$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft File: xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json) Hash identifier: CUtRD+eNr46kOTrxk45OPTIn0+8ZKYvQPaHZnznnePE= Subject key identifier: EA:1E:6E:C1:2E:9F:F7:05:3D:D0:BF:93:41:53:E4:4E:69:B9:3F:D7 Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft Manifest number: 0470 Signing time: Wed 13 May 2026 00:13:05 +0000 Manifest this update: Wed 13 May 2026 00:13:05 +0000 Manifest next update: Wed 20 May 2026 00:13:05 +0000 Files and hashes: 1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: fqRCDOcrKw+E8c5XnEBhP1BukpGCidPSFDUL66o/b1c=) 2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: /DFzhLMwMBBos/KXMPwemxU7fne2fqyoQbKIJm0faRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD Validity Not Before: May 13 00:13:05 2026 GMT Not After : May 20 00:13:05 2026 GMT Subject: CN=6a03c211-c097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:f1:a7:49:f8:5d:b9:0e:1e:fa:06:a6:34: ce:34:b2:b4:6e:c2:af:db:41:cb:7e:d7:42:6c:e6: 54:2d:a7:1f:ab:39:53:8a:99:1e:cf:ce:0a:c9:3f: 51:79:11:46:5f:24:ac:f0:ce:43:4b:4b:31:3a:9a: bb:66:25:23:d4:dc:18:dc:f5:60:93:35:0c:5a:2c: 10:39:d7:83:e2:c8:16:7d:d9:19:22:8a:d7:d5:5d: 09:cd:3a:bf:06:a5:95:a5:52:fa:dd:11:12:42:96: 4e:4f:fd:d2:25:54:e4:72:97:e3:91:40:d1:e1:f4: ab:01:66:bc:de:a7:14:4c:7a:f7:de:64:79:f5:d5: 05:af:fe:a6:85:04:08:02:7f:3b:05:11:79:9f:f3: f3:ce:61:ed:11:74:64:a1:fe:bf:1a:af:c2:c8:c0: 87:07:30:c5:4b:ac:68:3a:dd:fa:99:78:9b:86:ac: 22:22:b7:50:33:bd:07:7a:be:62:8e:91:ea:29:bf: e4:ad:5b:ea:9d:75:d7:ff:7c:10:d5:c3:4c:34:15: a1:03:bc:76:c7:5b:18:c5:bb:45:c0:d3:d9:0f:21: 5d:f7:91:3b:5a:f3:98:07:55:97:ef:6d:68:18:34: 30:7a:1b:93:b8:22:47:d0:37:2a:81:36:de:84:db: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1E:6E:C1:2E:9F:F7:05:3D:D0:BF:93:41:53:E4:4E:69:B9:3F:D7 X509v3 Authority Key Identifier: keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f4:d0:08:f9:0c:ae:d1:0e:0f:ea:bd:9b:33:bc:5c:13:66: 49:09:19:50:47:ad:61:57:ff:83:88:74:3a:de:b2:30:b8:ca: 64:bd:32:d8:1d:8b:fc:99:bc:df:cb:ec:76:69:74:83:d0:4d: a2:04:b3:98:42:4f:22:3d:a6:7a:55:1b:78:fb:ad:2c:bd:f3: 61:94:6b:3f:90:9c:f4:8a:16:51:23:33:1d:5c:5a:15:ff:4b: 8e:26:f5:3f:11:36:57:d3:7d:ab:5a:7c:0a:c7:4e:c1:48:67: 88:c3:f9:80:45:e7:2e:f3:a7:9a:9b:74:df:d6:e5:80:1d:4f: 84:72:0b:96:f4:a6:6a:ed:12:7c:9a:07:b9:90:f6:d3:c3:a2: 89:63:ce:87:88:be:75:1f:5e:e5:31:ed:d2:8b:b1:79:a7:65: 9d:d9:ff:7f:20:7b:da:96:28:94:c4:fa:6e:81:38:13:87:d2: ba:ae:af:0e:d3:94:9d:36:8c:59:27:c3:03:43:36:25:74:aa: eb:45:d1:e4:0c:f3:11:48:82:3a:6e:89:3b:6f:80:ea:3b:d3: 31:f4:10:00:83:4b:db:f1:d4:a8:08:c2:25:a7:d7:81:5c:73: 02:37:1d:4e:64:80:ac:98:5f:27:82:f7:67:da:5f:ea:3d:02: cd:34:e5:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDQTIxMTAvBgNVBAUTKEM0OEQ0NEYxMTFEOUY0REM4RTNFNjRBRDdGOTY0ODY0 NjFDQjlGQkQwHhcNMjYwNTEzMDAxMzA1WhcNMjYwNTIwMDAxMzA1WjAYMRYwFAYD VQQDEw02YTAzYzIxMS1jMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g7xp0n4XbkOHvoGpjTONLK0bsKv20HLftdCbOZULacfqzlTipkez84KyT9R eRFGXySs8M5DS0sxOpq7ZiUj1NwY3PVgkzUMWiwQOdeD4sgWfdkZIorX1V0JzTq/ BqWVpVL63RESQpZOT/3SJVTkcpfjkUDR4fSrAWa83qcUTHr33mR59dUFr/6mhQQI An87BRF5n/PzzmHtEXRkof6/Gq/CyMCHBzDFS6xoOt36mXibhqwiIrdQM70Her5i jpHqKb/krVvqnXXX/3wQ1cNMNBWhA7x2x1sYxbtFwNPZDyFd95E7WvOYB1WX721o GDQwehuTuCJH0DcqgTbehNuEZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoebsEu n/cFPdC/k0FT5E5puT/XMB8GA1UdIwQYMBaAFMSNRPER2fTcjj5krX+WSGRhy5+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUNBMi83OTM2NUI4RThG MDcxMUVDOUVCMjMxNzBDNEY5QUUwMi94STFFOFJIWjlOeU9QbVN0ZjVaSVpHSExu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJMUU4UkhaOU55T1BtU3RmNVpJWkdITG43MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUNBMi83OTM2NUI4RThGMDcxMUVDOUVCMjMxNzBDNEY5QUUwMi94STFFOFJIWjlO eU9QbVN0ZjVaSVpHSExuNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMfTQCPkMrtEOD+q9mzO8XBNmSQkZUEetYVf/g4h0Ot6yMLjKZL0y2B2L/Jm8 38vsdml0g9BNogSzmEJPIj2melUbePutLL3zYZRrP5Cc9IoWUSMzHVxaFf9Ljib1 PxE2V9N9q1p8CsdOwUhniMP5gEXnLvOnmpt039blgB1PhHILlvSmau0SfJoHuZD2 08OiiWPOh4i+dR9e5THt0ouxeadlndn/fyB72pYolMT6boE4E4fSuq6vDtOUnTaM WSfDA0M2JXSq60XR5AzzEUiCOm6JO2+A6jvTMfQQAINL2/HUqAjCJafXgVxzAjcd TmSArJhfJ4L3Z9pf6j0CzTTlMw== -----END CERTIFICATE-----Generated at Wed May 13 11:44:36 2026 by rpki-client