$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: cZZ3mcfgBXyyEuBmF0YE8juf1Fepew1kTrT7SlmCq58= Subject key identifier: E2:48:0F:DB:D4:F3:8E:AE:46:90:84:CE:F1:A0:27:41:7A:8A:AB:31 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 195E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 1954 Signing time: Wed 20 May 2026 16:25:24 +0000 Manifest this update: Wed 20 May 2026 16:25:24 +0000 Manifest next update: Wed 27 May 2026 16:25:24 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: 5ha9kN77396fTtfAvFECVu/gLnO6mN+aWgyp8MIcAOM=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: YEfPuupkj6+rYgnnK9KPFgtKEqtP8lyWUzvWsUKBop0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6494 (0x195e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: May 20 16:25:24 2026 GMT Not After : May 27 16:25:24 2026 GMT Subject: CN=6a0de074-edcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:29:34:4e:30:d5:9c:38:c1:53:a1:13:7e: ed:ab:fc:cb:e6:f7:0c:33:49:99:c5:86:2b:7c:46: 39:aa:16:87:67:b3:bd:b0:40:a5:ca:a0:87:5a:19: 62:9a:1a:22:ee:62:7c:c9:85:c4:70:64:89:0d:26: a9:f9:96:e1:21:5f:21:4c:ba:c0:e1:8b:3d:5d:fa: 68:b8:e7:7e:f9:94:40:73:ce:70:a8:d5:b4:49:54: 84:27:e1:ea:fd:74:5e:bb:1f:c8:a5:fd:7d:0a:03: 84:b9:48:d0:74:00:c2:02:f1:a6:f6:cd:ec:b8:2a: 0a:dd:af:d9:ab:67:91:49:ad:aa:da:08:56:1c:bf: b6:26:b1:cf:4d:56:49:e7:d0:1f:dd:af:41:ab:f0: eb:eb:33:21:95:ff:b3:b1:f7:16:42:df:a3:0c:44: 5f:1c:86:25:a2:b1:16:f5:86:de:c3:12:d1:14:8e: 09:1c:26:2e:c9:2c:a0:45:d1:6b:7d:0b:59:5b:a2: 49:fe:16:da:39:87:24:41:1c:04:4d:4c:fc:2b:4c: c9:49:20:e1:49:47:1a:6f:f6:35:88:4e:43:29:f7: a2:54:fe:ef:81:c6:3c:dd:15:f9:da:c8:78:ce:d0: af:1d:36:cb:ac:cd:06:d5:27:83:27:55:77:97:9c: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:48:0F:DB:D4:F3:8E:AE:46:90:84:CE:F1:A0:27:41:7A:8A:AB:31 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:ee:22:70:98:eb:68:bd:1e:86:74:f3:2a:23:f6:3c:74: d1:82:83:d6:80:f0:2a:83:87:8b:56:3e:dd:9b:c4:fc:18:a5: a8:49:00:31:f2:29:2b:95:62:b3:78:cf:15:ba:53:49:c6:be: 88:21:c3:04:13:79:54:c5:03:a2:56:a8:61:74:68:26:d0:9b: 31:94:76:c3:27:35:81:f9:7a:87:14:f5:05:45:3c:4f:0f:04: 35:7a:51:ff:45:aa:09:bb:13:a7:31:95:d3:20:d6:de:b9:2c: 64:7b:58:20:28:26:75:5e:68:58:77:b1:c0:a7:b2:da:d5:4c: af:00:b2:1e:eb:7f:bf:72:32:64:18:15:d7:52:e8:9d:37:27: f1:86:d8:51:f2:3d:f3:4b:d7:26:b5:ba:41:2e:4f:a9:fa:67: a9:59:c1:4e:1a:b7:bf:eb:6e:82:6b:4b:63:3b:7f:15:3b:17: 90:b1:80:94:16:42:c8:d5:20:77:be:34:d8:75:9e:0c:49:1a: e0:f2:89:1b:e8:78:c3:78:4c:93:9b:bd:43:e2:1e:6a:3f:d3: 0c:f1:8d:e0:68:5f:b8:43:85:e3:65:7d:e6:e3:3e:c8:a0:d0: 33:df:b4:24:9a:71:0f:2c:c8:b6:e2:60:f0:e1:3e:eb:98:ec: bc:8a:01:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjYwNTIwMTYyNTI0WhcNMjYwNTI3MTYyNTI0WjAYMRYwFAYD VQQDEw02YTBkZTA3NC1lZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucIpNE4w1Zw4wVOhE37tq/zL5vcMM0mZxYYrfEY5qhaHZ7O9sEClyqCHWhli mhoi7mJ8yYXEcGSJDSap+ZbhIV8hTLrA4Ys9XfpouOd++ZRAc85wqNW0SVSEJ+Hq /XReux/Ipf19CgOEuUjQdADCAvGm9s3suCoK3a/Zq2eRSa2q2ghWHL+2JrHPTVZJ 59Af3a9Bq/Dr6zMhlf+zsfcWQt+jDERfHIYlorEW9YbewxLRFI4JHCYuySygRdFr fQtZW6JJ/hbaOYckQRwETUz8K0zJSSDhSUcab/Y1iE5DKfeiVP7vgcY83RX52sh4 ztCvHTbLrM0G1SeDJ1V3l5yfFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJID9vU 846uRpCEzvGgJ0F6iqsxMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAC/uInCY62i9HoZ08yoj9jx00YKD1oDwKoOHi1Y+3ZvE/BilqEkAMfIpK5Vi s3jPFbpTSca+iCHDBBN5VMUDolaoYXRoJtCbMZR2wyc1gfl6hxT1BUU8Tw8ENXpR /0WqCbsTpzGV0yDW3rksZHtYICgmdV5oWHexwKey2tVMrwCyHut/v3IyZBgV11Lo nTcn8YbYUfI980vXJrW6QS5PqfpnqVnBThq3v+tugmtLYzt/FTsXkLGAlBZCyNUg d7402HWeDEka4PKJG+h4w3hMk5u9Q+Ieaj/TDPGN4GhfuEOF42V95uM+yKDQM9+0 JJpxDyzItuJg8OE+65jsvIoByg== -----END CERTIFICATE-----Generated at Thu May 21 10:29:04 2026 by rpki-client