$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: YbJ8dKZNLdcJHs+0MKrh152CAjGGUm5SI6ZUVu6BWLk= Subject key identifier: 52:6B:8A:9F:83:93:71:D1:31:C3:B2:11:67:70:9E:09:A8:8B:85:D8 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 0845 Signing time: Wed 20 May 2026 20:55:41 +0000 Manifest this update: Wed 20 May 2026 20:55:41 +0000 Manifest next update: Wed 27 May 2026 20:55:41 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: E7BAt9I/d5QRLcizQSorq/b727ICN1LtSAoZQad++c0=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: v4yXnV7F6sBRR11FKD6BcY09oXI6+ensN6Z6ZxFBdd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: May 20 20:55:41 2026 GMT Not After : May 27 20:55:41 2026 GMT Subject: CN=6a0e1fcd-a5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:e0:18:a6:9e:0a:12:68:4e:b6:b8:a1:85: 38:72:1c:b7:dc:73:c2:12:2e:7b:1b:5f:25:75:4b: 1a:51:d1:00:b6:0a:1b:82:35:0d:6a:38:1b:ea:51: 09:08:ef:18:0f:4b:83:ad:88:c7:08:40:19:ec:e4: 54:29:21:38:0c:cb:5e:a0:25:cf:b3:19:41:9d:3f: a1:2c:7e:8e:64:2e:38:42:26:df:95:d2:98:9e:f2: 24:81:2b:6f:97:df:48:8d:73:c3:59:13:c3:0f:1a: d1:12:38:ee:1a:0c:9c:fe:ae:13:07:03:f7:bf:d1: 6d:7a:62:8c:7d:b2:17:56:05:f2:bf:cd:4b:ee:9c: 31:ca:46:0b:fb:d0:4c:94:49:e1:5c:01:96:0a:99: a4:c8:18:fd:9e:68:64:eb:33:e9:4f:ca:72:73:f7: f3:64:72:0a:6d:77:24:7b:64:be:cc:41:43:f1:bf: d2:0c:94:a8:d4:33:1d:fa:8d:15:e6:36:f1:78:6c: 54:66:79:56:d3:a1:22:aa:b3:ed:ec:1c:ff:a7:ea: bb:ba:55:b2:31:af:9a:5e:b2:de:1c:77:96:68:ac: f6:d5:b0:d9:0e:eb:75:c7:2c:78:32:71:30:62:06: 97:dc:1a:c5:0b:1b:f3:11:c9:a1:f9:f9:5b:e7:e0: 8f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:8A:9F:83:93:71:D1:31:C3:B2:11:67:70:9E:09:A8:8B:85:D8 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:eb:ff:fc:10:2e:bb:9c:ae:0d:f7:60:5e:f2:68:12:76:3b: ef:bb:2b:ec:8d:50:e7:53:2f:c9:51:28:be:83:25:80:89:2d: 9f:5a:73:ae:0c:b4:0a:3c:7a:18:26:91:ca:c2:16:b0:3c:42: 59:34:57:14:3d:ae:6b:4b:3c:08:c2:5f:37:6f:d3:cd:80:ea: fd:6e:86:e8:29:29:d3:e6:3a:bb:92:55:7d:57:f7:6f:86:2e: 0d:04:5f:6b:c1:38:c4:25:3c:4c:40:b6:6a:34:8e:a9:61:5c: 45:8b:e6:d6:97:f6:c4:5d:40:ac:92:f7:45:c5:c0:ba:be:d5: ce:95:b5:9d:f5:ef:f4:f1:fa:6a:6b:00:f9:46:b4:e3:11:50: 4e:b0:9c:b8:71:83:cc:35:1a:dc:ec:b8:cb:2f:3e:c5:a8:7d: 5d:68:12:63:9f:e3:b4:f0:f4:82:aa:32:06:99:83:7d:18:22: 9a:bf:d1:b3:54:96:d3:5f:2f:db:b9:51:18:99:8c:6f:fb:98: 48:27:b2:55:73:55:94:06:f5:a7:7d:21:fc:d3:b8:0b:91:33: 75:55:ec:c6:86:0b:81:1c:8a:80:0d:46:9e:9b:9a:ac:2a:b4: 5c:c9:fa:9d:6c:d6:a0:f2:7d:0b:e2:ab:0a:3d:b8:aa:d9:da: ed:bd:bd:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjYwNTIwMjA1NTQxWhcNMjYwNTI3MjA1NTQxWjAYMRYwFAYD VQQDEw02YTBlMWZjZC1hNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9XgGKaeChJoTra4oYU4chy33HPCEi57G18ldUsaUdEAtgobgjUNajgb6lEJ CO8YD0uDrYjHCEAZ7ORUKSE4DMteoCXPsxlBnT+hLH6OZC44QibfldKYnvIkgStv l99IjXPDWRPDDxrREjjuGgyc/q4TBwP3v9FtemKMfbIXVgXyv81L7pwxykYL+9BM lEnhXAGWCpmkyBj9nmhk6zPpT8pyc/fzZHIKbXcke2S+zEFD8b/SDJSo1DMd+o0V 5jbxeGxUZnlW06EiqrPt7Bz/p+q7ulWyMa+aXrLeHHeWaKz21bDZDut1xyx4MnEw YgaX3BrFCxvzEcmh+flb5+CPeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJrip+D k3HRMcOyEWdwngmoi4XYMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOOv//BAuu5yuDfdgXvJoEnY777sr7I1Q51MvyVEovoMlgIktn1pzrgy0Cjx6 GCaRysIWsDxCWTRXFD2ua0s8CMJfN2/TzYDq/W6G6Ckp0+Y6u5JVfVf3b4YuDQRf a8E4xCU8TEC2ajSOqWFcRYvm1pf2xF1ArJL3RcXAur7VzpW1nfXv9PH6amsA+Ua0 4xFQTrCcuHGDzDUa3Oy4yy8+xah9XWgSY5/jtPD0gqoyBpmDfRgimr/Rs1SW018v 27lRGJmMb/uYSCeyVXNVlAb1p30h/NO4C5EzdVXsxoYLgRyKgA1GnpuarCq0XMn6 nWzWoPJ9C+KrCj24qtna7b29CA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:05 2026 by rpki-client