$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: rNAJaR07oZGZ5C9rTZnU0ITZBEnlhAkOU/1dqeS7Wuk= Subject key identifier: FA:2A:B0:38:D9:E7:A7:5C:C8:46:1B:C3:27:A2:8F:78:28:FF:30:CB Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 02A0 Signing time: Thu 21 May 2026 01:38:56 +0000 Manifest this update: Thu 21 May 2026 01:38:55 +0000 Manifest next update: Thu 28 May 2026 01:38:55 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: AVmsipnk/V4bcVKhXMZpB2TJzCs5z+OpNRln1bA5xtI=) 2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: May 21 01:38:55 2026 GMT Not After : May 28 01:38:55 2026 GMT Subject: CN=6a0e6230-1cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:86:6d:44:d0:72:d5:55:17:4b:c2:e2:bc: 81:c0:af:60:5b:72:c4:80:bf:a0:ea:ae:fc:03:d8: c6:9b:1d:a7:61:56:71:7a:a0:ee:2a:22:bf:58:cd: fb:b2:ca:93:0e:be:6a:59:e3:8b:4a:26:80:ff:8a: 04:be:36:72:2e:c9:2e:b5:12:b7:0a:e4:14:64:1e: fe:73:a3:05:9a:32:c4:ef:24:b0:de:54:61:80:15: df:2a:f4:bf:be:ac:d3:37:d2:39:d6:ed:79:53:47: d9:94:cc:97:8e:c4:fa:8e:f0:83:9c:33:3a:86:a4: af:5d:fc:e2:14:b5:9e:8e:46:62:5a:d6:b2:16:d6: e6:9d:c5:53:97:0e:59:fd:04:2f:4a:e7:ea:c3:26: 51:4e:f6:d6:a9:5f:77:b9:0e:a6:5a:0b:f5:16:f7: aa:2b:bd:83:ed:01:05:42:73:33:08:97:9d:39:ee: 59:df:d7:4c:9d:91:24:40:0b:05:04:0e:99:90:44: b7:87:aa:5d:67:f3:9e:9a:c8:0e:48:58:1a:3a:7d: c2:21:21:c4:90:cc:74:e2:bb:0d:94:4b:4c:8a:e7: 5e:ab:cb:63:2c:ca:ad:28:c1:78:4f:9d:d6:c0:be: 89:42:cd:ea:20:19:72:a2:2a:51:8e:44:eb:23:4e: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2A:B0:38:D9:E7:A7:5C:C8:46:1B:C3:27:A2:8F:78:28:FF:30:CB X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:83:0b:24:57:56:4c:d8:ba:3f:72:c8:8a:73:ba:e0:3f:c0: fc:65:ec:96:fe:17:01:bd:f2:97:25:25:2e:7a:68:f6:37:21: 44:96:5b:d3:25:06:09:68:1e:78:ff:54:bc:f2:d6:43:6e:47: 03:44:19:95:01:bf:c8:d3:49:57:6a:13:ef:72:22:c6:d0:ba: 4f:60:4b:93:9d:89:fc:a5:fe:c7:97:2b:e9:e3:4b:bf:ba:12: 05:a7:19:65:c8:12:97:25:56:c6:3d:d5:20:e0:a9:ea:d5:6b: ce:59:ea:18:97:7a:5b:e2:ac:7f:61:0e:b4:b3:8e:48:b2:b0: 6f:46:f2:0b:2f:64:48:88:3c:5b:4c:7b:ab:e0:1a:27:94:6a: 9d:9a:da:5a:27:1b:7e:ed:d3:e7:77:0a:22:9a:68:5a:cf:63: 8c:10:56:a6:9b:b9:f2:b3:a0:1e:af:be:eb:1b:54:fe:e0:06: e7:bc:23:52:a7:93:4e:93:d5:1a:23:5a:02:5a:b2:c6:dc:59: c8:76:16:79:24:a9:95:4f:3f:56:02:5c:9f:a5:d9:eb:a2:03: b6:c6:f2:3d:00:da:53:86:bf:7e:3c:1b:26:03:e1:55:e9:7e: c0:e8:c0:3b:bc:68:b9:6c:c7:7d:16:68:43:1a:a8:0c:61:46: 7f:55:28:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjYwNTIxMDEzODU1WhcNMjYwNTI4MDEzODU1WjAYMRYwFAYD VQQDEw02YTBlNjIzMC0xY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGCGbUTQctVVF0vC4ryBwK9gW3LEgL+g6q78A9jGmx2nYVZxeqDuKiK/WM37 ssqTDr5qWeOLSiaA/4oEvjZyLskutRK3CuQUZB7+c6MFmjLE7ySw3lRhgBXfKvS/ vqzTN9I51u15U0fZlMyXjsT6jvCDnDM6hqSvXfziFLWejkZiWtayFtbmncVTlw5Z /QQvSufqwyZRTvbWqV93uQ6mWgv1FveqK72D7QEFQnMzCJedOe5Z39dMnZEkQAsF BA6ZkES3h6pdZ/OemsgOSFgaOn3CISHEkMx04rsNlEtMiudeq8tjLMqtKMF4T53W wL6JQs3qIBlyoipRjkTrI06K4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoqsDjZ 56dcyEYbwyeij3go/zDLMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAioMLJFdWTNi6P3LIinO64D/A/GXslv4XAb3ylyUlLnpo9jchRJZb0yUGCWge eP9UvPLWQ25HA0QZlQG/yNNJV2oT73IixtC6T2BLk52J/KX+x5cr6eNLv7oSBacZ ZcgSlyVWxj3VIOCp6tVrzlnqGJd6W+Ksf2EOtLOOSLKwb0byCy9kSIg8W0x7q+Aa J5RqnZraWicbfu3T53cKIppoWs9jjBBWppu58rOgHq++6xtU/uAG57wjUqeTTpPV GiNaAlqyxtxZyHYWeSSplU8/VgJcn6XZ66IDtsbyPQDaU4a/fjwbJgPhVel+wOjA O7xouWzHfRZoQxqoDGFGf1UoQQ== -----END CERTIFICATE-----Generated at Thu May 21 10:15:11 2026 by rpki-client