$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: LPmfBh1FYRki5XEA2vi6bCglYZA8phbYTajRyOFm5Ng= Subject key identifier: A4:45:AE:5E:61:8B:D3:60:6C:12:0B:9D:DC:B0:AE:A4:FB:46:D9:4E Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 0855 Signing time: Tue 12 May 2026 20:52:48 +0000 Manifest this update: Tue 12 May 2026 20:52:47 +0000 Manifest next update: Tue 19 May 2026 20:52:47 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: z4ZORhwtrvVPkH2JQhyDZiz+T+Wo2M5x5+WF2fqblrE=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 7pu3YPOy/Iyi+5lsIR5w0HcGr9ERc7QOQEXQx+NBL5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: May 12 20:52:47 2026 GMT Not After : May 19 20:52:47 2026 GMT Subject: CN=6a039320-4d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:eb:ee:8b:cf:56:fb:2c:5d:50:69:32:5d: eb:e1:c2:49:f3:bf:e3:33:39:cf:15:5d:1a:be:25: 45:6d:fb:d8:e6:2b:f6:1d:3f:de:1e:80:01:25:34: 5d:53:02:8c:d4:64:eb:ac:c4:3d:b9:ef:2a:c0:ea: ba:0e:c9:88:c7:ab:b3:68:e1:64:50:bf:38:78:77: ad:d9:4e:68:29:70:81:0c:c5:90:3a:6f:b4:55:f4: 12:c9:be:2e:de:12:3f:3f:2e:b0:fd:79:ea:f3:e7: 88:0c:51:a2:44:b4:8f:23:1f:bd:da:7a:6a:cd:b8: f0:08:a2:c2:ee:55:cc:41:a3:b2:60:ee:b7:c0:11: b9:6d:f9:28:22:0d:1d:3e:51:80:7f:4e:3b:3c:44: c4:08:cf:58:24:d9:eb:71:ad:38:34:ad:af:29:29: 08:e6:10:cd:10:b1:c8:73:4c:ca:db:23:f6:67:98: f6:3b:2b:e2:6a:3d:a5:53:23:32:0a:bb:b9:7d:56: b1:1e:52:24:ea:a9:36:4d:bf:ff:1c:13:a1:81:cd: 5f:7c:cf:06:c8:d7:44:64:37:2b:26:6a:da:17:9d: 83:f6:6c:50:4e:b7:20:9d:0c:0d:1b:09:b9:83:f6: 3c:5e:1a:91:08:6e:26:b3:3e:02:1e:33:e6:0f:15: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:45:AE:5E:61:8B:D3:60:6C:12:0B:9D:DC:B0:AE:A4:FB:46:D9:4E X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fd:fe:65:1b:2c:d0:d1:7c:79:e6:90:53:ce:f6:56:78:19: 21:82:32:84:98:cf:88:cc:95:6b:30:10:4a:16:c1:47:da:c6: 2b:bb:e0:01:ea:59:73:fe:46:7c:a7:50:fe:36:32:0d:dc:31: 4b:d7:71:72:be:8f:8f:c3:36:75:ea:b0:5b:c8:5b:99:d4:d9: 76:41:2f:8a:0e:20:53:cd:b7:32:a8:e3:d9:48:1f:cc:33:f4: 6c:71:b4:a1:0f:ac:ef:f7:78:f0:ee:69:1e:37:3b:36:05:38: 1d:92:a2:65:fe:3f:17:2d:60:30:54:d4:2f:bd:4c:0d:d1:f5: ea:21:97:2e:e5:27:f6:2e:09:92:a3:85:f8:a6:ae:c6:b5:db: 26:db:e8:64:38:94:f3:df:2a:00:d2:f1:f5:f0:5b:b3:41:d1: fb:45:5a:c1:e1:18:b4:50:24:c0:46:78:0a:a3:66:10:7f:0a: 96:10:5a:a9:cd:9a:c2:3d:5b:57:54:2b:65:da:40:19:e9:51: 21:10:aa:99:62:3c:27:ee:2b:0a:2f:26:12:9e:d9:7d:49:e3: ca:21:d1:a8:9d:5f:5b:62:7c:cb:fa:f6:fe:11:2b:6a:48:8f: a5:88:20:19:ef:65:cf:64:d5:2f:f7:be:bb:2b:5c:dd:8a:b3: 35:3c:a9:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjYwNTEyMjA1MjQ3WhcNMjYwNTE5MjA1MjQ3WjAYMRYwFAYD VQQDEw02YTAzOTMyMC00ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMvr7ovPVvssXVBpMl3r4cJJ87/jMznPFV0aviVFbfvY5iv2HT/eHoABJTRd UwKM1GTrrMQ9ue8qwOq6DsmIx6uzaOFkUL84eHet2U5oKXCBDMWQOm+0VfQSyb4u 3hI/Py6w/Xnq8+eIDFGiRLSPIx+92npqzbjwCKLC7lXMQaOyYO63wBG5bfkoIg0d PlGAf047PETECM9YJNnrca04NK2vKSkI5hDNELHIc0zK2yP2Z5j2Oyviaj2lUyMy Cru5fVaxHlIk6qk2Tb//HBOhgc1ffM8GyNdEZDcrJmraF52D9mxQTrcgnQwNGwm5 g/Y8XhqRCG4msz4CHjPmDxUEtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRFrl5h i9NgbBILndywrqT7RtlOMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/3+ZRss0NF8eeaQU872VngZIYIyhJjPiMyVazAQShbBR9rGK7vgAepZc/5G fKdQ/jYyDdwxS9dxcr6Pj8M2deqwW8hbmdTZdkEvig4gU823Mqjj2UgfzDP0bHG0 oQ+s7/d48O5pHjc7NgU4HZKiZf4/Fy1gMFTUL71MDdH16iGXLuUn9i4JkqOF+Kau xrXbJtvoZDiU898qANLx9fBbs0HR+0VaweEYtFAkwEZ4CqNmEH8KlhBaqc2awj1b V1QrZdpAGelRIRCqmWI8J+4rCi8mEp7ZfUnjyiHRqJ1fW2J8y/r2/hErakiPpYgg Ge9lz2TVL/e+uytc3YqzNTyp7Q== -----END CERTIFICATE-----Generated at Wed May 13 10:45:35 2026 by rpki-client