$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: kkNFfknqwtyopxJ2RnphuK1AunSOc9snfLBEu1DU5bE= Subject key identifier: 32:78:B7:6A:6C:E7:21:74:BC:57:AB:51:28:28:FF:B9:24:BF:5F:F6 Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 0247 Signing time: Wed 13 May 2026 02:31:00 +0000 Manifest this update: Wed 13 May 2026 02:31:00 +0000 Manifest next update: Wed 20 May 2026 02:31:00 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: /De1jHx9QxUrI95hcdp2nj5FSBO+BFFDAEyte9+aAws=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: Jyx2g2LuWi9RChNnQzsKyfqbLFT8q1vzBpyZSYuRyps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: May 13 02:31:00 2026 GMT Not After : May 20 02:31:00 2026 GMT Subject: CN=6a03e264-456c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:e2:27:4e:37:56:68:d6:62:65:91:fe:2f: ba:c6:81:91:a1:02:6d:02:0f:f1:fa:54:7c:eb:83: 32:2a:55:56:be:67:56:b8:a7:fe:4e:93:82:e5:d9: 33:47:c5:fb:0f:7f:07:c5:f2:78:ad:7a:ff:e8:1e: 1e:ad:18:f4:6e:54:dd:1c:90:21:92:ce:0c:a0:c7: 88:b5:c6:d2:c5:55:c2:27:58:3d:46:65:73:8c:cb: 07:05:d5:b4:1d:d9:df:dd:37:be:4f:e2:80:5b:56: 98:e1:c4:51:f6:42:9a:76:66:6b:0f:af:7e:a7:ff: e6:9d:f1:0c:40:30:d8:3d:e3:f0:54:0c:ae:cf:46: 20:e6:b1:8c:50:22:11:04:c9:17:0a:9e:4c:60:70: 3a:14:a7:dc:3a:93:71:1f:62:63:67:a3:03:36:64: 63:28:11:8e:bc:73:31:5f:67:de:6b:f0:ed:b9:be: 8d:d3:58:d4:67:d4:84:89:b8:7c:a8:c7:b7:20:02: 7f:a6:8f:d2:fb:e0:7a:c1:86:13:06:35:14:f6:2d: 11:a0:96:ae:e7:90:02:b1:ea:55:ca:bd:9b:9a:6e: 18:86:ea:4c:65:a9:00:15:07:d8:fa:dd:dc:56:1b: 39:e5:58:82:5f:8d:4d:e2:e2:ef:03:e0:aa:8b:2c: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:B7:6A:6C:E7:21:74:BC:57:AB:51:28:28:FF:B9:24:BF:5F:F6 X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:73:36:33:3c:e4:f8:1f:70:39:8c:7c:81:83:94:9b:77:d9: 78:c8:d0:5f:ca:4c:c0:f5:eb:6b:3b:ed:db:8f:24:5b:84:3c: cd:b4:93:a0:0f:05:b1:32:2c:c0:78:e0:86:73:76:45:64:c9: 39:4c:2f:55:fd:8d:ca:2c:06:95:bb:93:c0:9b:59:34:6e:5a: f2:14:a1:ba:bf:f9:76:b0:f6:06:dd:f3:dd:33:af:97:2d:f9: e2:77:2f:30:63:52:e8:ca:ce:f3:21:5f:d1:00:37:76:a4:f0: 18:fb:bd:9f:ae:c6:83:66:96:99:d5:2d:b8:e4:c0:33:d1:72: bb:a8:c1:6e:51:b3:23:7f:6f:bc:60:3d:1d:14:7e:d5:f0:47: bf:c6:41:bf:de:b8:cf:e2:ab:ab:bb:00:4b:77:2e:9d:7e:e6: e2:76:e5:f0:32:2c:75:d7:4c:17:03:c4:85:ef:42:b2:0d:71: 5a:08:0e:67:d7:46:3e:a2:67:40:68:b0:8a:bc:09:72:ba:79: 2f:96:2d:15:cc:23:bd:6a:3d:93:a2:f3:08:fe:ff:c0:1d:7a: 91:66:ad:98:d8:45:e5:52:2f:7e:df:58:3b:49:31:c3:65:ad: 8f:21:27:49:fa:d3:51:3f:11:0a:0c:73:4f:b6:c2:c9:54:fe: 80:e2:4b:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjYwNTEzMDIzMTAwWhcNMjYwNTIwMDIzMTAwWjAYMRYwFAYD VQQDEw02YTAzZTI2NC00NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnviJ043VmjWYmWR/i+6xoGRoQJtAg/x+lR864MyKlVWvmdWuKf+TpOC5dkz R8X7D38HxfJ4rXr/6B4erRj0blTdHJAhks4MoMeItcbSxVXCJ1g9RmVzjMsHBdW0 Hdnf3Te+T+KAW1aY4cRR9kKadmZrD69+p//mnfEMQDDYPePwVAyuz0Yg5rGMUCIR BMkXCp5MYHA6FKfcOpNxH2JjZ6MDNmRjKBGOvHMxX2fea/Dtub6N01jUZ9SEibh8 qMe3IAJ/po/S++B6wYYTBjUU9i0RoJau55ACsepVyr2bmm4YhupMZakAFQfY+t3c Vhs55ViCX41N4uLvA+CqiyysaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJ4t2ps 5yF0vFerUSgo/7kkv1/2MB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlnM2Mzzk+B9wOYx8gYOUm3fZeMjQX8pMwPXrazvt248kW4Q8zbSToA8FsTIs wHjghnN2RWTJOUwvVf2NyiwGlbuTwJtZNG5a8hShur/5drD2Bt3z3TOvly354ncv MGNS6MrO8yFf0QA3dqTwGPu9n67Gg2aWmdUtuOTAM9Fyu6jBblGzI39vvGA9HRR+ 1fBHv8ZBv964z+Krq7sAS3cunX7m4nbl8DIsdddMFwPEhe9Csg1xWggOZ9dGPqJn QGiwirwJcrp5L5YtFcwjvWo9k6LzCP7/wB16kWatmNhF5VIvft9YO0kxw2WtjyEn SfrTUT8RCgxzT7bCyVT+gOJL9A== -----END CERTIFICATE-----Generated at Wed May 13 06:39:05 2026 by rpki-client