$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: 0rUA2o6tGupi5TVEBErTcAiZDPV0RL7N4zrA66NH8rM= Subject key identifier: 30:41:D3:B4:E0:C7:E4:90:02:E0:A9:8B:0E:FC:CF:B6:03:96:B3:E3 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 03C5 Signing time: Mon 11 May 2026 00:42:38 +0000 Manifest this update: Mon 11 May 2026 00:42:37 +0000 Manifest next update: Mon 18 May 2026 00:42:37 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: PS9LuXuT6WPBNVA+BcsfneHqCUoHouFeUu4M1Agtv+Y=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: 4C5vaV8XTy4jKNN6jrtdqFgnURjoJYHwa1sm4fkGiqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: May 11 00:42:37 2026 GMT Not After : May 18 00:42:37 2026 GMT Subject: CN=6a0125fe-6d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:59:74:aa:1e:4d:9f:51:e6:1c:a2:10:84: 9a:3e:c5:2b:49:c9:87:4a:4d:29:cc:dd:cb:e4:df: 10:01:44:be:36:d4:e9:12:71:19:6e:0f:95:af:2c: 78:59:55:59:64:b9:c2:35:7a:ec:88:83:19:5a:84: ea:c3:46:3a:36:7a:94:41:e4:ff:b4:4e:ca:80:67: d4:d7:b1:36:40:f3:fb:f8:a2:02:18:1b:b2:21:6e: 40:b2:4b:9a:d4:f4:3a:5a:ac:b2:97:19:8d:e0:c7: d8:56:1e:37:ea:30:87:9a:34:3c:dd:63:c7:37:3f: df:12:c8:4c:db:64:d4:0c:78:f8:4e:b4:48:16:e0: 79:61:8a:a7:3b:73:27:7f:c0:7c:8f:33:28:cc:b3: 8d:ff:4d:48:fa:40:99:5f:06:e8:df:27:e0:79:c6: 48:50:ad:a0:33:e6:42:35:04:03:13:5f:df:4c:88: 4b:b4:6a:52:e0:62:3a:76:31:6a:57:69:7a:cc:05: 7e:f5:a7:e8:cc:89:31:bb:ab:6b:21:2f:90:18:a8: aa:19:bb:b7:6b:35:af:60:cf:9e:7b:44:45:d1:41: 74:96:c1:01:87:65:2b:83:9a:cf:d0:64:ca:a9:17: 5d:72:ba:73:8e:26:d3:93:c9:4f:15:e1:24:72:40: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:D3:B4:E0:C7:E4:90:02:E0:A9:8B:0E:FC:CF:B6:03:96:B3:E3 X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d1:d4:09:0e:af:66:e3:33:22:2d:23:e3:56:c5:f8:24:a5: 73:62:b5:e9:4b:36:a1:1a:f1:3f:25:a7:71:13:53:69:31:e1: 7b:f2:ca:7e:e2:a7:d3:2e:1d:95:3d:31:77:1a:76:40:ee:e6: fc:0d:87:e6:e3:3e:fc:b0:49:84:b8:33:b2:62:42:1b:6f:92: 78:71:20:d8:9c:10:0e:02:f3:35:32:53:94:00:77:50:4d:2d: 17:ca:58:21:d5:b9:20:35:66:95:27:ed:c5:f5:9f:18:d3:8a: 02:ab:e9:01:b8:1b:c7:64:ed:0d:10:c1:bc:94:05:d9:6e:d9: bd:39:93:a1:1d:77:a0:6c:76:04:11:92:cb:b6:a0:33:17:cc: 7f:1a:0d:ad:b9:93:0a:47:1b:26:5c:11:07:e0:00:e0:19:bf: f7:9d:19:71:aa:e5:ae:7b:15:61:fa:c8:5e:0f:79:46:e0:6f: 1e:8d:18:57:fa:b9:a1:59:bb:30:d8:04:08:6d:65:f4:3b:9c: 37:f1:08:c2:50:78:98:b1:d6:ad:28:9f:83:a3:ed:9f:b2:b0: 4c:85:98:48:52:01:71:1c:f1:d9:bf:5a:c4:6d:5b:96:8a:d9: 75:b2:3f:98:ed:18:05:71:ee:4f:fa:80:de:29:b4:d0:67:f5: 86:7c:e5:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjYwNTExMDA0MjM3WhcNMjYwNTE4MDA0MjM3WjAYMRYwFAYD VQQDEw02YTAxMjVmZS02ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcFZdKoeTZ9R5hyiEISaPsUrScmHSk0pzN3L5N8QAUS+NtTpEnEZbg+Vryx4 WVVZZLnCNXrsiIMZWoTqw0Y6NnqUQeT/tE7KgGfU17E2QPP7+KICGBuyIW5Askua 1PQ6WqyylxmN4MfYVh436jCHmjQ83WPHNz/fEshM22TUDHj4TrRIFuB5YYqnO3Mn f8B8jzMozLON/01I+kCZXwbo3yfgecZIUK2gM+ZCNQQDE1/fTIhLtGpS4GI6djFq V2l6zAV+9afozIkxu6trIS+QGKiqGbu3azWvYM+ee0RF0UF0lsEBh2Urg5rP0GTK qRddcrpzjibTk8lPFeEkckC6zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBB07Tg x+SQAuCpiw78z7YDlrPjMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxNHUCQ6vZuMzIi0j41bF+CSlc2K16Us2oRrxPyWncRNTaTHhe/LKfuKn0y4d lT0xdxp2QO7m/A2H5uM+/LBJhLgzsmJCG2+SeHEg2JwQDgLzNTJTlAB3UE0tF8pY IdW5IDVmlSftxfWfGNOKAqvpAbgbx2TtDRDBvJQF2W7ZvTmToR13oGx2BBGSy7ag MxfMfxoNrbmTCkcbJlwRB+AA4Bm/950ZcarlrnsVYfrIXg95RuBvHo0YV/q5oVm7 MNgECG1l9DucN/EIwlB4mLHWrSifg6Ptn7KwTIWYSFIBcRzx2b9axG1blorZdbI/ mO0YBXHuT/qA3im00Gf1hnzluQ== -----END CERTIFICATE-----Generated at Wed May 13 02:57:53 2026 by rpki-client