$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: DGXo5Vesf/+HzGh1oACDzjJHrd2PGTiUMq4RkmC6B/4= Subject key identifier: E7:2C:4E:F0:66:DD:94:29:16:1B:15:83:F2:7D:0C:E4:1D:00:3A:DF Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 0131 Signing time: Wed 13 May 2026 05:36:41 +0000 Manifest this update: Wed 13 May 2026 05:36:40 +0000 Manifest next update: Wed 20 May 2026 05:36:40 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: OhTOaI8ueVlQXsNH0Y3T3kkBxdbmpT8we4urwNvi3HA=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: May 13 05:36:40 2026 GMT Not After : May 20 05:36:40 2026 GMT Subject: CN=6a040de9-6ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:ff:b7:70:bb:fd:36:1c:54:fd:97:cc:b2: 4c:6c:df:e2:43:ce:2c:5b:98:c2:6a:a8:98:ee:ca: 1b:ef:0e:d6:2d:23:af:d3:44:95:81:d0:e7:ef:27: 7f:18:cf:a2:8a:ae:00:2a:e4:07:a1:6f:d6:95:b3: 1d:0d:dd:27:70:b0:2a:02:3e:72:61:78:6a:73:31: 7c:75:4d:b6:e6:72:e0:22:a8:1e:e8:c9:dc:9e:e9: 6c:7b:81:f7:df:c0:25:0b:77:57:30:30:16:ec:ed: 14:fe:12:35:1f:b1:8f:d6:f1:a1:4a:88:30:22:fc: 1d:18:17:cf:02:10:7f:64:6b:4d:ab:4c:d2:85:e3: d1:f5:e6:58:d3:29:c4:da:87:43:2e:44:65:79:e9: 63:1b:d6:21:ca:5a:c1:55:01:85:6b:31:79:5c:4a: b0:4d:20:46:c7:89:45:ba:51:3a:1b:9f:6c:63:4b: 0d:9c:58:a9:0a:2e:ed:b5:a6:21:9c:49:37:fa:60: c0:6f:12:92:ec:59:e0:32:78:74:64:50:68:1b:fc: 81:f9:4f:35:82:cc:4f:cc:b4:43:c4:75:a7:0a:b5: 79:28:8a:c2:11:8e:5a:80:ed:ed:d3:31:32:ed:0f: c6:ac:a7:d4:59:c1:21:16:5e:46:6e:a5:36:a1:d9: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2C:4E:F0:66:DD:94:29:16:1B:15:83:F2:7D:0C:E4:1D:00:3A:DF X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:48:64:e0:a2:4f:40:df:56:cf:3a:e7:ca:00:1d:47:4a:3c: aa:91:dc:f9:38:9c:d1:27:c3:50:3f:32:81:43:e1:4d:04:a4: 44:98:66:c4:3c:eb:2e:32:fa:72:b7:62:3e:d4:72:d6:df:86: ab:8c:aa:1c:ec:b9:24:04:29:ef:61:8f:6f:df:79:2f:79:67: 2a:b5:c0:ca:3f:2a:65:d7:a2:86:7e:c8:9c:32:4d:76:80:9e: da:b4:65:13:05:4b:69:20:df:30:7b:ed:e0:84:a8:91:f9:9e: b3:17:16:68:73:63:31:4e:0e:34:cc:78:1f:65:a3:86:db:85: 26:78:42:28:ae:8c:16:1c:f5:47:0b:6c:86:2a:eb:5a:f5:05: 04:5d:17:2b:5d:b5:f0:69:52:b4:4c:51:c0:ae:5b:ef:4d:e6: fb:41:de:e7:12:2a:53:d2:65:5e:4c:fd:ce:31:fe:96:53:16: 30:32:e3:6a:86:b0:69:3e:1e:33:5b:5b:75:75:d7:36:75:ea: 63:7c:51:f4:e0:f3:e3:98:3c:6c:f9:98:62:49:b3:30:d9:5f: 7d:bc:0e:11:0d:dd:d7:b0:94:a5:f2:00:b2:26:d3:73:45:fb: 72:ce:41:42:aa:5a:16:7c:38:3c:4b:6a:64:df:51:b4:d0:04: 1a:96:25:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjYwNTEzMDUzNjQwWhcNMjYwNTIwMDUzNjQwWjAYMRYwFAYD VQQDEw02YTA0MGRlOS02ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj7/t3C7/TYcVP2XzLJMbN/iQ84sW5jCaqiY7sob7w7WLSOv00SVgdDn7yd/ GM+iiq4AKuQHoW/WlbMdDd0ncLAqAj5yYXhqczF8dU225nLgIqge6Mncnulse4H3 38AlC3dXMDAW7O0U/hI1H7GP1vGhSogwIvwdGBfPAhB/ZGtNq0zShePR9eZY0ynE 2odDLkRleeljG9YhylrBVQGFazF5XEqwTSBGx4lFulE6G59sY0sNnFipCi7ttaYh nEk3+mDAbxKS7FngMnh0ZFBoG/yB+U81gsxPzLRDxHWnCrV5KIrCEY5agO3t0zEy 7Q/GrKfUWcEhFl5GbqU2odnLtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcsTvBm 3ZQpFhsVg/J9DOQdADrfMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKEhk4KJPQN9WzzrnygAdR0o8qpHc+Tic0SfDUD8ygUPhTQSkRJhmxDzrLjL6 crdiPtRy1t+Gq4yqHOy5JAQp72GPb995L3lnKrXAyj8qZdeihn7InDJNdoCe2rRl EwVLaSDfMHvt4ISokfmesxcWaHNjMU4ONMx4H2WjhtuFJnhCKK6MFhz1Rwtshirr WvUFBF0XK1218GlStExRwK5b703m+0He5xIqU9JlXkz9zjH+llMWMDLjaoawaT4e M1tbdXXXNnXqY3xR9ODz45g8bPmYYkmzMNlffbwOEQ3d17CUpfIAsibTc0X7cs5B QqpaFnw4PEtqZN9RtNAEGpYlbQ== -----END CERTIFICATE-----Generated at Wed May 13 15:07:55 2026 by rpki-client