$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: SS5rlmuwlxymSfgRbbMANPGXXgTLw6M3y7HrotoOwUA= Subject key identifier: 12:48:B9:AA:4C:0A:9F:1B:90:82:39:71:F9:0F:3F:68:FC:3F:31:A1 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 23F2 Signing time: Tue 12 May 2026 15:48:50 +0000 Manifest this update: Tue 12 May 2026 15:48:50 +0000 Manifest next update: Tue 19 May 2026 15:48:50 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: PlaBhyDTCnqE9qRwCwbUTz+eHARAMxldw4nxzPu/H5E=) 2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=) 3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9234 (0x2412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: May 12 15:48:50 2026 GMT Not After : May 19 15:48:50 2026 GMT Subject: CN=6a034be2-7c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:a3:d3:3d:6a:47:f6:6e:6a:ab:06:0a:89: 98:62:45:1e:4b:84:2f:10:5a:fb:11:3c:b6:3f:bb: a7:d3:7b:f1:55:77:a4:61:83:81:9a:b2:7b:64:22: 09:4a:b6:a8:60:f1:39:e6:b0:21:3f:6f:b3:39:d5: 4a:4e:b9:3b:c3:3a:62:3b:fe:70:f2:0f:9f:d4:35: 8d:c5:54:95:bf:18:48:5b:16:12:24:b2:37:21:43: ab:af:90:e2:76:d4:e5:64:38:d7:15:aa:b3:68:4d: c7:80:25:e2:32:79:44:17:3a:6e:5f:63:eb:c4:2f: 11:15:94:c0:ca:8b:30:6d:56:eb:14:9b:a4:92:f1: 15:cf:2d:ca:82:90:b9:a3:16:ce:39:72:7a:f0:b3: a7:b5:06:8e:0f:29:8f:07:bf:4b:5c:08:bb:74:89: b9:8a:81:74:4c:9e:73:4b:09:46:8f:b3:84:b9:c8: 7c:98:a6:74:5a:67:f6:9c:e6:c6:c3:c2:33:ef:a4: 37:97:05:cd:b9:0f:84:30:be:01:99:e9:07:77:91: 12:1f:13:0e:60:18:a3:2e:fa:29:03:a3:6b:5b:a5: 79:70:ff:70:45:7e:31:59:69:8d:01:b0:3a:90:ce: f8:84:7a:af:94:91:66:16:c3:e9:fc:6a:27:dc:47: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:B9:AA:4C:0A:9F:1B:90:82:39:71:F9:0F:3F:68:FC:3F:31:A1 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:93:bc:35:4c:cd:f8:d2:10:30:4d:dd:7f:83:e7:32:f9:a0: dd:a7:f8:93:7e:fd:42:33:1e:d3:18:31:49:c9:84:61:ef:35: 4e:7f:a6:1e:88:fd:2e:bf:64:e5:ca:5c:f3:e2:a0:21:35:cc: ba:e5:96:1c:8c:00:41:7e:4f:e4:15:26:01:92:76:c4:a5:d9: 68:bc:13:76:0a:c7:6e:ec:31:a4:3d:69:05:6f:67:dc:e0:cb: b6:74:29:88:a2:40:97:5f:52:5c:ee:06:ab:3d:50:77:20:6c: 1a:19:f0:1b:c9:a8:d3:55:c3:d7:9d:58:86:9f:85:6d:b9:63: 9e:21:72:8a:1d:92:30:1c:b6:2f:a6:83:f2:4f:e6:27:91:f3: 3c:31:fa:f3:21:34:aa:46:f6:d4:12:0b:83:99:c3:e5:eb:8b: d4:72:11:e7:cb:c2:eb:b6:32:62:b9:60:72:7a:8b:71:92:ff: 25:b7:8d:dd:6f:8c:d6:d8:96:6e:9a:10:a6:63:62:90:2b:43: 59:0c:fe:fb:0a:e9:cf:79:ea:2d:cc:b1:03:76:58:e0:98:59: a6:d5:a5:8a:87:fe:0b:85:13:4d:d1:94:4b:04:66:ec:e7:58: d9:bb:e0:b4:e5:1a:ee:7d:e6:ea:77:42:b3:cc:7b:4a:7a:d5: ab:89:dc:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYwNTEyMTU0ODUwWhcNMjYwNTE5MTU0ODUwWjAYMRYwFAYD VQQDEw02YTAzNGJlMi03YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+aj0z1qR/ZuaqsGComYYkUeS4QvEFr7ETy2P7un03vxVXekYYOBmrJ7ZCIJ SraoYPE55rAhP2+zOdVKTrk7wzpiO/5w8g+f1DWNxVSVvxhIWxYSJLI3IUOrr5Di dtTlZDjXFaqzaE3HgCXiMnlEFzpuX2PrxC8RFZTAyoswbVbrFJukkvEVzy3KgpC5 oxbOOXJ68LOntQaODymPB79LXAi7dIm5ioF0TJ5zSwlGj7OEuch8mKZ0Wmf2nObG w8Iz76Q3lwXNuQ+EML4BmekHd5ESHxMOYBijLvopA6NrW6V5cP9wRX4xWWmNAbA6 kM74hHqvlJFmFsPp/Gon3Ed8cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJIuapM Cp8bkII5cfkPP2j8PzGhMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5O8NUzN+NIQME3df4PnMvmg3af4k379QjMe0xgxScmEYe81Tn+mHoj9Lr9k 5cpc8+KgITXMuuWWHIwAQX5P5BUmAZJ2xKXZaLwTdgrHbuwxpD1pBW9n3ODLtnQp iKJAl19SXO4Gqz1QdyBsGhnwG8mo01XD151Yhp+FbbljniFyih2SMBy2L6aD8k/m J5HzPDH68yE0qkb21BILg5nD5euL1HIR58vC67YyYrlgcnqLcZL/JbeN3W+M1tiW bpoQpmNikCtDWQz++wrpz3nqLcyxA3ZY4JhZptWliof+C4UTTdGUSwRm7OdY2bvg tOUa7n3m6ndCs8x7SnrVq4ncVw== -----END CERTIFICATE-----Generated at Wed May 13 11:45:32 2026 by rpki-client