$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: 55BEZUd8dNwp/OFZDU2Qq0KkyTVEQ+VeiwmZstVFxic= Subject key identifier: DF:21:AA:D7:3D:0A:D3:C2:B5:E2:1E:31:7D:7E:F3:C9:60:0D:94:5A Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0E23 Signing time: Tue 12 May 2026 17:53:55 +0000 Manifest this update: Tue 12 May 2026 17:53:55 +0000 Manifest next update: Tue 19 May 2026 17:53:55 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: f8SuhHPxUQ+pHT12cZjF7fp+97NThif1L/i+8gaMvQI=) 2: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: W/zwkT3q1SimSGPL2qz0EdwTK1p2ucrY5Ozs9Diao7A=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: MqeW/D/8P52Csk263/GYlr8+c8ERIR8aUwn81bPGMe4=) 4: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: 9rtPRacA/ab9M7425X6SxTSzGNOoYyxxb6DdOR9QEzk=) 5: CDA4E0082E6511F19AB402C39E833773.roa (hash: rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=) 6: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: njqCophIvGbWqZOEZO7iH5P4olbdrXCLsypP82DCs2Q=) 7: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: OMljntVkgQs+vfOk+Rb1tcPgapnLq21/6pFdv7k+86s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3687 (0xe67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: May 12 17:53:55 2026 GMT Not After : May 19 17:53:55 2026 GMT Subject: CN=6a036933-5b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:55:c8:f2:58:2d:dc:09:44:2b:63:b3:f5: c1:21:c8:0c:50:c5:ea:2f:7e:5d:2c:bd:e5:11:d8: 57:7e:0c:65:62:88:26:e2:2d:b7:0f:46:c6:ad:78: 8a:79:81:88:e1:dd:e4:09:9e:ae:8d:57:07:b6:87: 58:16:5d:4b:5e:a7:d5:26:3d:7e:9e:27:99:c5:ce: e5:a4:ad:43:80:63:cb:1b:df:7f:ea:72:65:ff:10: 1a:43:b5:49:9d:52:15:0b:a6:23:d9:b0:14:53:f0: aa:22:5c:7c:78:30:1d:1f:4b:12:85:5e:6f:15:f7: 38:69:3f:03:7e:8f:13:05:0e:18:a3:a9:61:61:b4: 04:f4:f5:3d:35:15:25:7c:6f:ff:21:3f:5b:bf:59: 29:71:12:91:07:b5:a8:50:08:fb:6e:e2:3c:de:6a: 8d:d7:6c:35:d0:cd:dc:37:ed:bd:b3:b9:e3:8c:e9: 5f:f6:81:9e:8e:d1:60:e0:4a:16:d4:bb:ac:51:9e: 50:10:31:0e:66:4d:89:88:d4:ed:f7:bf:03:37:e8: 59:e7:5f:88:11:05:99:a3:c0:22:50:1d:ca:df:40: e4:3d:d2:e9:d2:3a:97:0e:07:62:65:cb:37:b8:e5: 2c:82:9e:30:94:82:e6:6c:9c:1c:96:6e:cc:f4:a8: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:AA:D7:3D:0A:D3:C2:B5:E2:1E:31:7D:7E:F3:C9:60:0D:94:5A X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:72:4b:2e:33:90:18:6e:fa:15:6a:f6:d3:f4:2a:37:07:6e: 1e:1e:34:9d:30:e4:ee:09:08:19:7d:3b:e4:57:0c:f4:ca:25: d6:b2:25:13:22:4e:ff:1f:cc:98:16:d4:d0:ae:cc:0f:13:04: 81:b7:bb:e8:7f:49:f7:0a:bd:ac:bd:49:19:76:f9:c0:72:b9: c7:c6:52:34:48:7c:f2:8e:73:d5:4b:02:a1:4b:f2:96:3a:97: cb:e1:af:69:90:95:22:a2:ec:f5:79:90:eb:9d:1f:4d:0f:40: f8:a5:a8:e0:e5:47:ab:f5:3f:a9:5a:1a:60:57:0c:8a:4c:50: 1e:dd:fd:38:74:eb:81:56:39:a6:ed:94:68:94:eb:5d:23:27: 5c:b4:58:2d:40:5c:c4:a9:c1:60:1f:29:3b:1f:2d:4c:f7:eb: f1:3a:3f:fb:d6:2a:39:b7:b1:e6:2a:8a:17:74:3d:d5:9b:72: ea:ce:21:ce:b9:67:0b:19:0d:30:f1:08:aa:6b:ac:0b:71:e8: 33:6f:e3:6f:87:25:96:49:9f:1f:86:3e:fd:15:ca:f7:9e:85: ed:ca:e9:4f:95:1d:a1:19:c6:fd:64:f2:db:0f:ba:de:76:db: 85:fb:24:b4:28:62:56:31:1a:92:d3:ab:24:a7:45:ec:72:e3: 23:44:a3:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwNTEyMTc1MzU1WhcNMjYwNTE5MTc1MzU1WjAYMRYwFAYD VQQDEw02YTAzNjkzMy01YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdZVyPJYLdwJRCtjs/XBIcgMUMXqL35dLL3lEdhXfgxlYogm4i23D0bGrXiK eYGI4d3kCZ6ujVcHtodYFl1LXqfVJj1+nieZxc7lpK1DgGPLG99/6nJl/xAaQ7VJ nVIVC6Yj2bAUU/CqIlx8eDAdH0sShV5vFfc4aT8Dfo8TBQ4Yo6lhYbQE9PU9NRUl fG//IT9bv1kpcRKRB7WoUAj7buI83mqN12w10M3cN+29s7njjOlf9oGejtFg4EoW 1LusUZ5QEDEOZk2JiNTt978DN+hZ51+IEQWZo8AiUB3K30DkPdLp0jqXDgdiZcs3 uOUsgp4wlILmbJwclm7M9Kh/CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8hqtc9 CtPCteIeMX1+88lgDZRaMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZnJLLjOQGG76FWr20/QqNwduHh40nTDk7gkIGX075FcM9Mol1rIlEyJO/x/M mBbU0K7MDxMEgbe76H9J9wq9rL1JGXb5wHK5x8ZSNEh88o5z1UsCoUvyljqXy+Gv aZCVIqLs9XmQ650fTQ9A+KWo4OVHq/U/qVoaYFcMikxQHt39OHTrgVY5pu2UaJTr XSMnXLRYLUBcxKnBYB8pOx8tTPfr8To/+9YqObex5iqKF3Q91Zty6s4hzrlnCxkN MPEIqmusC3HoM2/jb4cllkmfH4Y+/RXK956F7crpT5UdoRnG/WTy2w+63nbbhfsk tChiVjEaktOrJKdF7HLjI0Sjiw== -----END CERTIFICATE-----Generated at Wed May 13 13:22:59 2026 by rpki-client