$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: nZh2ViMXo3lQXanWPU3K/7SEn9dioZ1UqkUnsayneFs= Subject key identifier: 02:B6:78:38:64:F8:F5:12:13:85:DB:BF:91:AC:E2:97:D4:1F:7E:1D Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0D04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0CF9 Signing time: Wed 20 May 2026 18:16:41 +0000 Manifest this update: Wed 20 May 2026 18:16:41 +0000 Manifest next update: Wed 27 May 2026 18:16:41 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: xoqVjw6Hwcw5AXu68AQSdyKaeo5D+N7amz+RJ+0i0ug=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: May 20 18:16:41 2026 GMT Not After : May 27 18:16:41 2026 GMT Subject: CN=6a0dfa89-fd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:23:3e:92:1d:46:50:37:2f:e0:5e:ff:00: 6d:76:a1:74:cc:02:93:a3:fc:53:0b:17:32:84:95: fa:bd:38:2a:3b:4e:d6:ef:44:6b:ab:89:62:a7:06: 40:af:19:46:88:0e:a6:2b:28:8b:b4:12:f1:a3:d9: 0a:87:db:eb:89:bc:c0:37:8b:1c:23:62:48:5b:91: b9:0e:f2:36:03:38:31:6c:0a:e5:1a:e5:90:2b:38: b4:dc:3b:cf:8a:13:7a:7a:39:ac:e3:97:6f:92:ef: 01:6e:53:c0:61:d5:67:bf:08:2d:d3:06:2c:1f:6b: cb:c4:f2:03:20:82:1d:17:ac:2b:e6:e6:ed:86:de: 33:01:ef:26:43:7d:3e:f7:62:32:13:c4:c6:d3:08: f5:7a:83:7b:12:d3:17:20:a8:df:2a:ea:62:69:8a: ec:bd:54:2c:99:de:e1:53:d5:99:cf:6c:c1:ac:d8: 16:24:75:94:e7:e0:61:e8:28:67:f9:f5:53:5d:79: 9b:1b:bd:2a:13:90:b1:77:b3:d9:86:ef:84:1d:19: a2:68:89:94:09:be:09:ca:50:6d:a5:c8:53:8a:19: 86:f4:79:9c:91:0e:1e:43:fc:d1:e0:13:6e:21:16: 1c:de:3b:8c:54:32:d6:9d:dc:72:90:1e:e8:d6:d8: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:78:38:64:F8:F5:12:13:85:DB:BF:91:AC:E2:97:D4:1F:7E:1D X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ce:1d:70:dd:15:cf:7f:61:6e:c3:72:62:b0:13:52:0a:9d: 98:5b:31:f7:be:36:e0:66:02:10:3f:16:a5:4f:d5:dd:f7:d1: b7:df:01:5a:fd:27:0f:aa:da:8d:80:7a:d9:a2:26:3d:52:37: a8:45:e8:9d:12:2f:10:80:e4:b1:08:e6:01:60:f3:dc:77:3b: 0b:1a:54:fb:59:cd:95:17:45:e2:94:48:44:36:8a:99:40:2b: b5:77:01:ce:41:02:3f:a8:aa:38:ea:0e:12:b8:b7:37:ba:08: 4a:9c:6a:34:6f:e0:ef:c7:47:1a:69:7a:e6:e2:0d:e5:a4:0d: 51:d1:04:6d:4c:97:f5:66:1b:ba:72:a9:90:56:ec:80:f1:59: 9d:e5:52:78:ec:d6:13:27:ea:20:55:a6:8a:48:a8:74:21:8d: 9d:48:93:1a:31:4e:00:2d:27:34:5f:42:65:cf:e1:80:0a:82: e3:4f:54:7c:41:35:d2:2e:9d:3d:08:a8:ed:40:ce:13:a0:d1: cc:cd:5b:f4:b4:bd:33:8d:cc:09:0b:f4:32:a8:0b:ba:f7:b1: fd:6c:1c:33:dc:93:a9:46:91:cb:20:3a:e4:20:38:da:5c:89: 26:0a:af:62:25:db:e4:2b:6d:e4:c0:95:c7:ad:2d:e5:94:7e: ab:60:59:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYwNTIwMTgxNjQxWhcNMjYwNTI3MTgxNjQxWjAYMRYwFAYD VQQDEw02YTBkZmE4OS1mZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpAjPpIdRlA3L+Be/wBtdqF0zAKTo/xTCxcyhJX6vTgqO07W70Rrq4lipwZA rxlGiA6mKyiLtBLxo9kKh9vribzAN4scI2JIW5G5DvI2AzgxbArlGuWQKzi03DvP ihN6ejms45dvku8BblPAYdVnvwgt0wYsH2vLxPIDIIIdF6wr5ubtht4zAe8mQ30+ 92IyE8TG0wj1eoN7EtMXIKjfKupiaYrsvVQsmd7hU9WZz2zBrNgWJHWU5+Bh6Chn +fVTXXmbG70qE5Cxd7PZhu+EHRmiaImUCb4JylBtpchTihmG9HmckQ4eQ/zR4BNu IRYc3juMVDLWndxykB7o1tjhvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAK2eDhk +PUSE4Xbv5Gs4pfUH34dMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKM4dcN0Vz39hbsNyYrATUgqdmFsx97424GYCED8WpU/V3ffRt98BWv0nD6ra jYB62aImPVI3qEXonRIvEIDksQjmAWDz3Hc7CxpU+1nNlRdF4pRIRDaKmUArtXcB zkECP6iqOOoOEri3N7oISpxqNG/g78dHGml65uIN5aQNUdEEbUyX9WYbunKpkFbs gPFZneVSeOzWEyfqIFWmikiodCGNnUiTGjFOAC0nNF9CZc/hgAqC409UfEE10i6d PQio7UDOE6DRzM1b9LS9M43MCQv0MqgLuvex/WwcM9yTqUaRyyA65CA42lyJJgqv YiXb5Ctt5MCVx60t5ZR+q2BZzA== -----END CERTIFICATE-----Generated at Thu May 21 10:16:25 2026 by rpki-client