$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: 1baMQlXqD2g4aqY+GspdO56ZMNvp7goL1UGRpcFoaKk= Subject key identifier: 82:98:B4:88:5C:3C:59:D7:B6:B8:31:AC:87:8E:F5:C6:B5:20:4C:1A Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0DC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0DB4 Signing time: Wed 20 May 2026 17:56:24 +0000 Manifest this update: Wed 20 May 2026 17:56:24 +0000 Manifest next update: Wed 27 May 2026 17:56:24 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: oR9qKEh7wM8yIposAG0fnZLTND1CTQhI93OlQPWYta4=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: 7Br/DTiPTx/Ar/MbjlybmCjnr1Fwi5lt+TR9Ep/lxRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3523 (0xdc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: May 20 17:56:24 2026 GMT Not After : May 27 17:56:24 2026 GMT Subject: CN=6a0df5c8-13b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:8f:81:7c:9f:79:b1:ab:e4:c3:44:05:f0: ca:68:eb:77:b1:a3:97:55:09:3f:f4:9e:02:e9:af: 21:95:4b:c8:9a:f5:b0:aa:b9:dc:29:45:fb:64:4e: c9:88:f2:88:2e:59:d8:c4:44:d6:56:dc:9a:1e:99: b0:b8:0a:72:79:e3:4a:96:bd:a6:e8:08:27:a0:93: 95:37:33:cf:e8:ca:bf:d6:4a:b2:48:c3:ec:e8:7b: 07:50:12:d5:4d:12:fe:5c:8c:e8:15:a5:d2:3f:0b: e2:90:2c:b1:ab:63:6c:9a:13:5f:e0:7e:49:e7:3c: fa:1c:07:c2:53:5f:a6:5e:9a:13:81:6a:78:dc:b4: a6:85:3f:23:57:2b:19:a4:87:52:97:21:f4:96:52: 30:6c:a6:8c:64:0d:2d:d2:15:11:f3:72:3b:71:2e: f6:6a:f2:15:8b:c2:65:2d:93:cb:53:a3:f5:08:91: 66:8f:ce:0e:d2:33:4d:4f:8e:a7:60:59:a8:ca:59: 1a:ed:76:99:61:87:c0:83:c5:3c:67:b5:96:8e:8e: cc:14:55:b7:20:32:81:20:c0:52:78:28:b8:9c:49: 15:45:9e:c6:04:72:f6:4a:ad:d5:75:4e:4e:1d:86: 40:d8:8e:4a:22:a4:84:8e:3f:32:e6:82:49:a5:e5: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:98:B4:88:5C:3C:59:D7:B6:B8:31:AC:87:8E:F5:C6:B5:20:4C:1A X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:58:0f:bd:4e:74:df:a6:40:37:cb:ef:e9:cd:4f:b1:0b: c9:c0:88:62:0f:16:45:36:22:7d:d2:10:80:a7:3a:2e:7d:cd: 5d:9c:02:35:bc:c8:88:b0:16:95:06:b4:76:e9:cb:aa:bb:84: 31:7e:50:61:50:33:c8:30:d1:f0:9b:60:d6:1f:84:3f:fa:e5: e5:e8:0b:d8:f4:d3:f0:90:8d:d9:bd:1b:51:8a:31:c7:bc:44: 04:ce:d9:77:de:44:64:79:fa:59:f5:81:d5:12:83:ef:aa:d9: 68:f1:6f:6b:ec:3b:bc:bb:65:1a:80:39:62:17:01:fe:27:73: 30:e2:cb:cd:2b:20:8e:9a:12:d3:db:df:fa:d8:8d:09:f4:34: 29:c5:8b:18:02:63:7b:e1:e4:68:29:44:5f:e3:f6:6b:9f:65: c5:52:1b:96:e4:3e:fb:59:1d:e2:3f:77:b5:85:99:49:24:72: d0:a6:43:b0:47:8c:42:db:a6:97:ee:ff:0e:f3:9a:0a:dc:9b: 43:0a:80:26:cd:81:98:23:74:d0:12:13:0a:b2:bb:ac:75:6d: 32:e6:c9:5f:0b:ba:39:6c:7a:bc:01:83:75:16:ea:69:5c:55: e3:01:34:ab:f5:59:fc:65:90:e2:94:57:c0:7a:b6:6e:2f:ec: 0f:61:58:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjYwNTIwMTc1NjI0WhcNMjYwNTI3MTc1NjI0WjAYMRYwFAYD VQQDEw02YTBkZjVjOC0xM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmmPgXyfebGr5MNEBfDKaOt3saOXVQk/9J4C6a8hlUvImvWwqrncKUX7ZE7J iPKILlnYxETWVtyaHpmwuApyeeNKlr2m6AgnoJOVNzPP6Mq/1kqySMPs6HsHUBLV TRL+XIzoFaXSPwvikCyxq2NsmhNf4H5J5zz6HAfCU1+mXpoTgWp43LSmhT8jVysZ pIdSlyH0llIwbKaMZA0t0hUR83I7cS72avIVi8JlLZPLU6P1CJFmj84O0jNNT46n YFmoylka7XaZYYfAg8U8Z7WWjo7MFFW3IDKBIMBSeCi4nEkVRZ7GBHL2Sq3VdU5O HYZA2I5KIqSEjj8y5oJJpeWRmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKYtIhc PFnXtrgxrIeO9ca1IEwaMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYVxYD71OdN+mQDfL7+nNT7ELycCIYg8WRTYifdIQgKc6Ln3NXZwCNbzIiLAW lQa0dunLqruEMX5QYVAzyDDR8Jtg1h+EP/rl5egL2PTT8JCN2b0bUYoxx7xEBM7Z d95EZHn6WfWB1RKD76rZaPFva+w7vLtlGoA5YhcB/idzMOLLzSsgjpoS09vf+tiN CfQ0KcWLGAJje+HkaClEX+P2a59lxVIbluQ++1kd4j93tYWZSSRy0KZDsEeMQtum l+7/DvOaCtybQwqAJs2BmCN00BITCrK7rHVtMubJXwu6OWx6vAGDdRbqaVxV4wE0 q/VZ/GWQ4pRXwHq2bi/sD2FYTg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:03 2026 by rpki-client