$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: SzRN42Ygtf9WHxmOHZSS+QvV4rBnt0ZftBXpLFGmTuM= Subject key identifier: 63:9E:40:18:EA:90:D0:7B:CF:9F:D7:95:BC:73:9B:DB:E0:A1:15:5B Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 0202 Signing time: Thu 21 May 2026 03:11:00 +0000 Manifest this update: Thu 21 May 2026 03:11:00 +0000 Manifest next update: Thu 28 May 2026 03:11:00 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: GIhpIabfeKMVMF6s8QzX5lLtfjyRZ/hL3V2nKFvBDhM=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: AF0W4FDa8CoBiD6z3FUESJd4F8PISKrGbqKu0L1rR38=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: opDVDCbsBQzHpTdEZkXg8pK+yXFCw2wR9EtK3a8UOv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: May 21 03:11:00 2026 GMT Not After : May 28 03:11:00 2026 GMT Subject: CN=6a0e77c4-4f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:8c:c2:f9:b3:ac:7d:81:3a:31:14:99:ab: ec:2b:ad:ca:8b:ab:38:ca:b4:18:a0:fb:57:74:ce: 83:18:b3:6f:a2:28:3e:76:b1:6f:07:5a:04:e9:82: 3c:c7:ea:fd:2b:9f:36:67:c4:c6:43:3e:bb:62:4f: 0d:7d:fd:fa:62:b8:e7:2b:7a:e0:9b:dc:60:95:84: ca:b6:e9:42:c5:9a:64:7e:de:08:6c:dc:81:3e:8e: 05:ca:b5:36:ff:a1:df:7c:14:50:eb:b7:d3:17:1b: b6:00:be:e2:c9:0b:f9:5f:ea:85:12:fb:9c:a0:f2: 4e:db:7e:0a:de:20:f4:43:26:d2:33:7f:05:a0:ae: e9:5a:fd:2c:bb:be:3d:86:0e:6e:d6:20:03:49:1f: 07:b6:71:37:21:73:41:d7:ec:60:7b:f3:d7:e9:bf: 81:df:ca:97:53:f2:96:ec:b4:9e:62:ba:d9:6e:ef: ff:f3:18:81:2a:28:c4:1f:13:d2:29:f4:86:29:16: d8:55:5f:27:2e:63:36:6a:a6:36:94:9d:fb:db:22: 07:b0:67:f9:1d:7e:27:de:01:df:8e:3d:5e:b9:ba: 62:fc:f0:42:2c:d4:0b:7e:9c:62:61:ba:6b:47:b5: 14:77:5a:f2:aa:a7:29:13:94:be:c2:06:26:e0:a2: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:40:18:EA:90:D0:7B:CF:9F:D7:95:BC:73:9B:DB:E0:A1:15:5B X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c7:d5:89:41:2e:6f:25:ac:92:3a:b1:0e:75:d4:4b:dd:8e: 34:4c:5c:02:33:4c:73:5a:55:df:4f:c6:1f:8f:d5:d1:8a:d6: fc:09:63:4a:59:69:6b:7d:5d:16:5a:31:9c:09:67:08:15:bb: d1:10:dd:28:50:ef:73:ef:5b:28:59:a7:66:b1:c8:ec:de:c8: e7:8a:0c:cb:90:c2:81:b6:20:4a:1b:5b:97:d8:94:cb:01:8e: 24:67:ff:fb:fb:6c:03:94:48:50:37:4e:20:0e:57:0a:a9:e2: 64:a9:07:7e:76:dc:54:4d:fa:6e:4e:a0:8e:5d:9e:c5:d2:37: 91:13:23:31:11:3b:e9:f9:9e:7d:26:66:b9:65:17:33:79:4e: e2:16:6d:a2:de:41:79:7a:17:38:15:a7:cc:a9:8d:ce:c7:1b: e4:50:54:7c:ec:e7:08:47:3f:17:2e:50:8e:19:18:c1:cb:13: e8:cc:da:d6:10:77:4c:f8:67:cc:e5:48:83:a5:35:79:a2:2f: a8:29:13:f8:e2:23:42:53:38:dc:6e:f1:7e:08:bf:dd:f8:dd: e4:ba:67:67:91:46:8d:ee:08:1a:aa:7b:3a:1f:35:79:b5:e6: 5d:5f:c8:5c:f7:a8:de:f2:c6:50:5c:bd:e6:7b:0c:b2:5c:57: 07:75:0c:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjYwNTIxMDMxMTAwWhcNMjYwNTI4MDMxMTAwWjAYMRYwFAYD VQQDEw02YTBlNzdjNC00Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArneMwvmzrH2BOjEUmavsK63Ki6s4yrQYoPtXdM6DGLNvoig+drFvB1oE6YI8 x+r9K582Z8TGQz67Yk8Nff36YrjnK3rgm9xglYTKtulCxZpkft4IbNyBPo4FyrU2 /6HffBRQ67fTFxu2AL7iyQv5X+qFEvucoPJO234K3iD0QybSM38FoK7pWv0su749 hg5u1iADSR8HtnE3IXNB1+xge/PX6b+B38qXU/KW7LSeYrrZbu//8xiBKijEHxPS KfSGKRbYVV8nLmM2aqY2lJ372yIHsGf5HX4n3gHfjj1eubpi/PBCLNQLfpxiYbpr R7UUd1ryqqcpE5S+wgYm4KKLawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOeQBjq kNB7z5/Xlbxzm9vgoRVbMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApsfViUEubyWskjqxDnXUS92ONExcAjNMc1pV30/GH4/V0YrW/AljSllpa31d FloxnAlnCBW70RDdKFDvc+9bKFmnZrHI7N7I54oMy5DCgbYgShtbl9iUywGOJGf/ +/tsA5RIUDdOIA5XCqniZKkHfnbcVE36bk6gjl2exdI3kRMjMRE76fmefSZmuWUX M3lO4hZtot5BeXoXOBWnzKmNzscb5FBUfOznCEc/Fy5QjhkYwcsT6Mza1hB3TPhn zOVIg6U1eaIvqCkT+OIjQlM43G7xfgi/3fjd5LpnZ5FGje4IGqp7Oh81ebXmXV/I XPeo3vLGUFy95nsMslxXB3UMQw== -----END CERTIFICATE-----Generated at Thu May 21 10:15:58 2026 by rpki-client