$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: W5SNRcl/U0bZ4HWIVyvlsqq03MtizB/rPJQ9QqKA+80= Subject key identifier: B4:79:E9:78:A5:34:97:86:E2:22:4C:B4:A4:4E:B9:DD:0C:13:70:E5 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 0597 Signing time: Wed 20 May 2026 23:16:21 +0000 Manifest this update: Wed 20 May 2026 23:16:21 +0000 Manifest next update: Wed 27 May 2026 23:16:21 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: j8V7yQqdwE62yLqrd3XLvoz0X3nTitTkx8x0eulmxFU=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: +WJvFTxAonY5wxNQGiwRI3ZI8HmyeaPv5VFRCqzMfWE=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: Axsa0uyuPTjbrC5wnPZ4BHAIMgaPThG3uMiLY0ziBzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: May 20 23:16:21 2026 GMT Not After : May 27 23:16:21 2026 GMT Subject: CN=6a0e40c5-9a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:12:b6:57:d0:e6:e4:58:1f:05:b2:da:0d: d9:6c:02:ff:2d:18:65:16:80:4d:d1:42:52:02:e5: cd:7e:0e:99:1f:1d:76:76:bb:ff:27:c9:d2:49:23: 19:5f:54:67:e2:6d:da:9d:ad:5a:19:55:fd:48:4d: 0e:27:81:79:90:d4:09:84:21:56:90:f7:89:1e:6f: 90:5b:d8:1b:9c:3b:36:2c:cc:70:ff:cb:fa:95:37: 08:28:de:fe:49:a5:f3:b7:dc:8d:f2:0a:f7:2b:0d: ee:b7:76:79:22:da:eb:b7:83:98:5f:b3:24:cb:0e: 46:94:62:05:3b:b9:cf:ce:1c:47:cd:45:5b:80:3f: e2:be:dd:d6:6a:80:6b:63:ff:86:c4:0a:ac:1d:bb: d7:88:86:d1:de:f8:ac:30:aa:d7:e4:c6:5c:f5:50: 80:d2:dd:ef:a1:9f:8e:2b:ea:34:98:64:71:84:eb: 6c:40:53:7f:fc:df:31:5b:0d:1d:e0:73:d0:0f:a1: 69:71:ba:73:64:fa:4e:87:3e:12:65:8d:68:0c:65: 47:60:81:6e:fd:a8:90:5d:4b:95:9b:20:1d:da:c6: 0f:b7:01:44:10:79:6d:ac:67:43:67:f1:33:0d:84: e9:b1:27:58:d3:65:c6:8e:58:ac:f4:a3:c6:fe:00: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:79:E9:78:A5:34:97:86:E2:22:4C:B4:A4:4E:B9:DD:0C:13:70:E5 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:90:8b:32:a3:dc:2b:ab:95:d5:b6:06:52:5d:f5:1f:76:cf: 6f:7a:01:90:1e:01:5e:05:fd:e8:0d:64:23:5c:2c:5f:23:b3: 77:b8:e4:b7:c9:fc:0e:64:76:d1:cb:d2:a9:05:22:48:6f:83: b4:df:14:2c:a0:bd:fa:10:c8:e7:1d:97:ad:7a:d5:f1:a5:3c: d7:ad:69:50:c8:7b:b0:2f:78:2a:fa:09:6a:76:f3:f5:b9:55: d7:0c:09:66:a0:fe:4f:5f:25:fc:7b:39:a0:b3:49:1c:e0:d0: 83:65:b4:ea:08:54:3d:c1:0c:1d:55:57:e5:81:f7:8f:16:cc: 56:03:b2:ac:86:69:20:8a:a3:93:63:50:c4:96:c1:83:ec:97: fc:10:9d:2b:fa:59:19:96:0b:a3:1e:7f:bb:45:bb:71:a6:c3: 96:30:f8:f0:c5:23:97:b4:0f:9e:34:af:dc:2a:db:54:73:04: 97:5b:fc:84:13:c9:d8:10:94:12:18:3a:a7:27:b1:28:ca:bd: ac:99:f7:ea:6c:18:fe:88:f1:02:46:48:d0:4b:ab:e3:fa:9e: cd:57:ee:eb:f3:5a:6e:8a:e5:18:ca:06:d3:4d:6b:14:f9:7b: e3:80:11:3d:5a:76:90:33:2e:04:ee:6b:3a:37:68:65:d9:49: b5:ba:35:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjYwNTIwMjMxNjIxWhcNMjYwNTI3MjMxNjIxWjAYMRYwFAYD VQQDEw02YTBlNDBjNS05YTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGsStlfQ5uRYHwWy2g3ZbAL/LRhlFoBN0UJSAuXNfg6ZHx12drv/J8nSSSMZ X1Rn4m3ana1aGVX9SE0OJ4F5kNQJhCFWkPeJHm+QW9gbnDs2LMxw/8v6lTcIKN7+ SaXzt9yN8gr3Kw3ut3Z5Itrrt4OYX7Mkyw5GlGIFO7nPzhxHzUVbgD/ivt3WaoBr Y/+GxAqsHbvXiIbR3visMKrX5MZc9VCA0t3voZ+OK+o0mGRxhOtsQFN//N8xWw0d 4HPQD6FpcbpzZPpOhz4SZY1oDGVHYIFu/aiQXUuVmyAd2sYPtwFEEHltrGdDZ/Ez DYTpsSdY02XGjlis9KPG/gBBfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLR56Xil NJeG4iJMtKROud0ME3DlMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ5CLMqPcK6uV1bYGUl31H3bPb3oBkB4BXgX96A1kI1wsXyOzd7jkt8n8DmR2 0cvSqQUiSG+DtN8ULKC9+hDI5x2XrXrV8aU8161pUMh7sC94KvoJanbz9blV1wwJ ZqD+T18l/Hs5oLNJHODQg2W06ghUPcEMHVVX5YH3jxbMVgOyrIZpIIqjk2NQxJbB g+yX/BCdK/pZGZYLox5/u0W7cabDljD48MUjl7QPnjSv3CrbVHMEl1v8hBPJ2BCU Ehg6pyexKMq9rJn36mwY/ojxAkZI0Eur4/qezVfu6/NaborlGMoG001rFPl744AR PVp2kDMuBO5rOjdoZdlJtbo1mQ== -----END CERTIFICATE-----Generated at Thu May 21 14:12:51 2026 by rpki-client