$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: izl4J2WDZQg8e0B/TcGiwmGMM3vyuQFoxtucDlgLQhE= Subject key identifier: 85:CE:DF:0E:FC:06:20:A1:E2:B4:D8:1C:4F:E6:33:C9:08:2B:D6:14 Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: 01C9 Signing time: Wed 13 May 2026 03:48:04 +0000 Manifest this update: Wed 13 May 2026 03:48:04 +0000 Manifest next update: Wed 20 May 2026 03:48:04 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: znC+U5ui6lY+lUqP8d8I87M0+dydKYNTQ4t4A5mBVQU=) 2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: GnVfU1KqQLS+VBxAiVzN8zaxN7MEl32b3mp04P6RPD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: May 13 03:48:04 2026 GMT Not After : May 20 03:48:04 2026 GMT Subject: CN=6a03f474-1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:a7:c7:f8:0d:b2:05:7c:4b:6f:56:58:3d: d6:f8:1c:34:9a:10:cc:ae:3f:57:3d:07:a4:44:a0: fb:f0:ec:06:a3:d2:6e:e5:15:68:39:e1:72:64:fa: 44:91:cc:9e:12:aa:ce:36:83:12:46:2c:9a:da:04: 4d:52:bf:b8:ef:e3:a3:0c:52:96:84:39:1a:21:8d: 40:3c:1f:4d:5c:27:c5:6e:a2:e7:1c:fe:c5:3f:e8: 45:9e:69:b2:cf:2b:05:76:80:52:42:f2:f2:6f:20: 2e:a4:61:3d:47:e0:96:4b:2a:39:63:11:67:60:02: 4f:92:ff:fd:ce:ad:8b:4c:6d:ce:41:e8:f9:0d:e1: 84:9c:fd:5c:33:25:5e:3a:36:cb:21:43:e6:0a:4c: 3c:2c:e7:92:e3:49:3b:c0:85:cf:cf:df:4c:fe:1c: ad:0b:76:40:06:b4:6f:58:1d:9e:f1:44:05:29:2d: 2d:51:56:46:c9:3f:5f:ca:56:48:68:88:c7:9c:c2: 5d:c4:c5:21:d9:21:44:cc:38:f2:e2:e3:0a:c1:d7: a4:f0:c6:0f:d8:aa:f0:8d:3e:77:dd:14:93:9b:0c: 1f:12:1d:f6:4a:ec:dd:e6:8d:10:7a:3c:31:3d:a3: ab:90:d4:4a:4d:55:d6:05:22:02:80:fb:8c:4a:79: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CE:DF:0E:FC:06:20:A1:E2:B4:D8:1C:4F:E6:33:C9:08:2B:D6:14 X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:da:4f:ac:f4:8c:42:1c:98:1d:fa:bc:a3:af:fc:83:b7:2f: d2:d9:0a:9d:92:79:9e:61:77:3d:00:6c:d9:16:e5:8f:38:fa: 75:be:45:37:51:04:ed:a5:9f:d7:d9:43:2d:24:76:c7:d9:08: 35:25:ad:a4:34:ef:92:f4:01:a2:6b:a1:6b:23:d3:08:a0:50: dd:73:d6:ad:37:a6:fd:7d:11:57:12:0b:d5:55:bd:d9:74:c7: 14:c2:37:ec:ab:0d:c0:96:f9:f7:cd:ed:95:15:42:54:91:50: c1:69:ad:0b:5f:7b:c5:c5:af:f3:8b:48:bc:a8:53:fe:3a:da: 31:1f:da:2a:18:ec:71:7d:ed:49:01:eb:09:5e:c5:68:26:11: f2:31:f1:0c:42:6e:03:97:85:a2:a5:8c:ac:81:fc:90:f9:3b: b8:f9:8d:04:e1:ed:ae:cd:9c:6f:b7:7e:7d:4f:a3:d2:70:f9: 9d:1f:76:3e:0f:6a:67:e7:4b:b4:50:3d:bb:75:ae:76:73:85: 4b:80:b1:72:ea:d4:77:88:4f:25:13:65:c8:64:18:67:94:86: 29:4b:67:ad:65:5d:85:57:c6:50:98:c7:fa:1f:f0:73:af:a2: 88:86:1e:5e:51:e0:eb:33:8f:a4:f5:d4:c5:b4:b9:91:00:70: e9:84:8d:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD OERBMzY2QjgwHhcNMjYwNTEzMDM0ODA0WhcNMjYwNTIwMDM0ODA0WjAYMRYwFAYD VQQDEw02YTAzZjQ3NC0xZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Iinx/gNsgV8S29WWD3W+Bw0mhDMrj9XPQekRKD78OwGo9Ju5RVoOeFyZPpE kcyeEqrONoMSRiya2gRNUr+47+OjDFKWhDkaIY1APB9NXCfFbqLnHP7FP+hFnmmy zysFdoBSQvLybyAupGE9R+CWSyo5YxFnYAJPkv/9zq2LTG3OQej5DeGEnP1cMyVe OjbLIUPmCkw8LOeS40k7wIXPz99M/hytC3ZABrRvWB2e8UQFKS0tUVZGyT9fylZI aIjHnMJdxMUh2SFEzDjy4uMKwdek8MYP2KrwjT533RSTmwwfEh32Suzd5o0Qejwx PaOrkNRKTVXWBSICgPuMSnmWRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXO3w78 BiCh4rTYHE/mM8kIK9YUMB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr MjRKOUk1MFB5TExJMmpacmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAntpPrPSMQhyYHfq8o6/8g7cv0tkKnZJ5nmF3PQBs2Rbljzj6db5FN1EE7aWf 19lDLSR2x9kINSWtpDTvkvQBomuhayPTCKBQ3XPWrTem/X0RVxIL1VW92XTHFMI3 7KsNwJb5983tlRVCVJFQwWmtC197xcWv84tIvKhT/jraMR/aKhjscX3tSQHrCV7F aCYR8jHxDEJuA5eFoqWMrIH8kPk7uPmNBOHtrs2cb7d+fU+j0nD5nR92Pg9qZ+dL tFA9u3WudnOFS4CxcurUd4hPJRNlyGQYZ5SGKUtnrWVdhVfGUJjH+h/wc6+iiIYe XlHg6zOPpPXUxbS5kQBw6YSNPQ== -----END CERTIFICATE-----Generated at Wed May 13 15:11:45 2026 by rpki-client