$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: WzQFLnsbz30by/O77yVUwfcM32Iouft9/2J9hdWJ2+E= Subject key identifier: CB:BA:0F:0A:30:DC:49:3A:C1:4B:80:43:2F:F6:25:50:F7:75:DC:4E Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 86 Signing time: Thu 21 May 2026 07:44:35 +0000 Manifest this update: Thu 21 May 2026 07:44:34 +0000 Manifest next update: Thu 28 May 2026 07:44:34 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: IY3LgId9E38jj787hcVzCLvnJnN66xajOYVCeAZWKvQ=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: Yhm7+m6I9lWu4bRq4rLXmeSCG3dRSGkgkhbHl5g6RH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: May 21 07:44:34 2026 GMT Not After : May 28 07:44:34 2026 GMT Subject: CN=6a0eb7e3-f6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:91:80:03:3d:06:26:d6:87:42:71:bb:cc: d2:e2:f9:14:ce:3b:ee:18:8e:df:5f:cf:95:7c:97: 44:02:17:f0:a5:ea:89:75:bd:48:14:fc:a7:96:6f: 3c:6c:04:77:87:6f:a8:fe:55:86:a8:a3:d8:2f:5d: 4a:ce:df:ca:44:c2:86:c1:3e:ab:b6:33:84:45:d6: a8:8d:52:26:b0:db:8e:71:8b:1b:3e:16:2e:6e:57: 78:ab:65:70:9b:a5:b6:95:a6:07:6d:a7:b0:c2:d6: fa:e0:06:96:7f:b6:db:a3:c1:1c:ff:65:c9:13:25: b3:64:20:25:cf:19:e2:90:2a:e9:a3:22:37:17:3f: 55:04:36:8c:c5:b1:e7:c6:9d:f1:e6:cb:63:6b:bb: 8c:71:0a:04:9e:50:31:b4:f7:d9:e6:cb:35:bb:14: 73:63:c8:a2:a9:8c:ef:65:16:fd:00:80:3b:e1:b0: 70:6f:5c:55:ef:d4:78:c5:3a:2e:90:72:35:72:63: f3:0e:9d:ea:81:aa:48:13:59:0a:fe:4a:18:6a:9d: 06:58:27:0a:c9:72:42:88:99:ed:02:9e:aa:27:ac: d6:13:0d:46:01:4a:75:5a:34:d6:1a:9d:92:51:72: af:65:13:e3:f1:77:f1:4a:cb:a8:20:06:31:26:a7: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:0F:0A:30:DC:49:3A:C1:4B:80:43:2F:F6:25:50:F7:75:DC:4E X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:f8:30:fe:55:b8:32:36:6b:05:b1:08:39:10:e0:45:f3: 75:75:a9:44:fb:93:68:88:73:08:45:77:3d:af:26:17:1e:b6: 41:21:d6:c2:e4:98:91:f9:22:6e:eb:67:f7:bc:28:57:15:a7: 6f:05:1b:21:21:70:5f:a1:fc:5c:1b:44:b7:c0:7a:b8:fa:97: bb:ea:41:bb:f2:ad:cb:cf:ff:3d:65:72:b1:b0:9e:11:15:75: d4:31:d8:82:57:87:aa:9d:e4:ac:51:46:d3:55:08:e9:ea:c4: c6:d5:b9:80:89:d6:bb:bb:73:71:17:4f:62:b0:ba:f5:b4:ef: 06:77:a1:df:45:82:f2:45:78:46:42:b4:b8:73:1d:45:62:15: 0f:f5:b8:85:ea:24:06:0e:ce:06:5c:5a:d3:bf:70:c4:a9:34: ce:22:d9:43:ec:85:37:06:8e:4c:8d:ac:3c:16:2f:2d:6f:b3: fa:0f:e4:42:d9:cc:29:2b:bc:e8:8d:14:7d:26:19:ff:aa:c4: 70:13:e6:89:6c:37:a3:62:05:f6:8a:4e:77:16:1a:27:10:54: 7a:45:37:e9:ef:1b:a8:ca:38:e4:88:03:71:27:ca:01:b5:f7: 48:c0:cc:0b:c9:94:d2:9a:71:a6:e5:bd:2a:46:c0:63:ce:ff: 62:59:d4:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc2MTUxMTAvBgNVBAUTKDIzNzQ3ODZFODdDNEEwRUMzRDZGQTRDMEI3ODRFNDJG RUUwMDNBNkQwHhcNMjYwNTIxMDc0NDM0WhcNMjYwNTI4MDc0NDM0WjAYMRYwFAYD VQQDEw02YTBlYjdlMy1mNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtKRgAM9BibWh0Jxu8zS4vkUzjvuGI7fX8+VfJdEAhfwpeqJdb1IFPynlm88 bAR3h2+o/lWGqKPYL11Kzt/KRMKGwT6rtjOERdaojVImsNuOcYsbPhYubld4q2Vw m6W2laYHbaewwtb64AaWf7bbo8Ec/2XJEyWzZCAlzxnikCrpoyI3Fz9VBDaMxbHn xp3x5stja7uMcQoEnlAxtPfZ5ss1uxRzY8iiqYzvZRb9AIA74bBwb1xV79R4xTou kHI1cmPzDp3qgapIE1kK/koYap0GWCcKyXJCiJntAp6qJ6zWEw1GAUp1WjTWGp2S UXKvZRPj8XfxSsuoIAYxJqdz5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMu6Dwow 3Ek6wUuAQy/2JVD3ddxOMB8GA1UdIwQYMBaAFCN0eG6HxKDsPW+kwLeE5C/uADpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzYxNS9CQUYzOEU4QTkx RjUxMUYwQjM2QjA5M0NDNEY5QUUwMi9JM1I0Ym9mRW9PdzliNlRBdDRUa0wtNEFP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzYxNS9CQUYzOEU4QTkxRjUxMUYwQjM2QjA5M0NDNEY5QUUwMi9JM1I0Ym9mRW9P dzliNlRBdDRUa0wtNEFPbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGmH4MP5VuDI2awWxCDkQ4EXzdXWpRPuTaIhzCEV3Pa8mFx62QSHWwuSYkfki butn97woVxWnbwUbISFwX6H8XBtEt8B6uPqXu+pBu/Kty8//PWVysbCeERV11DHY gleHqp3krFFG01UI6erExtW5gInWu7tzcRdPYrC69bTvBneh30WC8kV4RkK0uHMd RWIVD/W4heokBg7OBlxa079wxKk0ziLZQ+yFNwaOTI2sPBYvLW+z+g/kQtnMKSu8 6I0UfSYZ/6rEcBPmiWw3o2IF9opOdxYaJxBUekU36e8bqMo45IgDcSfKAbX3SMDM C8mU0ppxpuW9KkbAY87/YlnUEQ== -----END CERTIFICATE-----Generated at Thu May 21 10:52:54 2026 by rpki-client