$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: Ik+89R3vAlJmeGGo+s0e7zd7kZCgIKbj4dRdgiqHucc= Subject key identifier: F8:B8:3D:7B:4D:7D:10:DC:A6:78:F7:6B:84:5C:79:0B:62:AC:21:A6 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D55 Signing time: Tue 12 May 2026 18:04:55 +0000 Manifest this update: Tue 12 May 2026 18:04:55 +0000 Manifest next update: Tue 19 May 2026 18:04:55 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: qf4KpPEljWsYHQPIIEWJh+L261PFiAv8iiWUom2T/qw=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) 3: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=) 4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: May 12 18:04:55 2026 GMT Not After : May 19 18:04:55 2026 GMT Subject: CN=6a036bc7-b48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:76:24:9f:1e:af:ac:41:5d:d1:b6:95:6d: cf:38:d3:fc:d9:1d:17:3f:e5:28:20:58:b5:7d:04: 5d:76:2e:3c:0f:12:ac:78:6f:db:8b:c7:e7:a5:5c: ff:0c:e7:18:7c:51:f8:51:18:92:f5:c7:1f:54:43: 6e:75:e7:14:a4:fa:bf:96:c1:fc:89:8e:3f:ee:59: ee:1e:b8:b7:46:66:16:fb:aa:53:37:22:29:bb:39: b3:c3:1c:25:07:12:32:ef:ac:11:6f:4c:c4:dc:40: fb:11:12:ae:9d:fa:4c:aa:8e:b4:c3:2b:8c:bb:ac: 58:71:21:b6:f1:ef:07:b8:95:6a:40:40:d8:7d:7a: 08:64:cd:c2:d9:72:50:8c:1a:1b:e4:d9:15:4f:a3: cc:20:8f:d0:9b:dc:62:84:52:20:3e:93:8a:d8:8c: 60:2e:72:97:a2:51:1b:ec:0c:65:c5:6c:00:83:16: 7c:e1:57:2c:3c:72:7b:0b:0c:07:c8:41:d2:cd:5f: 75:33:f7:3d:59:7b:70:8a:53:28:f7:f7:24:37:9b: 7f:37:e4:7e:68:80:d0:b7:f3:4f:19:f5:3d:f4:73: 62:ac:25:49:af:56:18:2d:77:4d:bc:a0:d6:ff:a9: 3f:5f:31:d6:52:37:69:d3:b0:92:72:fe:5c:2a:bd: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:3D:7B:4D:7D:10:DC:A6:78:F7:6B:84:5C:79:0B:62:AC:21:A6 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:2d:06:9f:24:ef:99:e3:1c:59:51:c7:49:70:4d:bf:4f:88: 09:dc:4f:4e:44:8b:97:45:3b:a0:49:98:a4:8f:00:3d:b1:bb: de:22:4f:5c:8e:a3:d2:22:76:9c:16:cf:1e:43:81:04:2a:9b: 3f:19:4d:a9:0b:eb:3f:fa:f2:ae:90:db:f4:ca:a2:06:61:97: e0:62:a2:df:fa:8b:d4:92:e5:10:c0:a5:06:90:1f:5c:65:5a: 31:40:43:58:b3:0c:8c:21:d3:48:5d:fb:fa:7e:1c:a0:09:aa: 8f:61:71:67:34:8d:50:54:cf:79:e9:83:75:8b:bc:99:54:a4: 02:38:b3:b2:f6:d2:04:4b:8f:47:f3:5b:a0:4f:ed:46:16:cf: 3d:15:ec:3c:ed:5e:c6:c7:b1:dd:4d:63:f6:ac:9a:40:b3:99: fb:d3:64:c8:dd:73:87:61:98:a1:97:11:74:4d:38:4d:04:46: 08:ee:7f:58:52:7c:8f:8e:e2:07:08:66:31:da:3b:ba:56:37: 5a:dc:4e:17:7d:0d:2d:c8:02:c4:4e:a6:30:d1:da:18:a1:94: 07:c8:b9:c6:13:cd:e1:b4:41:84:76:39:5e:20:9b:53:5e:4f: 56:6e:f0:6f:19:5f:1a:d9:be:9d:7b:07:8c:07:09:fb:15:8a: 92:0d:5d:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNTEyMTgwNDU1WhcNMjYwNTE5MTgwNDU1WjAYMRYwFAYD VQQDEw02YTAzNmJjNy1iNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VZ2JJ8er6xBXdG2lW3PONP82R0XP+UoIFi1fQRddi48DxKseG/bi8fnpVz/ DOcYfFH4URiS9ccfVENudecUpPq/lsH8iY4/7lnuHri3RmYW+6pTNyIpuzmzwxwl BxIy76wRb0zE3ED7ERKunfpMqo60wyuMu6xYcSG28e8HuJVqQEDYfXoIZM3C2XJQ jBob5NkVT6PMII/Qm9xihFIgPpOK2IxgLnKXolEb7AxlxWwAgxZ84VcsPHJ7CwwH yEHSzV91M/c9WXtwilMo9/ckN5t/N+R+aIDQt/NPGfU99HNirCVJr1YYLXdNvKDW /6k/XzHWUjdp07CScv5cKr306QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi4PXtN fRDcpnj3a4RceQtirCGmMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4i0GnyTvmeMcWVHHSXBNv0+ICdxPTkSLl0U7oEmYpI8APbG73iJPXI6j0iJ2 nBbPHkOBBCqbPxlNqQvrP/ryrpDb9MqiBmGX4GKi3/qL1JLlEMClBpAfXGVaMUBD WLMMjCHTSF37+n4coAmqj2FxZzSNUFTPeemDdYu8mVSkAjizsvbSBEuPR/NboE/t RhbPPRXsPO1exsex3U1j9qyaQLOZ+9NkyN1zh2GYoZcRdE04TQRGCO5/WFJ8j47i BwhmMdo7ulY3WtxOF30NLcgCxE6mMNHaGKGUB8i5xhPN4bRBhHY5XiCbU15PVm7w bxlfGtm+nXsHjAcJ+xWKkg1djA== -----END CERTIFICATE-----Generated at Wed May 13 08:23:03 2026 by rpki-client