$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: y9zPXy5ZsM6MgI8TX58MRWYWGcYZGfeUQiQP4U78HU0= Subject key identifier: 74:6A:8E:FE:98:81:AD:7E:E6:CB:EA:92:C5:AD:13:96:76:34:1C:C9 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 0133 Signing time: Wed 13 May 2026 01:09:46 +0000 Manifest this update: Wed 13 May 2026 01:09:45 +0000 Manifest next update: Wed 20 May 2026 01:09:45 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: Tg0VVsUWvlqPu3x7geGPDET4KGAa+QrmUW4uyAhPL4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: May 13 01:09:45 2026 GMT Not After : May 20 01:09:45 2026 GMT Subject: CN=6a03cf5a-dbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:25:3c:60:a7:69:f0:8a:d7:1d:09:d2:0d: 36:b7:a9:9b:ca:5f:87:89:42:6c:d3:0e:4a:bd:49: e0:52:d0:1c:a6:4c:22:28:69:3b:80:30:88:2f:c2: b2:db:76:1a:f1:43:03:61:95:8a:bc:53:fa:fc:8a: 91:2e:98:9b:4a:f9:8c:b0:86:03:a4:e7:7f:7b:31: 5d:cf:02:5f:22:3a:3f:f0:d4:80:ba:8d:13:c0:6b: 24:90:8a:9d:55:b4:95:65:e2:f0:ba:95:68:65:5e: 9b:6b:ce:52:f7:6c:9a:48:26:44:af:0a:7a:f7:19: 72:4b:49:45:19:9d:d8:bf:e2:c5:66:c7:4a:a3:13: 35:8a:b9:03:15:5c:0b:69:01:ec:d2:e6:4c:b8:02: fc:58:54:64:0e:e1:36:19:54:51:66:77:88:2e:89: 35:7d:8e:24:c0:4b:b1:c4:9a:55:c1:a6:5e:4e:a3: af:ab:b7:60:be:61:0c:59:35:46:b5:6c:7b:16:02: 0a:ee:94:d7:46:5b:b8:ec:c4:ff:57:c7:39:1d:89: f7:73:4c:7e:d6:24:86:16:93:c8:74:a6:53:c4:8a: b6:b3:8e:ba:70:1d:72:cd:cd:58:fb:ac:d3:93:9a: a9:87:7f:a4:ba:cf:58:a7:7b:7b:ef:7e:22:c0:d1: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:8E:FE:98:81:AD:7E:E6:CB:EA:92:C5:AD:13:96:76:34:1C:C9 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bd:64:67:3d:19:83:4e:b9:83:ed:dc:fe:29:a7:e4:1f:97: e1:b8:b2:8b:a0:a2:e6:2e:ad:ee:b0:97:e1:27:dc:fc:f4:67: fb:c1:85:8a:96:1f:f0:bd:50:ea:0a:49:9e:fe:a4:14:d7:a1: 7e:a7:70:76:ce:8e:39:04:8f:ab:1c:86:a0:be:0d:a8:62:c4: 81:3d:91:fd:69:de:cc:50:ef:7f:62:99:21:19:a2:61:bf:24: eb:90:13:c2:71:10:19:9d:de:76:96:7e:21:69:ba:06:c1:18: 54:43:59:34:c0:a5:6c:dc:f3:cd:35:92:24:86:e6:bb:aa:26: 30:9b:2e:35:ec:d3:31:88:ae:58:69:8e:b8:6f:ca:a8:b8:3b: ed:8b:56:86:0e:87:15:63:a2:27:00:48:97:a9:cb:c1:50:2b: 70:de:45:da:ba:e6:6a:40:4f:fe:67:a1:67:88:f7:af:c3:f2: 75:23:15:a6:5a:7e:24:2f:31:ab:ea:9a:c1:eb:63:68:39:3d: 16:e1:0e:43:8f:85:9d:8b:b5:f7:a4:4d:80:96:e9:e0:c7:35: d9:f8:bc:98:00:5e:14:e4:dd:f8:2a:ac:57:4d:b9:70:37:b4: 6d:85:49:f5:f2:97:75:bb:0e:1d:a2:22:bd:d1:28:50:86:47: 13:75:cc:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjYwNTEzMDEwOTQ1WhcNMjYwNTIwMDEwOTQ1WjAYMRYwFAYD VQQDEw02YTAzY2Y1YS1kYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveAlPGCnafCK1x0J0g02t6mbyl+HiUJs0w5KvUngUtAcpkwiKGk7gDCIL8Ky 23Ya8UMDYZWKvFP6/IqRLpibSvmMsIYDpOd/ezFdzwJfIjo/8NSAuo0TwGskkIqd VbSVZeLwupVoZV6ba85S92yaSCZErwp69xlyS0lFGZ3Yv+LFZsdKoxM1irkDFVwL aQHs0uZMuAL8WFRkDuE2GVRRZneILok1fY4kwEuxxJpVwaZeTqOvq7dgvmEMWTVG tWx7FgIK7pTXRlu47MT/V8c5HYn3c0x+1iSGFpPIdKZTxIq2s466cB1yzc1Y+6zT k5qph3+kus9Yp3t7734iwNH61QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRqjv6Y ga1+5svqksWtE5Z2NBzJMB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFb1kZz0Zg065g+3c/imn5B+X4biyi6Ci5i6t7rCX4Sfc/PRn+8GFipYf8L1Q 6gpJnv6kFNehfqdwds6OOQSPqxyGoL4NqGLEgT2R/WnezFDvf2KZIRmiYb8k65AT wnEQGZ3edpZ+IWm6BsEYVENZNMClbNzzzTWSJIbmu6omMJsuNezTMYiuWGmOuG/K qLg77YtWhg6HFWOiJwBIl6nLwVArcN5F2rrmakBP/mehZ4j3r8PydSMVplp+JC8x q+qawetjaDk9FuEOQ4+FnYu196RNgJbp4Mc12fi8mABeFOTd+CqsV025cDe0bYVJ 9fKXdbsOHaIivdEoUIZHE3XMEw== -----END CERTIFICATE-----Generated at Wed May 13 04:34:36 2026 by rpki-client