$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: +5sy5e4VwN/8QJcwkgjK7uJ9MZgJj08twZ02Y+1wTxo= Subject key identifier: FA:0B:03:DA:61:94:96:C3:34:2F:58:60:4D:07:D1:89:D2:C7:E4:9B Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 0566 Signing time: Wed 20 May 2026 23:26:09 +0000 Manifest this update: Wed 20 May 2026 23:26:09 +0000 Manifest next update: Wed 27 May 2026 23:26:09 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: x9a4vnzG/n++CskMYBYXa3lx4wke3GC6DKjUI1D7yUs=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: May 20 23:26:09 2026 GMT Not After : May 27 23:26:09 2026 GMT Subject: CN=6a0e4311-662b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ac:f2:9e:43:cf:a1:06:27:88:7f:da:90:7e: 53:86:48:e0:c3:38:06:9f:7e:b7:d2:2c:14:d6:46: 8e:1d:7f:c2:75:f2:c7:83:e3:89:d1:0b:c5:8a:7c: ec:12:2e:98:2d:de:bf:fc:0b:f9:3c:75:14:5b:f1: e0:58:75:d5:d3:b2:72:78:d6:4c:d8:ca:b8:00:cb: 6b:65:bc:6c:6a:af:6d:7b:ec:e1:32:22:0f:d8:33: 49:d8:63:7f:56:b4:c2:5d:3e:d5:aa:8a:50:c0:14: 55:74:52:78:01:65:66:e0:5d:aa:71:28:73:09:42: 31:d3:22:2b:45:9c:02:41:7d:a9:d0:a6:e3:eb:61: c6:68:36:31:ea:16:2e:8a:8e:82:f6:da:5d:d0:88: 31:8e:b2:84:b3:2f:ff:3f:cd:28:60:ce:c2:c0:7f: d2:2c:b1:dc:d1:a8:5e:3e:0c:09:af:6e:5d:a9:88: 73:4b:f9:26:96:20:f9:83:0d:6e:2e:50:d9:f1:aa: 13:5a:7d:6c:f9:80:d3:cb:af:6b:9b:bf:f4:dc:c9: 8a:41:74:a9:a3:94:a4:f4:9e:76:94:04:61:70:2f: 23:6b:32:39:55:10:6f:0e:9c:e6:c1:45:4c:f5:2f: 05:7f:e0:69:03:b7:28:02:bb:1c:46:52:17:c0:08: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0B:03:DA:61:94:96:C3:34:2F:58:60:4D:07:D1:89:D2:C7:E4:9B X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:cd:32:ac:7c:0c:f3:c5:21:24:3a:44:e4:16:01:e0:db:b7: de:d5:b1:79:44:43:a2:d1:4c:ce:08:cf:cc:e7:e7:ac:22:b3: 41:cc:16:d9:d3:53:2d:38:82:ff:2d:fe:79:15:03:96:a5:8a: 94:95:ce:67:ec:35:43:3a:3a:05:21:1f:95:27:fb:94:df:bb: 5c:da:92:00:1a:52:3c:7c:47:4b:5d:e2:89:60:d9:ed:d3:b2: 7d:98:ac:7d:a0:f5:17:15:b3:80:2f:5a:5e:bd:71:10:81:b4: 3b:21:21:2d:84:40:ea:00:9f:42:b4:a5:9c:c6:5c:53:f3:6b: 61:c4:36:1d:f0:2d:cd:06:c0:3c:2c:a0:78:eb:a1:2c:43:2f: a5:81:9b:e3:5f:65:8d:11:59:4a:f4:1d:40:75:ce:d7:bd:7a: a9:66:08:97:d8:4d:b3:82:40:95:92:57:0f:ab:92:54:31:10: bc:9f:95:37:51:96:5c:f5:80:03:5e:bf:0e:c6:7d:83:fa:dc: 7d:16:1d:91:f7:52:1b:7f:69:9b:4f:09:68:41:66:a6:16:ea: 9b:66:0b:8f:51:b8:75:d0:86:01:ce:96:5c:8f:a0:17:45:e8: 71:9b:f0:9d:cd:65:2b:e6:9b:df:4c:3b:9d:5c:18:79:22:8f: 57:47:98:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwNTIwMjMyNjA5WhcNMjYwNTI3MjMyNjA5WjAYMRYwFAYD VQQDEw02YTBlNDMxMS02NjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qzynkPPoQYniH/akH5ThkjgwzgGn3630iwU1kaOHX/CdfLHg+OJ0QvFinzs Ei6YLd6//Av5PHUUW/HgWHXV07JyeNZM2Mq4AMtrZbxsaq9te+zhMiIP2DNJ2GN/ VrTCXT7VqopQwBRVdFJ4AWVm4F2qcShzCUIx0yIrRZwCQX2p0Kbj62HGaDYx6hYu io6C9tpd0IgxjrKEsy//P80oYM7CwH/SLLHc0ahePgwJr25dqYhzS/kmliD5gw1u LlDZ8aoTWn1s+YDTy69rm7/03MmKQXSpo5Sk9J52lARhcC8jazI5VRBvDpzmwUVM 9S8Ff+BpA7coArscRlIXwAgOuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoLA9ph lJbDNC9YYE0H0YnSx+SbMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2s0yrHwM88UhJDpE5BYB4Nu33tWxeURDotFMzgjPzOfnrCKzQcwW2dNTLTiC /y3+eRUDlqWKlJXOZ+w1Qzo6BSEflSf7lN+7XNqSABpSPHxHS13iiWDZ7dOyfZis faD1FxWzgC9aXr1xEIG0OyEhLYRA6gCfQrSlnMZcU/NrYcQ2HfAtzQbAPCygeOuh LEMvpYGb419ljRFZSvQdQHXO1716qWYIl9hNs4JAlZJXD6uSVDEQvJ+VN1GWXPWA A16/DsZ9g/rcfRYdkfdSG39pm08JaEFmphbqm2YLj1G4ddCGAc6WXI+gF0XocZvw nc1lK+ab30w7nVwYeSKPV0eYrw== -----END CERTIFICATE-----Generated at Thu May 21 11:16:35 2026 by rpki-client