$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft File: cnTOXaBB8mCNjIJt7g5xWhhxUro.mft (raw, json) Hash identifier: FBttBcFT+2bP2vppV/rhMRAy1+A5iDcjL2h3MiJKCHI= Subject key identifier: 41:D6:F2:26:41:A0:2E:85:36:EA:A5:FF:93:47:F7:C4:B3:65:24:A1 Authority key identifier: 72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA Certificate issuer: /CN=A91A2FF9/serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft Manifest number: 09 Signing time: Mon 11 May 2026 09:21:38 +0000 Manifest this update: Mon 11 May 2026 09:21:38 +0000 Manifest next update: Mon 18 May 2026 09:21:38 +0000 Files and hashes: 1: cnTOXaBB8mCNjIJt7g5xWhhxUro.crl (hash: SINwJ9Z9vYURAmfkIaY38QUMHEaGWOu2YQTLt9Htk+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2FF9, serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA Validity Not Before: May 11 09:21:38 2026 GMT Not After : May 18 09:21:38 2026 GMT Subject: CN=6a019fa2-fc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:70:53:59:4a:98:16:4e:d3:53:fa:fc:53: a3:84:ed:4a:2e:b8:2e:33:80:b0:11:b4:54:d8:ce: 52:17:da:a5:6d:d6:ea:1e:ad:f2:e3:12:0e:f3:5f: f2:f1:37:12:53:d1:67:8b:6e:3b:d3:bb:a5:a7:23: 4e:4e:cb:50:57:5d:b9:25:87:d7:77:ed:6f:d1:0c: 4d:40:e3:18:46:65:93:37:03:34:73:f0:9f:1e:4e: 13:2a:77:87:83:21:d1:a8:29:15:55:a6:b9:08:ec: e2:f9:ee:2c:be:05:45:99:d4:c9:f4:b2:8e:13:bc: 13:42:ec:1b:c3:04:f8:cf:66:44:94:70:01:36:66: 9b:7e:d3:8a:06:44:1e:cd:45:04:ed:41:17:2f:b4: a2:dc:a4:76:ca:d1:9c:9d:c1:4e:6a:91:28:18:6e: bd:89:6f:7d:18:b7:ff:65:14:52:8f:17:1e:c4:6e: 40:d5:55:4e:0d:47:f1:bb:1f:7f:29:6d:cd:af:8f: aa:3b:87:45:98:02:b0:39:38:ba:69:f5:f5:54:d8: a7:a6:be:78:96:35:08:31:16:25:b9:5d:06:e4:20: 03:85:0f:d7:a3:b2:d4:1c:be:40:d8:9c:e0:ba:16: 7f:46:f1:5c:4d:85:c0:48:95:71:22:fd:6e:83:a7: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D6:F2:26:41:A0:2E:85:36:EA:A5:FF:93:47:F7:C4:B3:65:24:A1 X509v3 Authority Key Identifier: keyid:72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5f:5b:21:41:4c:8e:5c:b3:c7:9e:7f:49:3b:f2:ad:5b:3e: 6e:46:62:3f:50:ee:e4:5d:94:1d:9c:82:9d:94:72:41:67:f2: dd:98:f0:05:07:e6:e7:f6:61:c0:e6:69:7b:5b:f1:91:01:e0: a0:82:95:8e:e1:7e:3c:12:dc:ed:42:64:34:ff:7b:42:fc:e6: 98:09:3d:8c:cc:c7:bc:22:f8:b1:9e:45:be:9e:46:05:14:88: 44:10:0e:53:de:f6:5b:1e:01:2a:e2:76:06:e5:6f:95:4a:d4: b5:a0:ca:a9:66:1d:bd:2f:5f:78:4b:7e:a2:2e:21:1e:d7:11: ea:80:e4:03:b2:66:cf:f6:cd:19:38:c3:0d:48:d4:94:f9:cc: a7:aa:31:cb:a2:ec:f2:bf:20:3c:28:ef:77:10:98:3b:33:ce: 57:bf:85:d0:c2:14:c6:4a:c2:56:f9:53:b8:46:95:92:d3:55: 12:9b:51:22:89:b2:05:5e:e8:c2:37:db:5c:6b:11:24:95:00: c3:36:5d:2e:09:58:6d:35:01:77:36:21:5a:7c:83:84:7a:82: 65:8e:aa:15:1b:c3:0f:99:6d:3b:d8:cc:db:ee:8d:af:07:19: a7:d4:90:ed:cd:87:6f:48:f1:ca:04:2b:0d:7e:83:ed:39:22: 87:80:bf:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkZGOTExMC8GA1UEBRMoNzI3NENFNURBMDQxRjI2MDhEOEM4MjZERUUwRTcxNUEx ODcxNTJCQTAeFw0yNjA1MTEwOTIxMzhaFw0yNjA1MTgwOTIxMzhaMBgxFjAUBgNV BAMTDTZhMDE5ZmEyLWZjMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKonBTWUqYFk7TU/r8U6OE7UouuC4zgLARtFTYzlIX2qVt1uoerfLjEg7zX/Lx NxJT0WeLbjvTu6WnI05Oy1BXXbklh9d37W/RDE1A4xhGZZM3AzRz8J8eThMqd4eD IdGoKRVVprkI7OL57iy+BUWZ1Mn0so4TvBNC7BvDBPjPZkSUcAE2Zpt+04oGRB7N RQTtQRcvtKLcpHbK0ZydwU5qkSgYbr2Jb30Yt/9lFFKPFx7EbkDVVU4NR/G7H38p bc2vj6o7h0WYArA5OLpp9fVU2KemvniWNQgxFiW5XQbkIAOFD9ejstQcvkDYnOC6 Fn9G8VxNhcBIlXEi/W6Dp121AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQdbyJkGg LoU26qX/k0f3xLNlJKEwHwYDVR0jBBgwFoAUcnTOXaBB8mCNjIJt7g5xWhhxUrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRkY5LzhCOTM2OUIwNDJE QzExRjFBODJDNDM1NUNCODMzNzczL2NuVE9YYUJCOG1DTmpJSnQ3ZzV4V2hoeFVy by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25UT1hhQkI4bUNOaklKdDdnNXhXaGh4VXJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy RkY5LzhCOTM2OUIwNDJEQzExRjFBODJDNDM1NUNCODMzNzczL2NuVE9YYUJCOG1D TmpJSnQ3ZzV4V2hoeFVyby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAuX1shQUyOXLPHnn9JO/KtWz5uRmI/UO7kXZQdnIKdlHJBZ/LdmPAFB+bn9mHA 5ml7W/GRAeCggpWO4X48EtztQmQ0/3tC/OaYCT2MzMe8IvixnkW+nkYFFIhEEA5T 3vZbHgEq4nYG5W+VStS1oMqpZh29L194S36iLiEe1xHqgOQDsmbP9s0ZOMMNSNSU +cynqjHLouzyvyA8KO93EJg7M85Xv4XQwhTGSsJW+VO4RpWS01USm1EiibIFXujC N9tcaxEklQDDNl0uCVhtNQF3NiFafIOEeoJljqoVG8MPmW072Mzb7o2vBxmn1JDt zYdvSPHKBCsNfoPtOSKHgL87 -----END CERTIFICATE-----Generated at Wed May 13 07:11:11 2026 by rpki-client