$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json) Hash identifier: PePewBl63xr55ZccZZuFaxMNvMEXNbtbJ2L2Wzwpwyc= Subject key identifier: 8F:AD:AD:DF:43:6D:46:8E:49:3F:52:2E:21:65:0A:32:B0:9A:21:35 Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft Manifest number: 0414 Signing time: Mon 11 May 2026 00:27:56 +0000 Manifest this update: Mon 11 May 2026 00:27:56 +0000 Manifest next update: Mon 18 May 2026 00:27:56 +0000 Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: weYT9akRvyVKA54zzfqC1BmTC0yjAjOQ1JBkNpb89jw=) 2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: gYFwC5k2adNiGUC8mTnrPd2F0ktvtrVBLWYeACoVYqU=) 3: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: IqecsrYsQpIp/5eCM+4hpeu8TBUj8KVmWEPSTo60jis=) 4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: kkADNHMGho1cJcxgujF7FqwJofNaLhAL0T7zwMKpQTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Validity Not Before: May 11 00:27:56 2026 GMT Not After : May 18 00:27:56 2026 GMT Subject: CN=6a01228c-857b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:6e:16:ca:ab:a9:7c:a3:f5:b8:ec:7a:ae: 96:24:63:a9:7a:28:e1:8b:c8:f5:87:22:e9:c7:90: 5d:a6:cf:c3:40:ce:fc:b6:ad:e6:3a:69:b3:10:6c: 6d:8f:67:98:11:4b:9f:3c:73:f2:90:d5:1a:66:5f: 02:6c:07:c3:2d:2c:09:c6:7e:fc:9a:36:7b:ae:af: 9a:af:d2:e3:f4:2d:03:da:75:bc:3c:c8:3d:16:ec: aa:b1:25:38:21:97:49:76:30:f6:f4:cb:20:00:71: ba:89:fe:68:ae:03:18:11:82:3e:18:59:20:a8:ef: 06:03:58:fa:83:fb:0c:f7:b4:18:ed:26:9b:bf:9e: 45:2d:a3:e6:da:6d:4f:66:13:5b:ed:4f:8a:90:49: 27:f3:79:1c:a8:3b:9b:90:e4:e3:d0:17:27:84:00: 85:91:29:cf:f0:f7:b1:9d:8c:d5:df:84:57:b5:1d: 4d:91:46:88:94:29:0e:1d:c0:49:e7:8b:70:94:7f: 31:ce:76:90:24:22:1c:75:9f:86:96:ea:fc:91:1e: eb:51:92:4b:5e:cb:5b:95:63:6a:5b:8c:fc:51:0b: a9:59:48:9f:47:6a:56:75:f4:90:5c:43:a5:7c:39: de:6c:04:68:18:72:31:f1:8c:61:03:6f:66:9c:3b: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:AD:DF:43:6D:46:8E:49:3F:52:2E:21:65:0A:32:B0:9A:21:35 X509v3 Authority Key Identifier: keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fc:dc:1e:8d:12:34:6b:ba:aa:e1:4b:e9:e4:04:fb:8f:82: d2:b4:be:a8:c2:1f:3a:d6:0a:9f:13:47:e9:65:fb:d3:0e:1e: e1:1f:94:2f:71:22:c9:6d:ee:d0:52:44:9f:42:d9:c9:5c:c1: b0:9f:29:62:63:37:20:7f:69:53:9f:73:83:c7:62:a9:ed:4b: a4:3f:34:eb:cc:46:82:e4:d7:5d:f9:aa:22:45:35:56:61:a8: 06:b0:c1:e0:5e:30:41:18:fb:72:fe:2f:41:c0:89:b6:66:68: d7:09:69:1f:3a:32:f6:86:c0:0c:67:c6:d7:8c:92:a0:0d:89: 8e:10:3d:f9:30:c0:7e:13:52:1d:32:96:ab:f1:e3:12:0d:93: 34:0c:df:3a:aa:e2:ba:97:79:fe:de:af:6f:88:84:02:9b:90: bc:7e:52:58:d8:7b:36:f4:24:dc:f9:27:a8:68:f3:07:fc:2a: 9a:92:2a:43:7b:88:b1:c6:78:55:92:48:df:46:ac:cc:e9:ce: 77:de:28:de:10:7b:5e:07:1e:05:a1:fa:35:b3:43:b7:bf:e0: cf:c3:d1:8d:39:3d:34:31:f1:25:60:cf:48:cd:63:57:c5:9f: 0b:26:7e:99:6f:7a:3b:21:30:23:18:84:5d:b0:83:92:cf:78: 1c:1c:e4:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1 NTIwRUM0OTQwHhcNMjYwNTExMDAyNzU2WhcNMjYwNTE4MDAyNzU2WjAYMRYwFAYD VQQDEw02YTAxMjI4Yy04NTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRRuFsqrqXyj9bjseq6WJGOpeijhi8j1hyLpx5Bdps/DQM78tq3mOmmzEGxt j2eYEUufPHPykNUaZl8CbAfDLSwJxn78mjZ7rq+ar9Lj9C0D2nW8PMg9FuyqsSU4 IZdJdjD29MsgAHG6if5orgMYEYI+GFkgqO8GA1j6g/sM97QY7Sabv55FLaPm2m1P ZhNb7U+KkEkn83kcqDubkOTj0BcnhACFkSnP8PexnYzV34RXtR1NkUaIlCkOHcBJ 54twlH8xznaQJCIcdZ+Glur8kR7rUZJLXstblWNqW4z8UQupWUifR2pWdfSQXEOl fDnebARoGHIx8YxhA29mnDtcpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+trd9D bUaOST9SLiFlCjKwmiE1MB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk dGY5cm53Vy1MVlJWSU94SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs/zcHo0SNGu6quFL6eQE+4+C0rS+qMIfOtYKnxNH6WX70w4e4R+UL3EiyW3u 0FJEn0LZyVzBsJ8pYmM3IH9pU59zg8diqe1LpD8068xGguTXXfmqIkU1VmGoBrDB 4F4wQRj7cv4vQcCJtmZo1wlpHzoy9obADGfG14ySoA2JjhA9+TDAfhNSHTKWq/Hj Eg2TNAzfOqriupd5/t6vb4iEApuQvH5SWNh7NvQk3PknqGjzB/wqmpIqQ3uIscZ4 VZJI30aszOnOd94o3hB7XgceBaH6NbNDt7/gz8PRjTk9NDHxJWDPSM1jV8WfCyZ+ mW96OyEwIxiEXbCDks94HBzkGA== -----END CERTIFICATE-----Generated at Wed May 13 03:25:56 2026 by rpki-client