$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: mRvWwkAWu/gByftTolaUsYXaSPjzeFIJoUB2ZU3aXPc= Subject key identifier: 7D:8D:68:79:37:22:98:63:38:87:66:87:76:05:6E:B4:14:A3:ED:8C Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0CE8 Signing time: Wed 20 May 2026 18:20:31 +0000 Manifest this update: Wed 20 May 2026 18:20:31 +0000 Manifest next update: Wed 27 May 2026 18:20:31 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: 6e24x7OVZLdGHAvo9jL9QVWVwAnTile8fo/RklF9+gk=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: May 20 18:20:31 2026 GMT Not After : May 27 18:20:31 2026 GMT Subject: CN=6a0dfb6f-81a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:42:e7:f0:cf:df:68:79:a1:2b:3c:0f:44: 22:39:98:4e:ba:81:3b:c2:7d:03:f2:ba:02:00:5f: 94:f2:27:b3:47:62:86:d1:23:11:be:59:59:ae:a6: 9a:0d:83:f3:ed:44:e8:e7:cf:7c:31:a0:d3:6d:7c: 59:48:81:b5:58:9d:53:94:2c:9c:e5:23:c5:cd:bf: 4d:77:11:e2:55:ae:9a:dd:a8:ae:92:7f:d3:7e:0a: 09:34:fd:ee:d4:b5:2b:00:3d:eb:f1:7e:04:7c:60: 61:d4:c0:07:49:42:ac:58:05:52:d4:6a:65:05:7e: d4:95:c9:f7:9e:43:92:75:5c:20:d4:94:b0:64:bc: 2a:bf:56:bb:31:18:08:cb:99:21:fe:39:ad:97:e1: 50:1f:ff:3d:55:c9:20:8f:dc:fb:53:f5:ce:d7:de: e4:fc:35:53:62:00:d4:a6:9c:13:e6:bf:6c:61:79: 69:09:6b:e6:b2:90:a2:f0:32:25:b8:aa:57:d2:02: db:a6:62:2a:1c:ff:73:95:1f:62:ef:08:a0:84:b3: 2a:da:c6:80:e7:de:cc:8f:1a:8a:ab:cb:81:ac:16: ff:b6:ca:76:da:ad:c2:5d:17:c1:9f:b5:55:b0:9b: 7c:69:a0:4e:99:95:b5:df:4d:77:a4:41:de:cb:e4: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8D:68:79:37:22:98:63:38:87:66:87:76:05:6E:B4:14:A3:ED:8C X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a7:16:34:dd:3e:aa:df:d1:8d:eb:af:04:15:e1:4c:a3:57: 9b:bf:76:c1:dc:8b:c0:2c:f9:7b:29:6f:df:01:ab:0b:a9:28: ea:d3:b1:cb:ae:b8:84:c7:fc:08:8d:d6:e9:2e:0d:8a:57:07: 89:16:78:d9:26:29:80:4f:bd:ec:71:98:b6:28:ea:0b:6d:b2: 73:d4:e7:65:da:67:90:f7:e4:03:be:f3:68:0e:ee:05:e4:c6: 63:12:00:1f:26:81:09:95:57:aa:ff:58:e1:17:3e:98:d7:dd: 85:15:c0:ac:d5:aa:d3:92:67:c0:47:8a:9e:b5:b6:99:d2:a0: 45:c1:c4:61:28:0b:5a:24:10:7b:7b:fc:17:79:f3:bb:02:f1: 8b:fd:1f:df:b2:46:14:47:5f:f6:25:ef:7d:1c:0d:26:e9:3c: 74:4f:36:65:30:e1:1b:0b:e4:d3:f7:87:ec:1c:85:e7:e2:a2: 09:a4:c4:80:45:8d:49:57:0f:51:ed:4c:33:ae:65:0e:c1:ab: 58:77:ae:ee:0a:ce:8e:0d:cd:87:9a:91:79:4a:d5:64:c2:d8: fa:ff:22:c9:1e:23:4f:76:ad:74:6b:66:12:06:71:61:1a:89: 3a:62:7d:85:f3:d7:01:2c:e6:02:f7:17:0e:a7:fd:72:77:3b: 11:0d:d2:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwNTIwMTgyMDMxWhcNMjYwNTI3MTgyMDMxWjAYMRYwFAYD VQQDEw02YTBkZmI2Zi04MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9xC5/DP32h5oSs8D0QiOZhOuoE7wn0D8roCAF+U8iezR2KG0SMRvllZrqaa DYPz7UTo5898MaDTbXxZSIG1WJ1TlCyc5SPFzb9NdxHiVa6a3aiukn/TfgoJNP3u 1LUrAD3r8X4EfGBh1MAHSUKsWAVS1GplBX7Ulcn3nkOSdVwg1JSwZLwqv1a7MRgI y5kh/jmtl+FQH/89Vckgj9z7U/XO197k/DVTYgDUppwT5r9sYXlpCWvmspCi8DIl uKpX0gLbpmIqHP9zlR9i7wighLMq2saA597MjxqKq8uBrBb/tsp22q3CXRfBn7VV sJt8aaBOmZW13013pEHey+RLVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2NaHk3 IphjOIdmh3YFbrQUo+2MMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl6cWNN0+qt/RjeuvBBXhTKNXm792wdyLwCz5eylv3wGrC6ko6tOxy664hMf8 CI3W6S4NilcHiRZ42SYpgE+97HGYtijqC22yc9TnZdpnkPfkA77zaA7uBeTGYxIA HyaBCZVXqv9Y4Rc+mNfdhRXArNWq05JnwEeKnrW2mdKgRcHEYSgLWiQQe3v8F3nz uwLxi/0f37JGFEdf9iXvfRwNJuk8dE82ZTDhGwvk0/eH7ByF5+KiCaTEgEWNSVcP Ue1MM65lDsGrWHeu7grOjg3Nh5qReUrVZMLY+v8iyR4jT3atdGtmEgZxYRqJOmJ9 hfPXASzmAvcXDqf9cnc7EQ3STw== -----END CERTIFICATE-----Generated at Thu May 21 10:53:46 2026 by rpki-client