$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: ks+r+zDCLP7YCi/7+/j70hh79TETcK6tCHYPqrUPDRI= Subject key identifier: 2B:9B:67:46:BC:A4:1C:8F:EE:A8:37:48:6A:B8:ED:96:33:13:17:19 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 01BA Signing time: Tue 05 May 2026 04:01:07 +0000 Manifest this update: Tue 05 May 2026 04:01:07 +0000 Manifest next update: Tue 12 May 2026 04:01:07 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: YOPgavuzObkKqSRiUxIUlxBL1ZhGiO5rVdDQFHF5rpc=) 2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=) 3: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=) 4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: sy22vtii4K2errt2UOSSRnhaS+2ZGSF4IEAlJ6QMyT8=) 5: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=) 6: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=) 7: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: May 5 04:01:07 2026 GMT Not After : May 12 04:01:07 2026 GMT Subject: CN=69f96b83-7ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:f7:c5:c6:46:33:f6:0c:ed:2b:6d:5c:45: 3e:78:e3:53:f5:3a:75:5e:6a:b6:5e:d5:d8:59:5c: 6a:3f:a4:3b:e6:7c:9d:32:35:bc:94:c0:9a:43:4b: bc:00:0b:c7:4d:f0:52:2e:a3:58:63:3f:a4:c9:9e: ce:0c:48:42:08:3e:ae:d5:d3:43:d5:3e:18:e6:41: 92:15:c7:5a:22:a4:15:9d:f4:2e:ec:f0:55:cc:43: 22:2a:71:2d:e8:98:03:16:59:f0:17:97:29:8e:09: 15:9c:f9:59:48:25:40:c4:06:d0:5e:8e:f6:ee:95: 5c:be:fd:e8:10:4a:bb:80:70:50:6e:22:4f:02:78: b1:4a:05:1b:4d:a0:f4:3a:ff:9e:ab:4f:2c:05:a8: 9f:22:b5:cb:57:1f:49:cc:6a:9a:50:da:0b:a8:e4: e1:2d:c0:81:3a:4c:09:0f:f8:3d:2e:4a:d6:c6:f4: 1f:5e:66:af:f4:1a:9a:17:92:47:49:6f:ff:cd:bf: 70:ba:70:57:a0:c9:d8:d9:b3:e0:69:d9:fc:ef:23: a5:ac:b9:e9:45:ae:f3:f9:86:91:82:d7:f4:58:cc: 31:28:97:82:bc:e8:b7:c9:be:e4:59:8b:9f:97:54: ef:4f:77:9d:8c:e6:05:99:c4:e7:ca:2f:ce:15:fa: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9B:67:46:BC:A4:1C:8F:EE:A8:37:48:6A:B8:ED:96:33:13:17:19 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:fc:75:43:57:8c:a6:53:13:d7:44:a2:d2:61:63:75:eb:5e: ff:01:93:b0:19:6d:f1:13:70:fa:15:81:a7:15:65:2c:34:07: e1:1c:f5:0d:6f:d4:d8:b0:08:ae:a7:e7:cf:96:e5:f8:d5:e7: 09:fa:90:8b:63:ae:fa:05:74:86:a0:17:bf:f1:47:d8:e2:34: 42:dc:8e:33:1c:59:5a:c6:cb:d0:ce:5a:53:aa:bc:62:f9:56: e3:41:82:f1:46:6d:80:41:92:fa:9e:dc:bd:7d:b4:b3:09:e7: 03:a1:5f:79:da:f7:97:49:01:41:65:c2:ad:20:19:7c:09:24: 52:78:4c:db:23:67:09:4a:52:9b:75:07:e1:41:81:c6:21:13: 16:57:73:a2:57:c0:8a:27:b4:e6:9d:6d:bd:1e:91:9e:54:d6: 08:56:24:71:22:06:09:d4:61:5d:71:a9:4e:67:17:4d:bf:1a: 5e:4c:7e:09:1a:0b:3a:30:7a:7f:1c:c0:d2:16:b5:f2:25:5d: f1:fe:7a:64:db:c7:c6:04:79:b8:8c:82:8d:d4:0f:fd:c1:99: 03:66:9f:18:52:67:d0:e2:43:67:0b:76:6a:83:0f:14:99:43: c2:d2:f2:dc:43:88:31:14:d1:9c:7f:6f:f7:82:38:78:a8:b3: 1d:b5:3c:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjYwNTA1MDQwMTA3WhcNMjYwNTEyMDQwMTA3WjAYMRYwFAYD VQQDEw02OWY5NmI4My03YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvr3xcZGM/YM7SttXEU+eONT9Tp1Xmq2XtXYWVxqP6Q75nydMjW8lMCaQ0u8 AAvHTfBSLqNYYz+kyZ7ODEhCCD6u1dND1T4Y5kGSFcdaIqQVnfQu7PBVzEMiKnEt 6JgDFlnwF5cpjgkVnPlZSCVAxAbQXo727pVcvv3oEEq7gHBQbiJPAnixSgUbTaD0 Ov+eq08sBaifIrXLVx9JzGqaUNoLqOThLcCBOkwJD/g9LkrWxvQfXmav9BqaF5JH SW//zb9wunBXoMnY2bPgadn87yOlrLnpRa7z+YaRgtf0WMwxKJeCvOi3yb7kWYuf l1TvT3edjOYFmcTnyi/OFfol5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCubZ0a8 pByP7qg3SGq47ZYzExcZMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt/x1Q1eMplMT10Si0mFjdete/wGTsBlt8RNw+hWBpxVlLDQH4Rz1DW/U2LAI rqfnz5bl+NXnCfqQi2Ou+gV0hqAXv/FH2OI0QtyOMxxZWsbL0M5aU6q8YvlW40GC 8UZtgEGS+p7cvX20swnnA6Ffedr3l0kBQWXCrSAZfAkkUnhM2yNnCUpSm3UH4UGB xiETFldzolfAiie05p1tvR6RnlTWCFYkcSIGCdRhXXGpTmcXTb8aXkx+CRoLOjB6 fxzA0ha18iVd8f56ZNvHxgR5uIyCjdQP/cGZA2afGFJn0OJDZwt2aoMPFJlDwtLy 3EOIMRTRnH9v94I4eKizHbU8Qw== -----END CERTIFICATE-----Generated at Wed May 6 06:29:17 2026 by rpki-client