$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: YIk199AQYQIQFmiTbNpK/+DlYNP2PmA1korgiepGDEc= Subject key identifier: DE:E9:1D:DF:86:74:1A:DF:D6:73:B2:B7:7E:0A:6E:D6:86:EF:B7:4B Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0E86 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0E6F Signing time: Tue 12 May 2026 14:42:32 +0000 Manifest this update: Tue 12 May 2026 14:42:31 +0000 Manifest next update: Tue 19 May 2026 14:42:31 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: DD5FJaBoUqHrl8Uc1sJhjz5ZTqEnxQvcqqhzDJOIm+U=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3718 (0xe86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: May 12 14:42:31 2026 GMT Not After : May 19 14:42:31 2026 GMT Subject: CN=6a033c57-f03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:b1:0e:72:66:e1:5b:94:14:bc:3f:64:3a: 74:91:6f:ed:82:60:a0:be:9d:a4:c0:1f:9f:42:55: 84:9b:79:ae:75:86:11:63:41:f7:16:da:7d:6f:1a: 6f:fb:8b:5c:7f:c0:a5:a8:d7:72:fe:2e:d6:eb:f3: 84:75:e3:65:fa:c0:db:23:a1:1a:41:83:21:ad:40: 73:f4:41:c3:b2:12:3b:a4:e3:f1:1c:ba:87:2a:cf: 96:14:3f:8a:a4:41:c5:e1:73:cd:98:1c:92:d0:d3: ad:a3:12:5a:86:ba:17:b3:f7:b7:d7:a4:7f:c8:e4: 46:e7:23:a6:96:3b:bc:22:59:00:dc:0d:da:fd:0f: 23:f7:fc:26:88:7d:4c:4d:80:69:7e:6f:cd:fd:94: 43:83:6b:22:52:6f:65:43:46:e7:9a:6b:f0:db:3a: 31:48:d3:28:99:ef:a2:41:62:05:94:b7:15:46:e8: 74:4d:b5:e5:e6:5c:8f:18:12:41:6e:31:1e:54:87: 31:fd:6d:c5:9b:63:86:ed:c1:57:54:47:e4:df:2b: 89:ed:8a:cd:e5:d7:8d:53:6c:f1:93:e8:4c:21:45: eb:d6:c7:ad:f0:fb:0d:69:bc:d3:b5:24:14:7b:69: 95:6c:00:f1:dc:9d:e4:8d:6c:cd:31:54:bf:34:ca: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:1D:DF:86:74:1A:DF:D6:73:B2:B7:7E:0A:6E:D6:86:EF:B7:4B X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:c4:73:e2:fd:1f:6f:8d:3a:ea:e2:39:6d:2a:61:88:ab:1a: 1f:9d:66:1f:3b:d6:59:2e:7b:7b:fd:93:09:02:a8:55:17:bb: c8:92:09:86:77:5a:ec:97:31:e7:53:f3:57:5d:3b:b4:30:8c: 96:98:03:57:f2:e3:48:32:60:ae:df:53:f2:64:1a:cb:31:e3: 22:8e:95:50:99:8e:6d:ef:3a:b6:a8:b6:a1:f4:a5:47:a9:6f: 55:13:ce:63:f8:c4:ca:ef:3a:7e:0d:09:cb:a0:98:c0:fa:4f: 7e:7d:af:2a:ed:a0:85:b6:e4:41:a5:7e:38:1a:ce:51:94:0b: ea:e8:96:b0:fd:12:62:64:81:ec:43:8d:2d:d2:e8:ca:e1:20: 09:1c:32:55:29:a2:00:87:dc:7f:bf:31:56:c0:dd:32:6d:27: c1:80:29:e2:ce:0b:d2:56:e8:88:6e:88:2d:cc:64:d1:4c:a0: ec:40:a9:7d:72:ed:1d:d1:c4:6c:8d:92:7b:30:b0:1d:d2:dc: 5c:3b:01:a6:bc:c3:46:bb:c4:c5:06:67:cb:c2:2e:e9:66:c0: 4e:28:9c:44:ac:1d:50:24:86:80:17:2b:9d:16:d6:be:d8:37: 89:aa:f5:90:ca:df:ac:e1:30:54:d3:89:2d:b4:18:a7:98:13: 70:2f:47:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYwNTEyMTQ0MjMxWhcNMjYwNTE5MTQ0MjMxWjAYMRYwFAYD VQQDEw02YTAzM2M1Ny1mMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYCxDnJm4VuUFLw/ZDp0kW/tgmCgvp2kwB+fQlWEm3mudYYRY0H3Ftp9bxpv +4tcf8ClqNdy/i7W6/OEdeNl+sDbI6EaQYMhrUBz9EHDshI7pOPxHLqHKs+WFD+K pEHF4XPNmByS0NOtoxJahroXs/e316R/yORG5yOmlju8IlkA3A3a/Q8j9/wmiH1M TYBpfm/N/ZRDg2siUm9lQ0bnmmvw2zoxSNMome+iQWIFlLcVRuh0TbXl5lyPGBJB bjEeVIcx/W3Fm2OG7cFXVEfk3yuJ7YrN5deNU2zxk+hMIUXr1set8PsNabzTtSQU e2mVbADx3J3kjWzNMVS/NMoYOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7pHd+G dBrf1nOyt34KbtaG77dLMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxMRz4v0fb4066uI5bSphiKsaH51mHzvWWS57e/2TCQKoVRe7yJIJhnda7Jcx 51PzV107tDCMlpgDV/LjSDJgrt9T8mQayzHjIo6VUJmObe86tqi2ofSlR6lvVRPO Y/jEyu86fg0Jy6CYwPpPfn2vKu2ghbbkQaV+OBrOUZQL6uiWsP0SYmSB7EONLdLo yuEgCRwyVSmiAIfcf78xVsDdMm0nwYAp4s4L0lboiG6ILcxk0Uyg7ECpfXLtHdHE bI2SezCwHdLcXDsBprzDRrvExQZny8Iu6WbATiicRKwdUCSGgBcrnRbWvtg3iar1 kMrfrOEwVNOJLbQYp5gTcC9HqA== -----END CERTIFICATE-----Generated at Wed May 13 00:08:57 2026 by rpki-client