$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: mVC4y359p9mLdsdHyKBXzGIoa7OqZwRrzPpzkkAIGNU= Subject key identifier: 9C:4C:0E:75:97:26:DC:3B:1C:DB:DB:46:D2:34:73:84:C1:3D:34:F0 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0BE6 Signing time: Wed 20 May 2026 18:54:15 +0000 Manifest this update: Wed 20 May 2026 18:54:15 +0000 Manifest next update: Wed 27 May 2026 18:54:15 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: BpnRUfIBvzxrlSVi+h91UkWe5t3tWsJIbuH4VLMyVPE=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 44ZNomVUKhNrCvYmD9LvtSWCJcYF4pVIBILUsyf7SwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: May 20 18:54:15 2026 GMT Not After : May 27 18:54:15 2026 GMT Subject: CN=6a0e0357-e096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:1b:13:d7:cb:70:a7:a0:73:9b:df:77:f3: 50:e0:50:f9:10:a2:69:c6:8e:83:03:76:c2:9b:37: 4d:58:8a:1a:c7:39:bb:3c:f6:be:3d:97:52:24:9f: 99:be:eb:b6:e5:76:e9:b5:02:d7:0a:0f:b1:22:42: 43:d4:2b:d6:1e:2c:c5:ab:31:c9:04:cf:05:77:a0: 68:4a:f0:4c:84:ac:f8:cd:b0:59:5a:81:31:1d:21: 80:b3:c5:d0:2b:7b:89:35:b9:48:ab:66:10:97:4f: 94:84:42:f8:03:19:5b:e4:e9:7e:01:9e:2e:c4:de: 64:fc:69:f4:96:a4:8d:0e:76:a0:d4:e6:76:fe:de: 49:35:de:64:92:02:55:72:38:d7:61:2b:1a:51:ec: 43:06:64:e0:03:3d:1e:0c:3d:65:5c:b6:97:49:a4: 5f:cb:ee:b5:34:6b:e0:cf:1f:ed:15:7e:1e:90:54: 7b:a4:b5:e8:4e:11:0f:55:32:86:f1:e1:ec:a8:09: 65:42:0d:98:05:eb:00:30:39:42:cf:51:b7:56:c0: 71:5b:2d:b2:2f:c4:a7:24:78:68:31:51:43:ae:af: 75:bb:b9:1d:2f:a5:a6:20:68:ca:97:a6:0b:99:b4: b0:2a:12:4e:f3:8d:cb:8b:9f:d2:2e:91:52:54:b3: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:0E:75:97:26:DC:3B:1C:DB:DB:46:D2:34:73:84:C1:3D:34:F0 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2a:c3:1c:bd:64:72:a2:f5:61:34:52:ad:85:e6:0f:83:79: fa:75:31:96:aa:4f:fc:12:02:32:72:ef:46:f4:7b:84:12:b6: 83:f9:da:d3:88:ca:b6:16:bc:e9:3a:97:71:22:49:b7:ff:e8: ae:f2:c2:37:f9:76:9a:08:48:75:f8:82:ef:f0:61:2d:d8:38: e5:0f:68:c4:ce:e6:82:b0:f0:09:c1:b9:b4:64:89:9a:fc:15: e7:7e:ee:78:08:04:cc:ca:4a:5a:b8:9a:66:d7:b7:46:51:3d: ca:7b:c5:86:cd:d5:52:ab:20:6d:b1:7b:fb:ad:b0:a9:ff:3a: f7:16:94:d5:75:c3:7b:85:ca:a3:f8:62:39:ab:49:75:da:56: 22:83:90:75:b4:a9:4d:25:e4:9e:01:c8:4c:2e:83:55:fa:8a: 3e:de:43:fc:38:19:51:60:14:9a:07:f7:09:33:7e:e6:da:3b: 66:5c:93:af:ca:e6:82:18:96:c9:7c:cd:9d:e7:b8:c6:f0:18: b5:0a:22:e4:44:e9:14:0c:48:16:76:2d:18:b5:ba:e9:6f:5e: 01:29:de:37:b9:08:68:b0:08:be:69:56:f6:b2:5d:8c:fb:23: 4f:cf:e3:eb:40:d5:c0:31:a1:91:82:90:41:64:8e:a1:18:02: aa:97:29:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjYwNTIwMTg1NDE1WhcNMjYwNTI3MTg1NDE1WjAYMRYwFAYD VQQDEw02YTBlMDM1Ny1lMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWEbE9fLcKegc5vfd/NQ4FD5EKJpxo6DA3bCmzdNWIoaxzm7PPa+PZdSJJ+Z vuu25XbptQLXCg+xIkJD1CvWHizFqzHJBM8Fd6BoSvBMhKz4zbBZWoExHSGAs8XQ K3uJNblIq2YQl0+UhEL4Axlb5Ol+AZ4uxN5k/Gn0lqSNDnag1OZ2/t5JNd5kkgJV cjjXYSsaUexDBmTgAz0eDD1lXLaXSaRfy+61NGvgzx/tFX4ekFR7pLXoThEPVTKG 8eHsqAllQg2YBesAMDlCz1G3VsBxWy2yL8SnJHhoMVFDrq91u7kdL6WmIGjKl6YL mbSwKhJO843Li5/SLpFSVLODLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxMDnWX Jtw7HNvbRtI0c4TBPTTwMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALyrDHL1kcqL1YTRSrYXmD4N5+nUxlqpP/BICMnLvRvR7hBK2g/na04jKtha8 6TqXcSJJt//orvLCN/l2mghIdfiC7/BhLdg45Q9oxM7mgrDwCcG5tGSJmvwV537u eAgEzMpKWriaZte3RlE9ynvFhs3VUqsgbbF7+62wqf869xaU1XXDe4XKo/hiOatJ ddpWIoOQdbSpTSXkngHITC6DVfqKPt5D/DgZUWAUmgf3CTN+5to7ZlyTr8rmghiW yXzNnee4xvAYtQoi5ETpFAxIFnYtGLW66W9eASneN7kIaLAIvmlW9rJdjPsjT8/j 60DVwDGhkYKQQWSOoRgCqpcpIA== -----END CERTIFICATE-----Generated at Thu May 21 10:29:02 2026 by rpki-client