$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: lj+H2ataXtewv95aT861jljJQ4gIGlBYyP2zAWuyXM8= Subject key identifier: E9:BD:72:C5:D4:CA:BD:A7:CB:61:76:BF:10:48:13:54:8F:AF:C6:56 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 0389 Signing time: Wed 13 May 2026 00:57:10 +0000 Manifest this update: Wed 13 May 2026 00:57:09 +0000 Manifest next update: Wed 20 May 2026 00:57:09 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: GSNTi64hKOI9DPb6gn8nDXf4rnNd8mR8uCuNm+jOU0w=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: 7PiA24amlQbC4xMzeCaUVcFYdwUhnQswXY5VT6j4qP0=) 3: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: iucFsGa6sBYZzutnis8jK4YsBoNemyskNEeO7TgdCQ4=) 4: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 0wO7M/9BCooRsmuwMIusd2er4KtWGT09E2By+oSoPjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: May 13 00:57:09 2026 GMT Not After : May 20 00:57:09 2026 GMT Subject: CN=6a03cc66-e149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:3f:07:c2:6c:e1:58:05:ba:ef:f0:ae:55: 97:76:44:38:af:2e:0e:06:3b:2f:59:da:ef:14:49: 64:d8:94:e1:9c:76:10:a8:3e:8e:d7:e7:0e:fb:d7: a4:2f:06:ad:07:69:f1:c8:61:5f:7b:38:ec:86:21: 33:fc:e6:37:29:6f:cf:81:97:15:14:05:6b:76:6d: 5f:c6:9e:7c:98:59:df:4d:1e:c4:39:81:e0:38:d6: b8:b9:a2:5e:b8:74:1c:30:f8:7f:65:4c:8c:24:5f: 80:84:00:07:25:3e:14:e9:ed:65:2c:e4:3d:e3:ad: 66:8a:ef:e5:6f:3c:78:64:40:4b:bb:3a:f8:e6:a7: 24:5e:50:d9:bc:74:1a:27:d5:f5:90:f7:74:71:8f: cc:f9:54:dc:ff:1e:42:29:8e:a4:a6:0b:74:6e:61: f2:c3:d2:0e:17:19:89:8e:37:41:56:9d:92:ce:01: e9:4c:57:09:5f:4b:ae:b1:94:ed:c7:53:74:20:a5: 5a:07:6a:51:b2:0d:99:c4:c3:85:ce:d8:7a:26:ae: 82:da:b9:48:47:6c:86:fa:72:48:31:00:97:0b:ea: fc:4e:02:60:98:9b:87:7e:a1:d6:fb:67:79:3e:6f: dd:98:67:2c:8f:18:28:26:3a:ba:ca:73:94:84:46: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:72:C5:D4:CA:BD:A7:CB:61:76:BF:10:48:13:54:8F:AF:C6:56 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2e:d2:ed:98:ee:a4:11:15:c3:03:e7:39:16:31:42:e5:3b: 6c:80:ad:23:a5:ac:bd:15:06:b5:30:4e:9e:c3:29:48:41:f4: e5:fb:a0:b4:e5:e1:c5:b9:f2:65:ea:4a:3b:e6:27:3a:8c:02: a5:91:fa:d2:64:15:96:8a:1f:e3:f3:34:d9:6d:5b:0a:b2:3f: 74:45:63:3e:db:0d:f0:03:f9:c0:5c:f5:7f:27:6c:b7:f4:4f: 37:99:b8:0f:ca:25:47:3a:8a:d6:e5:e3:14:7e:d9:f3:d8:ca: db:36:c8:3f:13:f4:d8:e1:c6:7d:83:fe:99:9c:e8:9b:d7:3b: 53:f4:b3:93:a6:75:37:64:a4:3b:a3:04:4e:4c:90:aa:b3:a5: e2:97:f2:ef:05:2c:1c:81:8f:a6:a1:4a:e9:45:28:06:7a:e2: b2:b1:d9:55:7d:dd:f6:0b:1e:8e:e2:66:b5:62:72:ed:b8:14: 8a:a6:96:32:55:d0:5a:85:31:0a:0a:d0:29:92:dc:e7:8c:c0: 9e:ad:1b:42:81:a5:db:b3:24:eb:6d:24:90:d2:82:68:2d:78: 72:80:a7:b9:47:f9:70:3e:7d:da:c3:2a:9d:08:24:57:43:7c: 40:c8:a4:b7:dd:17:b4:de:b9:bb:5d:5a:b0:eb:b5:75:4c:ff: 7e:4d:33:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjYwNTEzMDA1NzA5WhcNMjYwNTIwMDA1NzA5WjAYMRYwFAYD VQQDEw02YTAzY2M2Ni1lMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziQ/B8Js4VgFuu/wrlWXdkQ4ry4OBjsvWdrvFElk2JThnHYQqD6O1+cO+9ek LwatB2nxyGFfezjshiEz/OY3KW/PgZcVFAVrdm1fxp58mFnfTR7EOYHgONa4uaJe uHQcMPh/ZUyMJF+AhAAHJT4U6e1lLOQ9461miu/lbzx4ZEBLuzr45qckXlDZvHQa J9X1kPd0cY/M+VTc/x5CKY6kpgt0bmHyw9IOFxmJjjdBVp2SzgHpTFcJX0uusZTt x1N0IKVaB2pRsg2ZxMOFzth6Jq6C2rlIR2yG+nJIMQCXC+r8TgJgmJuHfqHW+2d5 Pm/dmGcsjxgoJjq6ynOUhEbbWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOm9csXU yr2ny2F2vxBIE1SPr8ZWMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARi7S7ZjupBEVwwPnORYxQuU7bICtI6WsvRUGtTBOnsMpSEH05fugtOXhxbny ZepKO+YnOowCpZH60mQVloof4/M02W1bCrI/dEVjPtsN8AP5wFz1fydst/RPN5m4 D8olRzqK1uXjFH7Z89jK2zbIPxP02OHGfYP+mZzom9c7U/Szk6Z1N2SkO6METkyQ qrOl4pfy7wUsHIGPpqFK6UUoBnrisrHZVX3d9gsejuJmtWJy7bgUiqaWMlXQWoUx CgrQKZLc54zAnq0bQoGl27Mk620kkNKCaC14coCnuUf5cD592sMqnQgkV0N8QMik t90XtN65u11asOu1dUz/fk0zMw== -----END CERTIFICATE-----Generated at Wed May 13 07:06:43 2026 by rpki-client