$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: idF/l4ewchWKp4Bne7r9sXMLb6tKYKnyUtwipgPrzIM= Subject key identifier: 40:29:59:7E:61:A2:63:FA:D8:A8:19:AE:57:FD:8A:45:BD:24:6E:D7 Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: 01A9 Signing time: Wed 13 May 2026 01:01:13 +0000 Manifest this update: Wed 13 May 2026 01:01:12 +0000 Manifest next update: Wed 20 May 2026 01:01:12 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: jKya0Phvf9EI0J5kxMe6Eu59+DNjS7RlR7m0pvzgFHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: May 13 01:01:12 2026 GMT Not After : May 20 01:01:12 2026 GMT Subject: CN=6a03cd59-1f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:ba:a1:76:ae:96:ba:01:5f:cd:7d:b3:c4: ae:bd:7e:36:ec:d5:d6:55:96:00:eb:ca:8f:9f:4b: 32:37:1b:62:46:07:db:ed:27:4a:2e:68:8d:7c:27: de:37:94:b5:44:5e:78:e8:23:f0:3b:9c:22:e7:af: 39:9c:d9:71:34:22:57:a2:e5:06:f4:26:77:2d:43: 21:7a:55:ad:09:29:fe:c0:90:23:93:c1:b8:0a:2c: c8:12:fe:59:14:25:54:10:f1:c9:94:1d:ef:07:bc: 64:5f:12:b2:2a:3b:ba:de:72:41:7a:1f:f7:05:48: 04:a6:ff:77:08:70:3d:ed:b6:ae:79:fc:fd:09:40: a2:af:a0:8c:dc:96:11:dd:8d:e3:aa:b6:a4:5b:5c: 39:e5:69:0b:c2:38:06:23:6e:03:72:af:d0:2c:42: ba:60:c2:5d:26:87:df:0d:dd:dc:1b:3f:3c:67:75: 38:c7:4c:ff:f3:bd:a0:17:cb:1a:cc:10:73:ec:79: b4:da:e4:60:90:4c:fa:e7:01:f2:ac:e6:c9:44:67: 9c:6a:16:c8:bc:05:1d:81:e2:fe:7d:53:1a:8f:77: 38:ee:63:c2:fe:4c:34:b7:16:f4:a4:e3:8c:5d:79: 14:0f:b7:33:3e:ee:0a:4d:60:85:97:4d:f0:9e:59: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:59:7E:61:A2:63:FA:D8:A8:19:AE:57:FD:8A:45:BD:24:6E:D7 X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7a:ab:a1:4c:37:c7:5b:64:60:b7:66:c6:74:56:6b:9d:c9: 74:aa:a9:90:20:79:e8:dd:ec:32:d1:b7:e6:84:78:d9:fc:c8: 55:aa:2f:5e:84:f6:87:06:66:de:22:b2:1b:81:1f:b7:f9:3b: e6:e8:5b:bd:8e:a1:2f:99:fa:70:c1:a8:06:df:52:c8:fc:d0: e1:49:e5:30:3f:b5:b3:d2:22:9c:62:b9:b0:45:7b:4e:ef:0e: 44:a8:5c:40:78:a4:19:a2:06:65:06:56:c8:d1:4a:c0:57:f2: 36:c5:d1:e4:37:03:a1:57:d8:83:bf:76:f0:bd:80:84:0d:5a: 95:e2:70:75:79:e4:a4:58:13:bc:a5:03:05:c1:30:eb:e7:2d: 7a:2f:4a:51:14:e4:65:95:a5:50:58:33:b9:9f:06:5c:81:96: 56:14:e7:0a:3c:31:1d:95:ea:28:36:6b:b6:e3:99:79:82:8c: 07:0e:e5:27:65:b8:f1:2f:f3:81:9a:03:4a:75:4d:26:86:b6: e6:d0:81:81:00:31:a1:7f:53:c0:22:39:40:a3:ed:4e:2a:ad: 76:77:e7:46:21:14:d4:13:2c:56:2e:6f:c7:57:33:0b:df:7b: 7b:37:ff:66:79:1d:1a:8c:c2:d1:61:00:44:51:82:cf:3d:04: 8d:64:57:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjYwNTEzMDEwMTEyWhcNMjYwNTIwMDEwMTEyWjAYMRYwFAYD VQQDEw02YTAzY2Q1OS0xZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tC6oXaulroBX819s8SuvX427NXWVZYA68qPn0syNxtiRgfb7SdKLmiNfCfe N5S1RF546CPwO5wi5685nNlxNCJXouUG9CZ3LUMhelWtCSn+wJAjk8G4CizIEv5Z FCVUEPHJlB3vB7xkXxKyKju63nJBeh/3BUgEpv93CHA97bauefz9CUCir6CM3JYR 3Y3jqrakW1w55WkLwjgGI24Dcq/QLEK6YMJdJoffDd3cGz88Z3U4x0z/872gF8sa zBBz7Hm02uRgkEz65wHyrObJRGecahbIvAUdgeL+fVMaj3c47mPC/kw0txb0pOOM XXkUD7czPu4KTWCFl03wnll0wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEApWX5h omP62KgZrlf9ikW9JG7XMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3qroUw3x1tkYLdmxnRWa53JdKqpkCB56N3sMtG35oR42fzIVaovXoT2hwZm 3iKyG4Eft/k75uhbvY6hL5n6cMGoBt9SyPzQ4UnlMD+1s9IinGK5sEV7Tu8ORKhc QHikGaIGZQZWyNFKwFfyNsXR5DcDoVfYg7928L2AhA1aleJwdXnkpFgTvKUDBcEw 6+ctei9KURTkZZWlUFgzuZ8GXIGWVhTnCjwxHZXqKDZrtuOZeYKMBw7lJ2W48S/z gZoDSnVNJoa25tCBgQAxoX9TwCI5QKPtTiqtdnfnRiEU1BMsVi5vx1czC997ezf/ ZnkdGozC0WEARFGCzz0EjWRXFA== -----END CERTIFICATE-----Generated at Wed May 13 16:14:05 2026 by rpki-client