$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: woWWcih2JPp9POYNWEUEcHJWjQMafpG6+sIQWBkorho= Subject key identifier: AC:2C:61:66:34:49:36:3E:35:2F:6C:7E:90:40:C7:E8:17:FC:EF:06 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 07D4 Signing time: Mon 04 May 2026 21:30:32 +0000 Manifest this update: Mon 04 May 2026 21:30:31 +0000 Manifest next update: Mon 11 May 2026 21:30:31 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: rK39KRZKD3gURp2RqzUS7lPu+jIfbBFd8fUc53rLUaI=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: Se/FydpBawCgxqmDdxPeEx3HviegkPK2hAJPQuttyZw=) 3: 9DFB3106BBB811F0B79DF618C4F9AE02.roa (hash: iNKOUL5bcAsjPyk0gyi4YQnAuK66K1Xutaj3LTMH5gE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: May 4 21:30:31 2026 GMT Not After : May 11 21:30:31 2026 GMT Subject: CN=69f90ff8-16c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:a6:d2:b8:4c:87:bf:ed:05:f1:ca:66:45: 07:3f:f0:4d:1d:63:26:d5:ae:4c:4c:ae:f5:90:8b: 67:92:ce:18:f5:72:61:27:cd:4c:e1:c3:a5:97:db: 78:1b:39:36:f8:f4:19:39:44:7b:2b:b9:6a:6e:0b: b5:aa:3f:5b:11:72:34:f5:77:55:73:36:f7:2d:87: 21:34:90:06:72:50:23:10:f3:10:f1:97:89:89:3e: ae:94:a3:6c:01:8f:0c:a2:a8:a8:55:e1:e7:51:2c: a6:fa:33:86:d8:4f:61:39:2f:67:0d:df:15:7c:25: c3:e2:f4:aa:4f:84:e8:ab:a7:41:b2:15:ba:55:cd: 2c:d4:aa:36:5e:a7:a5:2f:9b:41:2d:b6:90:a0:65: 76:ef:78:b8:cd:ef:37:9a:24:ba:e4:fd:a4:5d:74: 89:ad:c4:74:5e:20:e6:60:c8:5e:79:55:e0:64:c5: 24:b9:01:f4:f0:c2:1f:ee:86:d2:70:4c:ab:c6:15: 7c:82:4e:0c:c3:8f:6a:8e:c0:92:a9:0a:1e:35:e4: b1:c3:56:38:f8:94:16:3f:35:30:d6:74:da:64:33: 50:5c:db:83:c3:51:78:44:4d:fa:3c:84:e9:83:8b: 64:3a:2c:09:ab:f5:d0:3f:8c:ff:10:35:62:f8:e8: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:61:66:34:49:36:3E:35:2F:6C:7E:90:40:C7:E8:17:FC:EF:06 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:1c:bc:e0:3e:0b:c5:01:64:c6:ec:a4:48:9e:4d:c8:6e: 9b:32:c7:1b:10:49:2b:9d:34:a8:8b:50:b3:b4:72:4c:73:56: 4d:87:cc:0d:ba:69:e3:0b:42:2d:74:5d:e9:6f:fa:0d:28:9d: 21:c6:32:12:81:38:ec:d7:6a:bf:21:9d:7f:e6:37:05:e6:44: 8e:e2:73:cb:2c:28:40:09:84:e1:b6:a0:b9:62:ae:cd:6f:7c: a5:c6:f1:f0:d7:ac:25:f8:7a:ff:a2:df:78:51:18:40:0f:57: 4c:c3:a3:c9:4a:9d:03:e1:60:61:83:45:3f:49:e8:a4:27:6a: 2d:cd:a9:5c:fd:e6:e1:fe:e5:94:b4:11:84:47:43:f5:23:70: 95:81:05:8d:9f:ad:d7:89:00:98:a6:14:b0:de:28:c7:87:4d: db:1e:79:26:b3:03:42:bf:47:f2:b0:cb:2e:70:12:85:d0:c6: 58:78:40:52:d3:f5:21:c9:bd:20:da:53:1c:69:b6:2d:bf:e0: 6d:cc:3a:99:bf:14:c3:93:4a:25:e9:a8:db:30:b1:6f:0b:d4: 7b:c7:51:30:8f:46:78:58:e6:45:56:f8:6f:01:ec:55:e4:05: 3d:13:2b:47:65:36:c4:8a:6d:41:d7:94:2b:f5:06:86:9c:b7: a8:f6:39:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjYwNTA0MjEzMDMxWhcNMjYwNTExMjEzMDMxWjAYMRYwFAYD VQQDEw02OWY5MGZmOC0xNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiKm0rhMh7/tBfHKZkUHP/BNHWMm1a5MTK71kItnks4Y9XJhJ81M4cOll9t4 Gzk2+PQZOUR7K7lqbgu1qj9bEXI09XdVczb3LYchNJAGclAjEPMQ8ZeJiT6ulKNs AY8MoqioVeHnUSym+jOG2E9hOS9nDd8VfCXD4vSqT4Toq6dBshW6Vc0s1Ko2Xqel L5tBLbaQoGV273i4ze83miS65P2kXXSJrcR0XiDmYMheeVXgZMUkuQH08MIf7obS cEyrxhV8gk4Mw49qjsCSqQoeNeSxw1Y4+JQWPzUw1nTaZDNQXNuDw1F4RE36PITp g4tkOiwJq/XQP4z/EDVi+OjEfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwsYWY0 STY+NS9sfpBAx+gX/O8GMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifwcvOA+C8UBZMbspEieTchumzLHGxBJK500qItQs7RyTHNWTYfMDbpp4wtC LXRd6W/6DSidIcYyEoE47NdqvyGdf+Y3BeZEjuJzyywoQAmE4baguWKuzW98pcbx 8NesJfh6/6LfeFEYQA9XTMOjyUqdA+FgYYNFP0nopCdqLc2pXP3m4f7llLQRhEdD 9SNwlYEFjZ+t14kAmKYUsN4ox4dN2x55JrMDQr9H8rDLLnAShdDGWHhAUtP1Icm9 INpTHGm2Lb/gbcw6mb8Uw5NKJemo2zCxbwvUe8dRMI9GeFjmRVb4bwHsVeQFPRMr R2U2xIptQdeUK/UGhpy3qPY56Q== -----END CERTIFICATE-----Generated at Tue May 5 15:56:59 2026 by rpki-client