$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json) Hash identifier: pDv8sa2Vq11bKBxrQFMwXoZ19L27evkOoD+fQioWq0A= Subject key identifier: C2:7E:8D:2B:94:71:9B:3E:D7:6E:53:57:C9:78:32:DF:A6:0A:DC:1B Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft Manifest number: 05C3 Signing time: Wed 20 May 2026 23:12:02 +0000 Manifest this update: Wed 20 May 2026 23:12:02 +0000 Manifest next update: Wed 27 May 2026 23:12:02 +0000 Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: U4QcNL8Qtmep4RqvpsUIa4L6G9l/7zh7LL+xRLJZx6c=) 2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: wN2IZ9Tp9dRoIakSTTLA1uLNoPM2YPK4OBU3DnTtTPk=) 3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: xIAIlJ7v8ECTIXnt1C8XuSoM0aGHLELefgFDc8efrDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: May 20 23:12:02 2026 GMT Not After : May 27 23:12:02 2026 GMT Subject: CN=6a0e3fc2-bb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:34:a6:f3:36:b3:86:71:c9:ec:e3:62:55: 3c:fc:7d:d2:d3:9a:40:75:92:1c:99:b3:6f:5c:b8: 28:7d:12:f7:f2:e4:aa:88:ec:0e:73:04:18:8b:ed: f1:b3:b9:32:f9:e3:06:72:77:35:3f:3a:d9:40:f7: ec:e9:6c:b8:5c:1b:e4:a8:49:cd:ce:31:bb:32:9e: 37:84:02:31:d4:24:42:28:96:9d:6a:96:df:53:f6: 7c:3f:ed:30:c8:4e:ad:0b:2f:b4:ee:76:26:3c:0d: 9a:0f:42:94:0b:85:95:1d:54:31:f0:a4:8b:fc:4e: fd:f0:a0:f9:e8:5f:c8:62:0f:63:88:0c:d8:3e:9a: dc:e5:19:44:ca:1d:98:fb:7d:b8:b5:7f:f2:fa:48: 1a:99:b8:9b:5b:77:dd:08:98:b5:ff:ee:21:24:42: 0c:5b:1c:24:f9:6e:c5:2d:17:a0:7e:b0:2d:90:a8: ab:04:66:c9:55:af:49:1a:a0:8d:0a:07:d8:c0:23: fc:9d:0c:c5:74:8d:3c:4b:0a:8c:ee:9a:f5:f2:4a: f4:ad:af:2b:50:5d:a2:51:03:14:5f:4d:f1:9c:ad: 66:4a:5f:fb:ae:22:fd:a2:02:bb:37:39:a2:78:bf: e8:4b:da:32:66:57:9d:fc:d5:98:d9:7a:ef:96:75: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:8D:2B:94:71:9B:3E:D7:6E:53:57:C9:78:32:DF:A6:0A:DC:1B X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:38:84:96:0c:0b:20:2d:05:4b:c0:c4:f8:b6:89:43:62: bc:74:8d:ab:bb:b4:a8:2f:9d:f3:dd:8c:57:be:16:4e:f1:69: db:80:d4:e6:fc:bf:4f:ee:72:41:ef:51:fd:10:70:48:17:cb: 2a:02:b4:3d:d4:63:5b:59:4f:31:6e:0e:5b:25:c5:f9:dc:29: 30:8c:51:0d:c5:a7:a1:07:4a:41:25:53:41:a8:e9:79:b8:dd: 24:46:01:ce:be:ca:6e:ed:1b:89:38:07:a6:70:49:af:22:26: 09:52:9e:b9:71:6b:0a:d0:14:e5:ee:76:a9:68:7f:6a:ba:c7: 94:61:a3:72:de:c0:ba:01:2f:a1:b8:39:f7:c7:3b:e2:0f:77: 40:c1:e5:fb:7e:4b:91:14:7a:85:37:f1:d6:a4:d8:a2:a4:99: eb:84:ac:fa:b2:5c:e8:22:fe:3d:99:c4:cd:3d:61:9c:a8:fb: 71:ec:38:bf:ba:6f:4d:ab:4d:2f:76:c0:be:1c:4c:1a:96:3a: d1:4e:11:1b:44:0a:f1:3b:21:44:ae:d3:0d:19:c1:8b:17:c8: d2:b1:ad:fb:09:9c:78:d0:98:3e:27:bc:7a:bd:5b:30:a7:f1: 2a:16:05:cb:75:4d:e7:b4:b8:98:de:b7:d7:98:26:4e:0f:8e: fb:82:1a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjYwNTIwMjMxMjAyWhcNMjYwNTI3MjMxMjAyWjAYMRYwFAYD VQQDEw02YTBlM2ZjMi1iYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLY0pvM2s4ZxyezjYlU8/H3S05pAdZIcmbNvXLgofRL38uSqiOwOcwQYi+3x s7ky+eMGcnc1PzrZQPfs6Wy4XBvkqEnNzjG7Mp43hAIx1CRCKJadapbfU/Z8P+0w yE6tCy+07nYmPA2aD0KUC4WVHVQx8KSL/E798KD56F/IYg9jiAzYPprc5RlEyh2Y +324tX/y+kgambibW3fdCJi1/+4hJEIMWxwk+W7FLRegfrAtkKirBGbJVa9JGqCN CgfYwCP8nQzFdI08SwqM7pr18kr0ra8rUF2iUQMUX03xnK1mSl/7riL9ogK7Nzmi eL/oS9oyZled/NWY2XrvlnUYEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJ+jSuU cZs+125TV8l4Mt+mCtwbMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqIA4hJYMCyAtBUvAxPi2iUNivHSNq7u0qC+d892MV74WTvFp24DU5vy/T+5y Qe9R/RBwSBfLKgK0PdRjW1lPMW4OWyXF+dwpMIxRDcWnoQdKQSVTQajpebjdJEYB zr7Kbu0biTgHpnBJryImCVKeuXFrCtAU5e52qWh/arrHlGGjct7AugEvobg598c7 4g93QMHl+35LkRR6hTfx1qTYoqSZ64Ss+rJc6CL+PZnEzT1hnKj7cew4v7pvTatN L3bAvhxMGpY60U4RG0QK8TshRK7TDRnBixfI0rGt+wmceNCYPie8er1bMKfxKhYF y3VN57S4mN6315gmTg+O+4IaUg== -----END CERTIFICATE-----Generated at Thu May 21 13:23:45 2026 by rpki-client