$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: pj+XZFoMcApLjMTBkpb5KFhC7/ws9RTROiXGEkSjvF8= Subject key identifier: 1F:44:34:B7:7C:D8:A5:CB:BC:E7:A6:C5:57:E0:9B:27:71:9D:DA:04 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 06F0 Signing time: Wed 20 May 2026 22:27:18 +0000 Manifest this update: Wed 20 May 2026 22:27:17 +0000 Manifest next update: Wed 27 May 2026 22:27:17 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: ZO2ePBIFRIsx12ckNW4Hxrq6XK7YXW3pULVqMHKWKzA=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: aaio9X7jltQXqJl+GwT+Oyhu5HboHbxMTjJ0svAwdfQ=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: pf1K+6UJXd5dAs7JKyICOO/jFMb69psfiJsvXQNbxBs=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: vKRLCMHI6DzeezZqcA22y1WOCwRUjFKs9GH1QdWcjCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: May 20 22:27:17 2026 GMT Not After : May 27 22:27:17 2026 GMT Subject: CN=6a0e3546-d8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:d5:ec:2c:e0:2c:91:35:2c:50:43:42:79: 79:04:d4:0b:ad:80:a0:e9:0d:ce:06:0f:4e:50:0d: da:c8:e3:18:b7:a9:f4:86:9b:14:15:9e:48:3f:0f: 21:df:d6:d7:f6:f3:a2:c6:4b:e2:68:58:cc:84:53: b9:23:5d:64:97:e2:bf:35:bf:cc:95:3c:8f:f8:c2: fd:29:aa:a3:51:47:f2:68:e7:8a:0a:83:35:4f:bb: ff:56:7a:cb:b4:e5:78:d6:2c:c6:9e:8e:c1:55:88: da:4e:d1:bf:7c:6e:19:7b:b9:4b:fb:12:6a:f6:c8: 28:52:47:bc:0d:6f:1c:29:56:b1:50:d2:3e:75:79: c8:a0:09:c3:32:bf:08:94:74:b1:2a:dd:b3:16:2b: 98:64:0d:27:f2:95:f9:d1:47:04:91:19:f3:d3:a3: b3:cf:42:f8:5e:a6:d9:61:1a:79:69:99:76:f3:bb: 8e:16:47:07:fd:f5:1b:18:8d:ef:1a:7c:e1:5c:af: 15:a0:05:9c:29:a5:da:20:de:f4:d9:8a:4c:39:77: a5:93:4e:3d:d4:98:2f:2a:1e:e9:78:4d:a3:56:75: 99:a4:18:ec:31:84:a8:ed:92:5b:ea:e4:aa:f6:8b: db:11:05:25:6b:3a:15:4d:3c:89:7e:cf:ee:d2:48: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:34:B7:7C:D8:A5:CB:BC:E7:A6:C5:57:E0:9B:27:71:9D:DA:04 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cc:de:fa:87:45:a8:2a:89:e5:8f:34:c7:de:e3:4c:b1:49: 0c:3d:97:04:0f:d6:26:16:8f:96:77:1c:a7:3e:75:fb:34:32: a3:f1:fb:d8:e9:5f:9d:15:bc:2f:6f:c8:6e:48:07:9a:bc:c1: 20:a4:d5:d0:fb:20:00:d0:18:10:c8:42:81:86:a0:d3:38:96: ca:4e:5a:7d:67:b1:4d:4f:d5:9c:41:0b:76:a7:2c:12:08:6b: 04:89:a6:9a:42:c6:da:e8:6d:bc:69:25:6d:2b:56:70:e6:03: 5f:9a:2f:11:8e:5c:e7:01:4f:e9:7a:45:15:93:7a:07:c4:c3: d2:e5:65:49:de:06:72:ee:44:40:81:25:ac:dc:48:d4:f3:f9: d4:dc:d7:bf:dc:b7:48:af:45:69:c0:19:ac:a3:c7:b9:e1:ec: bb:00:e5:32:fe:df:8e:83:5e:6c:43:46:1e:35:ef:e9:93:37: b9:26:bf:f6:59:c8:a0:29:5d:e3:fb:d5:d1:2a:70:3e:9c:f5: ab:be:98:d3:bb:8f:09:22:23:07:63:7d:af:f3:41:bc:0e:24: dd:da:8f:ec:86:c2:ac:f1:b0:d5:14:b8:fc:9e:9f:75:70:5b: 82:85:ae:19:69:74:8c:ec:5b:bd:ad:29:b7:1d:43:bd:50:7e: ed:fe:82:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjYwNTIwMjIyNzE3WhcNMjYwNTI3MjIyNzE3WjAYMRYwFAYD VQQDEw02YTBlMzU0Ni1kOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoDV7CzgLJE1LFBDQnl5BNQLrYCg6Q3OBg9OUA3ayOMYt6n0hpsUFZ5IPw8h 39bX9vOixkviaFjMhFO5I11kl+K/Nb/MlTyP+ML9KaqjUUfyaOeKCoM1T7v/VnrL tOV41izGno7BVYjaTtG/fG4Ze7lL+xJq9sgoUke8DW8cKVaxUNI+dXnIoAnDMr8I lHSxKt2zFiuYZA0n8pX50UcEkRnz06Ozz0L4XqbZYRp5aZl287uOFkcH/fUbGI3v GnzhXK8VoAWcKaXaIN702YpMOXelk0491JgvKh7peE2jVnWZpBjsMYSo7ZJb6uSq 9ovbEQUlazoVTTyJfs/u0kiczQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9ENLd8 2KXLvOemxVfgmydxndoEMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8ze+odFqCqJ5Y80x97jTLFJDD2XBA/WJhaPlnccpz51+zQyo/H72OlfnRW8 L2/IbkgHmrzBIKTV0PsgANAYEMhCgYag0ziWyk5afWexTU/VnEELdqcsEghrBImm mkLG2uhtvGklbStWcOYDX5ovEY5c5wFP6XpFFZN6B8TD0uVlSd4Gcu5EQIElrNxI 1PP51NzXv9y3SK9FacAZrKPHueHsuwDlMv7fjoNebENGHjXv6ZM3uSa/9lnIoCld 4/vV0SpwPpz1q76Y07uPCSIjB2N9r/NBvA4k3dqP7IbCrPGw1RS4/J6fdXBbgoWu GWl0jOxbva0ptx1DvVB+7f6CcQ== -----END CERTIFICATE-----Generated at Thu May 21 11:05:15 2026 by rpki-client