$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json) Hash identifier: DcYJrsYer2MouMpUi6r4FwnX7ytSz97X5l1mhHrPusg= Subject key identifier: 72:F9:75:53:C8:98:88:21:10:A3:F1:D8:FD:D3:05:76:9B:A1:55:E8 Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft Manifest number: 01F2 Signing time: Thu 21 May 2026 03:21:42 +0000 Manifest this update: Thu 21 May 2026 03:21:41 +0000 Manifest next update: Thu 28 May 2026 03:21:41 +0000 Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: AY84n3wSSpu23UiXZ9f2u0esQPvLMO8oig0jguM2Euc=) 2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: qVMa/Xz0rkX7Diy34qfbgTAPdgO1If06CjZkRcC7AXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Validity Not Before: May 21 03:21:41 2026 GMT Not After : May 28 03:21:41 2026 GMT Subject: CN=6a0e7a46-4cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:98:76:ed:b4:60:84:d8:34:5f:ac:d6:ec: a2:e8:ac:05:19:8d:2e:93:0d:05:83:d0:5d:e4:f6: cf:30:a1:d8:e2:0d:9d:8e:4c:8b:1a:62:3b:48:be: 24:9e:19:b5:d9:22:95:a5:62:a8:ab:34:d7:bc:6e: 71:bd:e4:ed:d7:40:81:6f:97:08:d3:84:c6:ea:e1: d2:75:5a:08:33:2d:72:4c:f5:bb:dc:9e:96:10:a5: b3:dd:7e:e9:8f:5e:83:8a:f1:6a:95:c0:13:ec:95: 9b:b3:2f:5b:31:ea:40:09:1d:9c:6e:cc:32:48:6d: 1e:9f:39:3f:9d:1c:8e:4a:71:1f:cf:9a:d1:5e:6c: 61:2e:0d:2f:f3:8c:12:88:14:cc:86:d7:a4:7b:69: 37:a8:52:12:1f:69:8a:5a:de:3e:7b:a1:a0:28:c1: f2:14:cf:e6:b1:79:42:61:f3:8c:09:2e:80:f1:95: d0:4b:c3:6d:25:09:a2:d7:f0:f2:1b:5e:da:90:02: 3f:0b:cc:a9:1d:68:ca:d2:23:8f:3d:4f:fb:a6:9c: 6d:b9:5b:15:e6:0e:0b:7d:2a:48:f4:f2:cc:1d:b4: bc:94:eb:a8:5d:09:27:56:e9:d5:59:c3:50:ea:5a: 24:25:a4:4a:d4:ab:49:88:f3:7b:0a:24:b4:ab:28: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F9:75:53:C8:98:88:21:10:A3:F1:D8:FD:D3:05:76:9B:A1:55:E8 X509v3 Authority Key Identifier: keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:18:a0:48:b9:89:91:96:c1:d6:35:70:70:5b:ba:4e:09:97: a7:2b:19:13:24:e1:86:9b:af:34:f3:1c:8b:02:51:fd:96:17: 90:65:54:00:8a:6f:32:09:a4:dd:4e:2d:b7:d4:c1:87:a6:ff: ab:56:cb:9c:e0:30:b5:f5:62:cf:2b:47:bd:0e:12:69:b2:7a: 8e:1b:58:8b:83:20:62:f1:82:30:c7:13:a4:1b:3c:17:e3:4c: 8e:84:bb:66:b1:69:5d:ab:dd:13:13:11:db:27:d8:88:7a:d8: f4:58:f6:21:a1:e6:f9:e2:89:91:ac:69:54:fe:6e:5e:f9:3b: 95:32:23:cd:8e:0d:cc:24:68:78:f4:89:15:39:89:49:ff:d5: 87:f8:8c:0f:2f:f8:e2:aa:64:10:88:4e:4e:ce:02:88:03:b1: e7:14:c9:78:2e:ac:52:73:21:5d:14:31:d2:5a:48:43:f3:b3: 38:da:82:a3:49:78:dc:61:0f:97:3c:36:6a:d0:68:56:27:50: 78:81:ca:34:5c:24:30:8c:b7:69:d6:16:95:ef:f0:31:34:ab: f0:d7:8e:4e:34:0e:2e:b3:e5:61:b0:39:86:8d:23:9b:22:56: 4e:89:d2:0d:78:84:70:0c:d1:fc:17:8c:28:e8:10:e2:32:68: 8c:81:90:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3 QjIxMzk3M0EwHhcNMjYwNTIxMDMyMTQxWhcNMjYwNTI4MDMyMTQxWjAYMRYwFAYD VQQDEw02YTBlN2E0Ni00Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVeYdu20YITYNF+s1uyi6KwFGY0ukw0Fg9Bd5PbPMKHY4g2djkyLGmI7SL4k nhm12SKVpWKoqzTXvG5xveTt10CBb5cI04TG6uHSdVoIMy1yTPW73J6WEKWz3X7p j16DivFqlcAT7JWbsy9bMepACR2cbswySG0enzk/nRyOSnEfz5rRXmxhLg0v84wS iBTMhteke2k3qFISH2mKWt4+e6GgKMHyFM/msXlCYfOMCS6A8ZXQS8NtJQmi1/Dy G17akAI/C8ypHWjK0iOPPU/7ppxtuVsV5g4LfSpI9PLMHbS8lOuoXQknVunVWcNQ 6lokJaRK1KtJiPN7CiS0qyjufQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHL5dVPI mIghEKPx2P3TBXaboVXoMB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUds WmtScDlCaTgwSWQ3SVRsem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQxigSLmJkZbB1jVwcFu6TgmXpysZEyThhpuvNPMciwJR/ZYXkGVUAIpvMgmk 3U4tt9TBh6b/q1bLnOAwtfVizytHvQ4SabJ6jhtYi4MgYvGCMMcTpBs8F+NMjoS7 ZrFpXavdExMR2yfYiHrY9Fj2IaHm+eKJkaxpVP5uXvk7lTIjzY4NzCRoePSJFTmJ Sf/Vh/iMDy/44qpkEIhOTs4CiAOx5xTJeC6sUnMhXRQx0lpIQ/OzONqCo0l43GEP lzw2atBoVidQeIHKNFwkMIy3adYWle/wMTSr8NeOTjQOLrPlYbA5ho0jmyJWTonS DXiEcAzR/BeMKOgQ4jJojIGQyQ== -----END CERTIFICATE-----Generated at Thu May 21 10:20:49 2026 by rpki-client