$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json) Hash identifier: g9L3C1a/IGnR3R9Jr98D9O9Reh5KiUwVasFHH0y1EHA= Subject key identifier: D2:B0:2E:C4:BC:96:D1:4B:E2:47:99:8B:16:F6:66:82:70:6D:28:E2 Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft Manifest number: 0145 Signing time: Wed 13 May 2026 05:27:47 +0000 Manifest this update: Wed 13 May 2026 05:27:46 +0000 Manifest next update: Wed 20 May 2026 05:27:46 +0000 Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: C4fQIEDLUSHPkI+CXlSJ/QMXNF1V0HGIRlI2ume/O6M=) 2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=) 3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: o9Xs3io38RTaw4LTZVDWVNHdH5+V8NMTsg37SGZ03EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Validity Not Before: May 13 05:27:46 2026 GMT Not After : May 20 05:27:46 2026 GMT Subject: CN=6a040bd3-6e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:30:94:ad:92:a5:e0:9b:a3:76:e8:13:73: 50:0c:b7:ff:3b:7c:d8:8f:f2:6b:9e:dc:ce:9f:3c: 58:98:c8:7d:2b:04:b4:d5:a0:86:b2:8d:0d:8a:ac: a9:eb:72:ec:d5:b2:25:55:f4:20:0d:db:3d:a8:bb: 22:c2:8b:00:cb:51:32:5e:55:6e:44:7e:88:68:4f: 5d:c6:3f:e9:91:50:40:bf:7d:df:4d:12:57:8a:6d: ac:da:b2:db:e4:56:35:33:5e:1f:90:bf:94:5a:60: ba:25:93:dc:b4:4c:ff:d6:a6:aa:5a:2e:5e:97:0a: 20:3f:54:b7:b7:64:cd:53:26:d1:49:3c:5e:ce:f8: 66:62:2e:63:11:e7:43:6d:d6:e5:57:29:e1:69:62: 77:ee:e3:1d:c6:14:36:f4:74:d3:fc:e1:38:21:c6: d4:ca:c0:4b:b9:e0:21:7d:d8:cd:58:6f:29:5f:a5: 80:c9:4b:8a:ea:b6:5b:f9:88:63:ad:2b:13:51:54: 2e:eb:77:46:e0:3b:1f:a1:79:5a:1b:8f:ab:d2:07: a6:6d:87:6e:28:ef:79:d9:40:4d:ff:3e:67:21:3c: 09:f0:72:b5:67:18:d6:44:1a:50:80:ec:53:b3:d4: b3:62:99:eb:32:0a:c2:5d:bd:7a:79:1b:d3:4b:b5: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B0:2E:C4:BC:96:D1:4B:E2:47:99:8B:16:F6:66:82:70:6D:28:E2 X509v3 Authority Key Identifier: keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4b:41:eb:6b:ea:5a:ba:66:6b:2d:25:ec:db:f4:6d:33:17: 75:b0:ac:59:7c:29:2a:6f:67:ce:38:f8:4b:b5:2e:54:c7:f1: db:12:fd:7b:32:be:81:f1:59:86:a3:2b:dc:45:bc:a5:a5:20: 7f:e2:0c:f7:48:af:22:a6:21:16:cb:a9:d2:f2:7a:97:8f:fe: 33:c5:0a:b0:99:08:db:33:7f:b4:a5:ca:7f:fd:b2:0b:5a:6b: 36:f4:f5:14:22:af:4b:f8:c9:02:f9:49:42:e8:b3:8a:8c:7f: 9f:cd:3c:6d:84:d1:a3:db:39:d5:3c:0b:2b:27:7b:2a:60:0b: e4:df:62:b0:ed:7e:8f:01:34:6a:d2:f7:78:98:6a:82:c5:4c: 95:5a:7f:11:cc:30:e3:77:3d:0d:2b:ea:3a:70:98:96:b4:bb: 67:ea:25:9c:05:2b:d3:df:bd:0a:34:e7:41:34:48:eb:05:9d: 7b:36:9f:db:9b:5f:c3:f1:55:de:00:a9:f4:7d:51:f2:ea:ee: 07:90:3b:c8:95:26:99:4a:26:a3:cc:7d:20:26:0e:28:cf:97: fd:3b:74:1d:47:65:e0:1f:f2:7e:05:d4:89:5d:7b:fe:ea:c2: 2e:4b:84:25:8b:f9:3a:5e:53:9d:5f:a6:8c:d2:d6:8c:75:06: b8:e9:f9:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3 MzM1RTRGNTkwHhcNMjYwNTEzMDUyNzQ2WhcNMjYwNTIwMDUyNzQ2WjAYMRYwFAYD VQQDEw02YTA0MGJkMy02ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rMwlK2SpeCbo3boE3NQDLf/O3zYj/JrntzOnzxYmMh9KwS01aCGso0Niqyp 63Ls1bIlVfQgDds9qLsiwosAy1EyXlVuRH6IaE9dxj/pkVBAv33fTRJXim2s2rLb 5FY1M14fkL+UWmC6JZPctEz/1qaqWi5elwogP1S3t2TNUybRSTxezvhmYi5jEedD bdblVynhaWJ37uMdxhQ29HTT/OE4IcbUysBLueAhfdjNWG8pX6WAyUuK6rZb+Yhj rSsTUVQu63dG4DsfoXlaG4+r0gembYduKO952UBN/z5nITwJ8HK1ZxjWRBpQgOxT s9SzYpnrMgrCXb16eRvTS7XWPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKwLsS8 ltFL4keZixb2ZoJwbSjiMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54 SHhsRWFPcUJWRTF6TmVUMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0tB62vqWrpmay0l7Nv0bTMXdbCsWXwpKm9nzjj4S7UuVMfx2xL9ezK+gfFZ hqMr3EW8paUgf+IM90ivIqYhFsup0vJ6l4/+M8UKsJkI2zN/tKXKf/2yC1prNvT1 FCKvS/jJAvlJQuiziox/n808bYTRo9s51TwLKyd7KmAL5N9isO1+jwE0atL3eJhq gsVMlVp/Ecww43c9DSvqOnCYlrS7Z+olnAUr09+9CjTnQTRI6wWdezaf25tfw/FV 3gCp9H1R8uruB5A7yJUmmUomo8x9ICYOKM+X/Tt0HUdl4B/yfgXUiV17/urCLkuE JYv5Ol5TnV+mjNLWjHUGuOn5fw== -----END CERTIFICATE-----Generated at Wed May 13 09:22:10 2026 by rpki-client