$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: XYBROK4dDElfh5MjWb0vSZYq2nteXm2TMudX8XB2v4k= Subject key identifier: 7F:D2:7D:DD:83:B5:89:E1:E4:71:F7:72:73:70:BA:B8:98:0E:14:B8 Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 020E Signing time: Tue 12 May 2026 19:40:03 +0000 Manifest this update: Tue 12 May 2026 19:40:03 +0000 Manifest next update: Tue 19 May 2026 19:40:03 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: ze6/G5ZGT3b2lCpYL/affNqwQB+bFvINOVaJab48a7w=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: May 12 19:40:03 2026 GMT Not After : May 19 19:40:03 2026 GMT Subject: CN=6a038213-5868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:fc:cd:38:ad:dc:f7:2b:93:e9:4e:cd:90: 62:b3:48:ce:b8:57:46:72:bd:88:ff:51:2f:42:f1: 8a:1f:59:d1:f5:d2:e7:63:5a:69:f1:4f:a6:fb:90: 65:88:4a:28:5b:c3:3c:60:47:d9:4a:9c:ae:89:20: b2:4f:f9:28:12:76:59:1f:92:2b:c8:15:96:31:a0: 13:17:16:79:4a:1d:3a:57:53:15:df:a5:32:28:cd: 46:9e:d1:dd:d1:d3:91:15:18:7c:bc:a4:73:39:d5: 70:78:db:0e:9f:47:46:dd:79:2d:92:86:d8:c2:b1: 9a:8d:55:0b:64:93:e4:fe:46:c7:54:d3:cc:f7:c0: b0:fc:9f:c9:57:0c:3d:0a:ab:5e:9d:05:6f:50:6a: da:36:7f:2c:5f:0e:2a:cf:ac:eb:ba:12:73:df:fc: b6:18:b3:37:0f:79:b7:5c:d8:98:5b:f2:a7:bb:19: 2e:fc:95:70:b4:eb:46:0c:d6:8b:3e:5e:34:5c:69: 34:2c:da:c4:ed:43:ac:06:d9:a2:6d:16:e7:0a:51: 5f:d6:85:b0:90:6d:68:9b:d6:ea:88:30:35:08:1d: ff:27:68:37:4f:92:3b:ef:d5:b2:4e:42:af:f6:29: 8a:07:e2:59:df:ee:61:09:6f:c5:7e:07:fb:e6:d0: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D2:7D:DD:83:B5:89:E1:E4:71:F7:72:73:70:BA:B8:98:0E:14:B8 X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:04:7d:f8:9a:9e:82:06:2b:44:61:4e:f7:40:fb:03:f4:33: c4:a7:4e:43:44:6a:1c:dc:1f:19:0e:c2:3d:ca:b7:4d:7e:79: 75:a1:81:68:dd:aa:b4:7f:a8:a8:23:12:63:03:65:f8:91:d3: 54:71:fb:02:86:53:20:07:d4:1e:b7:66:fc:99:e6:e0:7d:d4: bf:90:ec:cb:c5:66:a8:7d:38:b3:e8:de:cd:5f:7a:b9:d3:4a: e4:9b:8d:34:8f:59:8f:bc:db:d2:18:1f:1e:cd:6d:08:62:ac: b7:d7:28:ac:b2:cc:2d:b9:19:9f:30:01:b6:f0:85:e8:42:71: ca:81:09:bf:33:88:bb:aa:ce:fb:ff:f2:8b:b9:94:ed:04:b6: 08:8d:a7:bc:7e:77:fc:93:98:7c:b4:c2:b9:1f:68:9b:b8:3e: 06:29:c3:69:05:25:21:d3:80:96:ce:70:b3:8a:73:91:b8:76: 81:55:89:38:c2:bd:d7:f1:5b:12:93:80:82:32:6d:da:1c:01: d8:79:63:e6:0f:89:1d:f6:d1:f0:f8:41:c9:29:99:30:21:44: 42:4e:85:0c:ad:9f:dc:6f:de:fc:d3:d1:86:31:20:41:a9:c6: 58:9c:da:f0:3d:fc:33:18:a0:a8:50:5d:6e:77:cd:ab:59:a2: 34:90:e2:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjYwNTEyMTk0MDAzWhcNMjYwNTE5MTk0MDAzWjAYMRYwFAYD VQQDEw02YTAzODIxMy01ODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2P8zTit3Pcrk+lOzZBis0jOuFdGcr2I/1EvQvGKH1nR9dLnY1pp8U+m+5Bl iEooW8M8YEfZSpyuiSCyT/koEnZZH5IryBWWMaATFxZ5Sh06V1MV36UyKM1GntHd 0dORFRh8vKRzOdVweNsOn0dG3XktkobYwrGajVULZJPk/kbHVNPM98Cw/J/JVww9 CqtenQVvUGraNn8sXw4qz6zruhJz3/y2GLM3D3m3XNiYW/Knuxku/JVwtOtGDNaL Pl40XGk0LNrE7UOsBtmibRbnClFf1oWwkG1om9bqiDA1CB3/J2g3T5I779WyTkKv 9imKB+JZ3+5hCW/Ffgf75tA3kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/Sfd2D tYnh5HH3cnNwuriYDhS4MB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiwR9+JqeggYrRGFO90D7A/QzxKdOQ0RqHNwfGQ7CPcq3TX55daGBaN2qtH+o qCMSYwNl+JHTVHH7AoZTIAfUHrdm/Jnm4H3Uv5Dsy8VmqH04s+jezV96udNK5JuN NI9Zj7zb0hgfHs1tCGKst9corLLMLbkZnzABtvCF6EJxyoEJvzOIu6rO+//yi7mU 7QS2CI2nvH53/JOYfLTCuR9om7g+BinDaQUlIdOAls5ws4pzkbh2gVWJOMK91/Fb EpOAgjJt2hwB2Hlj5g+JHfbR8PhBySmZMCFEQk6FDK2f3G/e/NPRhjEgQanGWJza 8D38MxigqFBdbnfNq1miNJDiBA== -----END CERTIFICATE-----Generated at Wed May 13 14:00:36 2026 by rpki-client