$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: EAY8pb36gC/o/6fN44/ATAUzxBoER7iC/PHCxZ+kg/I= Subject key identifier: B5:91:57:56:5E:41:65:2F:0D:CF:69:E2:3C:C1:1A:81:ED:29:9A:2C Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 078B Signing time: Wed 20 May 2026 21:36:32 +0000 Manifest this update: Wed 20 May 2026 21:36:31 +0000 Manifest next update: Wed 27 May 2026 21:36:31 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: 7NEYrEYqx6DCCcd+aaA1wXWDAyF8pPVeM17ifnOnFZ8=) 2: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=) 3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=) 4: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: May 20 21:36:31 2026 GMT Not After : May 27 21:36:31 2026 GMT Subject: CN=6a0e2960-d766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:42:f7:ab:33:3a:15:7e:96:93:47:0d:93: a5:54:a3:68:64:a6:08:3c:f0:57:40:ef:ca:37:d3: 67:1b:85:2a:97:6a:cb:e5:79:d0:de:bc:89:7f:d3: 47:fe:09:7e:89:92:51:7e:cd:9e:66:6d:34:5c:d5: 93:44:8d:45:00:22:36:f3:8a:ba:94:43:ef:f8:e0: 40:6a:79:f9:fe:5a:b2:77:1e:2c:a7:15:d5:3c:bf: e3:6b:30:23:61:c0:59:4d:09:ed:a8:ab:8d:d9:8d: ed:13:17:9f:aa:9e:d8:4f:c7:d5:23:4e:16:26:c6: fa:20:eb:83:a8:eb:9c:70:68:b8:26:9e:89:34:5c: 28:25:33:09:2e:ea:4b:41:ad:22:98:9b:17:e9:e4: 65:4f:f6:1e:ee:f0:6a:6f:f7:e4:54:01:74:85:8f: 8f:8e:57:b6:9f:38:31:8a:87:f0:b4:a0:4d:48:9d: de:aa:71:34:62:d5:f6:ef:37:c1:a0:74:ec:9b:ad: ff:aa:48:38:e1:9e:7d:1d:c9:14:e9:38:ea:fc:70: f0:ad:a6:0e:59:e6:8a:02:e8:6d:91:ea:de:3e:ac: a1:26:bb:30:c6:0b:6f:d5:0f:ca:0c:eb:e2:d9:38: 36:31:c0:ff:5f:66:7f:b9:0c:4c:9e:a0:e8:e8:9c: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:57:56:5E:41:65:2F:0D:CF:69:E2:3C:C1:1A:81:ED:29:9A:2C X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d7:89:60:f8:18:13:e8:60:75:57:11:c9:d1:bc:a1:66:ab: f6:af:ff:3e:89:dd:0f:ed:98:4f:f9:ad:3a:5e:95:32:86:b3: c7:11:f7:46:d0:30:0e:6a:df:e3:a2:b6:2c:ea:42:ef:0c:d6: 28:91:59:7a:1d:b3:6a:7c:e8:50:c4:ea:bc:8e:cf:47:c4:de: 9e:ef:fd:3c:34:ee:ac:06:fb:db:94:02:c9:86:a9:7a:21:8c: 39:f8:bc:d2:b5:b6:a9:f2:1f:d4:25:7d:af:b3:dc:41:26:93: 35:4b:4e:91:4e:b4:b6:f0:49:90:47:61:4e:30:99:48:3e:0e: b7:a9:90:f2:d8:34:b6:69:2b:54:e5:d6:cd:53:92:56:f2:72: 8d:41:32:41:d3:86:63:cf:3b:63:2b:76:99:18:99:33:ab:b4: 26:dd:3a:b5:d9:b6:82:67:8c:58:4c:87:a9:01:7e:53:c0:24: 84:e9:f8:f2:e3:32:b2:3f:dd:1d:40:42:51:4a:22:10:c5:7c: 33:78:11:4f:51:a6:df:ab:ff:40:70:47:f6:94:7e:c2:7f:5d: c0:1e:53:b2:bf:79:49:5d:24:7d:cb:9c:6f:7a:a8:6f:06:72: 3e:0a:c9:02:99:ce:59:f8:2e:e8:e9:5b:de:f7:5a:12:72:a0: 63:e0:a5:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwNTIwMjEzNjMxWhcNMjYwNTI3MjEzNjMxWjAYMRYwFAYD VQQDEw02YTBlMjk2MC1kNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA369C96szOhV+lpNHDZOlVKNoZKYIPPBXQO/KN9NnG4Uql2rL5XnQ3ryJf9NH /gl+iZJRfs2eZm00XNWTRI1FACI284q6lEPv+OBAann5/lqydx4spxXVPL/jazAj YcBZTQntqKuN2Y3tExefqp7YT8fVI04WJsb6IOuDqOuccGi4Jp6JNFwoJTMJLupL Qa0imJsX6eRlT/Ye7vBqb/fkVAF0hY+Pjle2nzgxiofwtKBNSJ3eqnE0YtX27zfB oHTsm63/qkg44Z59HckU6Tjq/HDwraYOWeaKAuhtkerePqyhJrswxgtv1Q/KDOvi 2Tg2McD/X2Z/uQxMnqDo6JwT8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWRV1Ze QWUvDc9p4jzBGoHtKZosMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9eJYPgYE+hgdVcRydG8oWar9q//PondD+2YT/mtOl6VMoazxxH3RtAwDmrf 46K2LOpC7wzWKJFZeh2zanzoUMTqvI7PR8Tenu/9PDTurAb725QCyYapeiGMOfi8 0rW2qfIf1CV9r7PcQSaTNUtOkU60tvBJkEdhTjCZSD4Ot6mQ8tg0tmkrVOXWzVOS VvJyjUEyQdOGY887Yyt2mRiZM6u0Jt06tdm2gmeMWEyHqQF+U8AkhOn48uMysj/d HUBCUUoiEMV8M3gRT1Gm36v/QHBH9pR+wn9dwB5Tsr95SV0kfcucb3qobwZyPgrJ ApnOWfgu6Olb3vdaEnKgY+ClKw== -----END CERTIFICATE-----Generated at Thu May 21 09:36:07 2026 by rpki-client