$ rpki-client -vvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json) Hash identifier: JU11C2V6de8Cs9Fsst3YrzSpgHEgQCy0t4zn4gegz4A= Subject key identifier: D3:DB:BC:83:E2:93:5C:24:FF:C6:D9:03:CE:96:C5:7E:29:62:D2:60 Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft Manifest number: 0628 Signing time: Tue 12 May 2026 22:52:36 +0000 Manifest this update: Tue 12 May 2026 22:52:35 +0000 Manifest next update: Tue 19 May 2026 22:52:35 +0000 Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: 4O7+DpRZF7OcotRtV0weyn3synCFoU8GTZ1z44zieEk=) 2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: r63sbdb81aS0Y3D1jhysh8/CnvmDL9CRF/6oUTPKQNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Validity Not Before: May 12 22:52:35 2026 GMT Not After : May 19 22:52:35 2026 GMT Subject: CN=6a03af33-5a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:42:a7:0a:10:a8:a4:f2:80:6d:36:4c:fc: 61:db:70:62:62:24:4c:09:c4:dd:26:3a:8d:cc:9a: 7d:ea:73:9d:3c:ac:51:98:28:54:01:60:ba:98:55: a1:84:43:77:9d:e8:f3:73:48:b5:06:56:11:87:3f: a0:3e:2c:44:59:e1:9d:92:45:eb:a9:6c:69:4d:2a: 05:4b:b0:41:6b:be:00:a8:22:17:57:8c:78:00:5a: 2d:26:d6:d4:c7:06:20:c6:79:e5:7c:01:8b:24:1a: c5:b3:d3:99:29:4b:a2:9c:8d:1b:9e:07:7a:c9:32: 88:81:e8:d7:9d:f8:db:b0:cd:23:fa:15:d1:93:b5: 2f:2e:59:13:6b:7f:de:59:1c:3d:bc:8c:a1:ee:5b: 70:fd:fe:23:02:d4:a4:b4:3a:00:4e:2d:3b:08:8d: 36:0d:12:72:92:b3:4f:86:ec:64:57:3a:ba:09:6e: 69:e3:b8:7b:fa:9b:3b:a9:2a:3c:a3:79:22:48:43: 62:23:7c:08:fe:ed:7c:d4:24:d2:ea:c0:11:08:15: f2:71:b5:a5:08:c4:0b:22:d8:ee:4e:92:14:53:b2: bd:92:94:d3:34:f3:77:a3:92:5d:4d:e1:56:a5:3c: 62:fb:33:2c:ff:17:55:d5:5b:bc:47:af:7e:a4:b6: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:BC:83:E2:93:5C:24:FF:C6:D9:03:CE:96:C5:7E:29:62:D2:60 X509v3 Authority Key Identifier: keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:07:af:a1:49:c2:65:de:ab:3f:62:fa:1f:23:fa:5c:85:93: fd:85:d9:9f:22:1f:b7:6c:0d:a9:74:ff:06:6c:6a:2c:0d:fe: e7:c6:15:85:91:00:f5:7f:a8:38:0c:66:4f:fa:72:e9:f4:dc: 55:16:d2:2c:b6:7d:11:9f:b4:c5:ba:70:28:29:82:51:42:45: a1:b6:bc:4c:0b:77:7f:b0:e0:83:d9:1c:2b:25:65:26:a0:8c: b7:5b:29:51:26:8a:e6:34:10:cc:4d:f6:ff:73:e3:d3:24:2b: 2d:f1:63:0f:6b:24:0f:d1:81:04:48:80:e7:83:7e:6a:08:8d: 21:d0:aa:81:a8:93:ee:96:54:7b:ed:09:5b:b7:9d:32:b1:6f: a1:8e:59:31:76:07:9a:93:09:89:a1:8b:4d:b4:c1:52:ef:9f: d0:99:67:ad:0f:a9:25:b1:9e:9c:79:d6:02:09:e7:64:18:f1: b4:38:c0:8b:0d:5c:64:22:99:a4:32:9f:b6:a5:59:be:6d:3f: 6a:bd:d8:56:b4:ef:5a:f4:aa:65:2a:bc:63:9a:38:ea:8b:02: 1d:ab:d6:b8:df:0b:ad:d7:aa:81:7c:60:28:89:80:79:bf:94: 23:8d:3c:1b:4f:ec:4e:9e:43:3d:eb:32:d9:b4:e1:ad:32:42: 51:eb:e2:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyMTgxMTAvBgNVBAUTKDg1RUY0RjUyQkU2QzBEMDkzNzM4NjlBOTAwMjIzODYy ODIzM0VCRUYwHhcNMjYwNTEyMjI1MjM1WhcNMjYwNTE5MjI1MjM1WjAYMRYwFAYD VQQDEw02YTAzYWYzMy01YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvhCpwoQqKTygG02TPxh23BiYiRMCcTdJjqNzJp96nOdPKxRmChUAWC6mFWh hEN3nejzc0i1BlYRhz+gPixEWeGdkkXrqWxpTSoFS7BBa74AqCIXV4x4AFotJtbU xwYgxnnlfAGLJBrFs9OZKUuinI0bngd6yTKIgejXnfjbsM0j+hXRk7UvLlkTa3/e WRw9vIyh7ltw/f4jAtSktDoATi07CI02DRJykrNPhuxkVzq6CW5p47h7+ps7qSo8 o3kiSENiI3wI/u181CTS6sARCBXycbWlCMQLItjuTpIUU7K9kpTTNPN3o5JdTeFW pTxi+zMs/xdV1Vu8R69+pLYLgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPbvIPi k1wk/8bZA86WxX4pYtJgMB8GA1UdIwQYMBaAFIXvT1K+bA0JNzhpqQAiOGKCM+vv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTIxOC9EODU3QTEzRURF QkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RRazNPR21wQUNJNFlvSXo2 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlOVBVcjVzRFFrM09HbXBBQ0k0WW9JejYtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTIxOC9EODU3QTEzRURFQkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RR azNPR21wQUNJNFlvSXo2LTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAowevoUnCZd6rP2L6HyP6XIWT/YXZnyIft2wNqXT/BmxqLA3+58YVhZEA9X+o OAxmT/py6fTcVRbSLLZ9EZ+0xbpwKCmCUUJFoba8TAt3f7Dgg9kcKyVlJqCMt1sp USaK5jQQzE32/3Pj0yQrLfFjD2skD9GBBEiA54N+agiNIdCqgaiT7pZUe+0JW7ed MrFvoY5ZMXYHmpMJiaGLTbTBUu+f0JlnrQ+pJbGenHnWAgnnZBjxtDjAiw1cZCKZ pDKftqVZvm0/ar3YVrTvWvSqZSq8Y5o46osCHavWuN8LrdeqgXxgKImAeb+UI408 G0/sTp5DPesy2bThrTJCUeviSA== -----END CERTIFICATE-----Generated at Wed May 13 04:04:36 2026 by rpki-client