPrCBZDRBeUcm91cKBu3DOKglodcVKEuHWhFBFcHSixjNmzU6Qa zEKKpA1cf1LIV3XwqEwyFiuVa060XauBi8Zkr71JRtxtWHTBzXQJhYfK45lPV5Zc Ja23xj8m67ISOgKQnJZRDf2VtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSLyhSN iCIE7ekm5lG3N2RQFX2TMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvUJFBYmCzmMBo4nVt0RqDBmAYmLhDWCbdliKUqR2ctlsXxw+OuZEGPKoA1v2 EUb0dy/XrMYwHcYs+j2hJA+cQ9d37Q2/X2eF2U/oOGyEDtU9coFIryhtkao+cfsV spI4i5ThOsDWLRvVbkT030/tKtbXiXD3zN2cc27dyebcIRl24WZKTJ0RlW2mB9fo GEBKLf1GGzFBrh1kQ4GuKjeEEl9+IltEHIdTCUEsEGcDgaZ0410OLvZTz/VTG8/w a+IzvkLLylOGRY0j/2os6BNz+YFpGHNg/TeZdqkpv52cNhfAAuCpQJABub3z03Yk EsbTtn95SdpAkrRsxghtucgzhA== -----END CERTIFICATE-----Generated at Wed May 13 02:21:11 2026 by rpki-client