$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft File: iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json) Hash identifier: FCR4f8X6dgCi0KWKPUxndxJ1BXdWbJx1TZUMNQ4jmK8= Subject key identifier: 95:8B:DF:95:49:D0:9B:3A:91:BC:3A:5A:F0:7C:10:28:94:47:86:33 Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft Manifest number: 25 Signing time: Thu 21 May 2026 08:59:31 +0000 Manifest this update: Thu 21 May 2026 08:59:31 +0000 Manifest next update: Thu 28 May 2026 08:59:31 +0000 Files and hashes: 1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: d63BxiZnqb/x5dqbxeIbQqn2IICDRScgMfbwnLmuiwc=) 2: F5FB1528251811F19BF603D3C0833773.roa (hash: 8JF1Xwm4ghBxpQhLmUBlUSU0yke5/SmVI3FtoYK94Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Validity Not Before: May 21 08:59:31 2026 GMT Not After : May 28 08:59:31 2026 GMT Subject: CN=6a0ec973-cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:92:66:74:4d:e5:d1:84:28:e8:6a:27:80: 27:3f:48:2a:83:5f:6c:9b:dd:6a:60:d2:f1:4b:e6: 38:93:61:c0:71:af:55:49:40:1c:46:21:cd:4c:79: 8a:90:e8:6b:0a:f7:46:ca:36:8e:a5:df:4b:15:bb: 8a:09:99:b2:f4:26:8e:1e:b7:41:74:2b:a9:c6:1f: 26:b6:5b:3a:3a:d0:71:f5:1f:9a:e1:24:2e:f6:c2: 91:34:ee:28:4f:34:a6:1e:e7:44:1f:02:47:2d:d5: 4f:70:df:85:83:89:6a:f1:0a:e1:b9:a0:d8:9b:fc: 59:b1:4d:7e:49:44:a4:d9:84:5c:a4:0f:78:6f:35: be:3f:90:50:c0:29:7f:b2:1f:96:96:3a:f2:f3:bd: 0e:b6:be:d3:0d:d8:7b:c6:f0:1c:ce:be:e7:40:93: 52:d6:fb:bb:3c:c3:99:ac:84:bc:22:3a:1d:55:b5: 13:3c:cf:a4:48:db:30:4b:60:c6:d2:40:47:f9:ae: f9:d2:6f:6d:0d:54:d5:f0:5a:5a:85:f1:d0:6e:4f: 76:e2:ee:6c:0d:75:35:97:71:79:89:90:d9:e9:61: 0d:0b:bc:2e:64:a5:41:a0:86:f1:15:e4:a4:7c:48: 21:40:e5:05:df:c0:ec:1c:e8:6c:48:97:d6:f4:8a: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:DF:95:49:D0:9B:3A:91:BC:3A:5A:F0:7C:10:28:94:47:86:33 X509v3 Authority Key Identifier: keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c3:da:eb:68:a5:d7:cd:47:5b:8f:90:18:ee:e6:57:31:e0: 4a:e0:88:71:06:d3:66:96:82:3a:0d:38:78:8a:bd:da:0c:26: c9:28:8a:53:d2:1c:58:c7:7e:16:01:7c:d6:80:17:83:13:34: 5d:62:4e:8c:12:b4:c6:fb:d2:15:0e:d7:fe:fc:90:15:4f:48: cd:00:c1:a4:d9:c9:93:b5:ba:65:09:81:23:a9:0f:37:55:98: 3e:bb:ab:2d:7f:27:66:d3:35:fb:d7:be:95:fd:8e:53:ef:c5: 66:23:9e:30:08:62:53:d7:4e:96:de:98:8c:87:d4:98:09:09: 36:b2:06:6f:d5:3c:a7:2d:64:9f:72:c7:54:73:e5:ac:93:2c: f8:d4:bc:2d:97:53:78:01:dd:2e:51:0d:b2:ce:f8:ea:23:98: 85:c8:af:01:cd:9a:4e:e8:e0:ad:f9:cd:f9:15:f1:60:42:68: 82:97:3d:5f:6e:38:c6:51:d7:8b:11:9f:66:ef:07:0b:82:db: d6:31:4b:9b:b3:9a:73:35:bf:98:a6:12:fb:fc:50:aa:ac:dd: 87:17:a5:28:e4:ea:7e:f2:3f:23:40:a0:fd:53:f1:8a:3a:1c: 80:9b:6a:a5:c5:a2:13:9f:83:99:2a:30:8e:2c:12:14:82:d1: 7c:09:1d:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNBQjExMC8GA1UEBRMoODk2M0FBOEExQjVGOTQ4N0UyMjZEMjQ2RjBFNDRDOTYw QzhGMkE5ODAeFw0yNjA1MjEwODU5MzFaFw0yNjA1MjgwODU5MzFaMBgxFjAUBgNV BAMTDTZhMGVjOTczLWNhZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMrZJmdE3l0YQo6GongCc/SCqDX2yb3Wpg0vFL5jiTYcBxr1VJQBxGIc1MeYqQ 6GsK90bKNo6l30sVu4oJmbL0Jo4et0F0K6nGHya2Wzo60HH1H5rhJC72wpE07ihP NKYe50QfAkct1U9w34WDiWrxCuG5oNib/FmxTX5JRKTZhFykD3hvNb4/kFDAKX+y H5aWOvLzvQ62vtMN2HvG8BzOvudAk1LW+7s8w5mshLwiOh1VtRM8z6RI2zBLYMbS QEf5rvnSb20NVNXwWlqF8dBuT3bi7mwNdTWXcXmJkNnpYQ0LvC5kpUGghvEV5KR8 SCFA5QXfwOwc6GxIl9b0itnZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlYvflUnQ mzqRvDpa8HwQKJRHhjMwHwYDVR0jBBgwFoAUiWOqihtflIfiJtJG8ORMlgyPKpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0FCLzJFNUM0NUM0MjRD QzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElmaUp0Skc4T1JNbGd5UEtw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdPcWlodGZsSWZpSnRKRzhPUk1sZ3lQS3BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0FCLzJFNUM0NUM0MjRDQzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElm aUp0Skc4T1JNbGd5UEtwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEw9rraKXXzUdbj5AY7uZXMeBK4IhxBtNmloI6DTh4ir3aDCbJKIpT0hxYx34W AXzWgBeDEzRdYk6MErTG+9IVDtf+/JAVT0jNAMGk2cmTtbplCYEjqQ83VZg+u6st fydm0zX7176V/Y5T78VmI54wCGJT106W3piMh9SYCQk2sgZv1TynLWSfcsdUc+Ws kyz41Lwtl1N4Ad0uUQ2yzvjqI5iFyK8BzZpO6OCt+c35FfFgQmiClz1fbjjGUdeL EZ9m7wcLgtvWMUubs5pzNb+YphL7/FCqrN2HF6Uo5Op+8j8jQKD9U/GKOhyAm2ql xaITn4OZKjCOLBIUgtF8CR3l -----END CERTIFICATE-----Generated at Thu May 21 12:29:27 2026 by rpki-client