$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft File: ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json) Hash identifier: k88dJjhWKlIhOnhIH3ye2of12g7csMftsq/8jaemJEY= Subject key identifier: E5:FF:B4:E8:27:A8:C5:83:8D:F3:EF:C0:33:3E:5D:E1:AA:C3:AA:A0 Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5 Certificate issuer: /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft Manifest number: 24 Signing time: Thu 21 May 2026 09:00:58 +0000 Manifest this update: Thu 21 May 2026 09:00:57 +0000 Manifest next update: Thu 28 May 2026 09:00:57 +0000 Files and hashes: 1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: 23ltwY8uziQ11oCnxBNJeRO+VTH0DBcqwY06Wv3SLIw=) 2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5 Validity Not Before: May 21 09:00:57 2026 GMT Not After : May 28 09:00:57 2026 GMT Subject: CN=6a0ec9ca-2dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1b:0e:a4:52:53:f5:f7:74:94:12:75:24:52: 3d:9e:9f:05:dc:b6:22:c3:20:68:92:39:2f:ff:01: 58:ea:b9:c7:7a:23:fd:95:49:1a:82:0b:27:16:d7: 68:d5:91:ac:88:f9:5d:2a:5a:91:01:ac:e2:ba:6a: 89:90:bf:3f:1a:4c:9b:ad:cd:73:f6:92:8f:53:be: f2:00:08:77:ab:86:97:01:97:f2:24:aa:39:bb:f6: 9a:93:b9:ea:52:db:d1:b4:8e:6b:30:77:f1:b2:db: 62:56:5f:3d:eb:b8:2f:c8:9c:05:22:6b:7f:09:60: 22:00:ba:2b:50:ce:60:6a:72:cc:10:f5:69:7b:25: e4:32:16:e5:5e:16:d4:01:49:c5:31:68:2e:f6:94: a2:32:e0:89:7f:3f:aa:c3:ad:51:e8:a8:31:77:eb: 11:19:37:04:88:7e:0b:c9:53:38:c1:55:79:03:30: a9:80:f6:e2:af:65:42:dd:f8:e3:be:5f:32:d8:28: 78:31:d3:4d:fe:9f:18:6a:c1:e9:e8:64:00:a6:12: 86:68:2d:36:ff:a1:58:ba:ed:60:7b:d2:5e:93:82: 0d:f4:ef:8a:96:85:e6:6c:52:c6:7e:39:d8:95:f1: 3e:82:5c:28:f5:e5:ad:88:2e:86:3a:a6:e4:66:5b: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FF:B4:E8:27:A8:C5:83:8D:F3:EF:C0:33:3E:5D:E1:AA:C3:AA:A0 X509v3 Authority Key Identifier: keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:38:c0:f2:93:27:39:23:16:5a:6d:13:8c:ab:fc:03:d7:1f: 1c:ce:90:79:43:99:5c:70:5d:c9:84:be:e1:56:aa:9e:2b:72: f1:03:ec:5f:6f:8d:f2:f9:a1:96:15:54:db:81:e3:7a:c9:9d: a5:d2:7f:fe:f0:b7:70:9a:2a:d9:6b:db:77:a3:a7:d9:c6:cb: 79:8a:2a:f4:23:4d:7b:ec:09:9d:ec:6e:2b:1c:1b:e7:52:53: e6:b0:58:89:a9:be:70:14:f2:fe:58:cc:26:f2:ef:22:69:0d: 96:7f:bb:df:fd:86:bd:53:95:63:9b:56:21:d0:01:1d:02:66: f9:72:da:bb:2f:93:ab:6d:39:ff:f2:bc:79:b1:5e:59:68:f6: ac:ae:6f:e0:0d:2d:a3:5a:7f:6e:17:3d:00:af:ec:5f:2f:fd: f7:d0:a4:b6:2b:e9:11:10:6b:77:9d:88:0f:34:31:25:a3:bd: 6e:ba:52:12:b9:e7:67:fd:94:9e:9f:43:f9:29:03:ff:5c:d1: b9:86:e9:eb:73:ab:8b:18:1e:2c:ea:6e:39:15:fb:22:7b:6c: 84:df:b5:9c:10:b1:7a:31:12:52:2b:54:a5:29:45:0e:e3:9d: 80:14:58:40:e2:90:39:ed:fb:8f:23:17:81:8a:be:c3:cd:77: a4:80:6d:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUEwMzExMC8GA1UEBRMoODlFMzY5M0I3MTIzNjhCMEZBQ0U2QkE0RTQ2Nzk3MDhB RjM5MzhCNTAeFw0yNjA1MjEwOTAwNTdaFw0yNjA1MjgwOTAwNTdaMBgxFjAUBgNV BAMTDTZhMGVjOWNhLTJkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeGw6kUlP193SUEnUkUj2enwXctiLDIGiSOS//AVjqucd6I/2VSRqCCycW12jV kayI+V0qWpEBrOK6aomQvz8aTJutzXP2ko9TvvIACHerhpcBl/Ikqjm79pqTuepS 29G0jmswd/Gy22JWXz3ruC/InAUia38JYCIAuitQzmBqcswQ9Wl7JeQyFuVeFtQB ScUxaC72lKIy4Il/P6rDrVHoqDF36xEZNwSIfgvJUzjBVXkDMKmA9uKvZULd+OO+ XzLYKHgx003+nxhqwenoZACmEoZoLTb/oVi67WB70l6Tgg3074qWheZsUsZ+OdiV 8T6CXCj15a2ILoY6puRmW3JzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5f+06Ceo xYON8+/AMz5d4arDqqAwHwYDVR0jBBgwFoAUieNpO3EjaLD6zmuk5GeXCK85OLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0FFNzA5QTBDMjRE QzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxENnptdWs1R2VYQ0s4NU9M VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWVOcE8zRWphTEQ2em11azVHZVhDSzg1T0xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF QTAzL0FFNzA5QTBDMjREQzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxE NnptdWs1R2VYQ0s4NU9MVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMOMDykyc5IxZabROMq/wD1x8czpB5Q5lccF3JhL7hVqqeK3LxA+xfb43y+aGW FVTbgeN6yZ2l0n/+8LdwmirZa9t3o6fZxst5iir0I0177Amd7G4rHBvnUlPmsFiJ qb5wFPL+WMwm8u8iaQ2Wf7vf/Ya9U5Vjm1Yh0AEdAmb5ctq7L5OrbTn/8rx5sV5Z aPasrm/gDS2jWn9uFz0Ar+xfL/330KS2K+kREGt3nYgPNDElo71uulISuedn/ZSe n0P5KQP/XNG5hunrc6uLGB4s6m45Ffsie2yE37WcELF6MRJSK1SlKUUO452AFFhA 4pA57fuPIxeBir7DzXekgG2b -----END CERTIFICATE-----Generated at Thu May 21 12:18:41 2026 by rpki-client