$ rpki-client -vvf rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft File: IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft (raw, json) Hash identifier: bIQg06lCZ5LAvSixFFeNtU0jzQgcVOaavYW+UqfJxy4= Subject key identifier: 99:59:FD:E4:1B:92:40:E3:94:A5:47:E9:26:24:18:41:6D:E5:18:48 Authority key identifier: 22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77 Certificate issuer: /CN=A9183249/serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft Manifest number: 12 Signing time: Tue 19 May 2026 08:56:28 +0000 Manifest this update: Tue 19 May 2026 08:56:27 +0000 Manifest next update: Tue 26 May 2026 08:56:27 +0000 Files and hashes: 1: IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl (hash: zn1E+RY2agxnYGomd0Z+oxlwD47W1XkkQ8VA3tkUpeo=) 2: E90334323E1711F1872CBF7AB0833773.roa (hash: gfbEk0OCCthmwoLDtfzliRliBz11gfjCRa7Rca3Cfko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183249, serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877 Validity Not Before: May 19 08:56:27 2026 GMT Not After : May 26 08:56:27 2026 GMT Subject: CN=6a0c25bc-29e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:c1:a5:bf:b6:46:f0:04:fc:97:04:b3:62: 82:9b:7e:8f:2b:09:8c:d7:9a:0a:d4:a5:28:c0:c1: 40:db:af:e4:2c:22:d5:b3:8a:6a:5d:5b:69:28:81: e5:20:2c:50:61:33:19:7f:b8:62:26:0d:6d:f3:38: 89:38:a9:f0:11:1a:70:95:68:53:14:25:32:8e:a4: 84:aa:95:b6:92:2f:e1:82:96:af:67:33:3c:0b:ad: dc:af:c9:98:c7:82:c7:f9:6e:79:7d:aa:1c:2c:10: dc:9b:a8:1f:80:cd:eb:22:e1:26:d7:4c:4c:02:6c: aa:bc:1a:e7:31:54:cc:d6:5e:25:75:f1:98:cf:15: 74:d4:9c:50:3e:28:ef:4f:ee:43:ec:a6:9e:57:2a: d6:9d:69:00:bb:d5:b8:7e:82:51:3a:a0:a3:98:54: 5d:88:b0:f9:74:58:8c:b9:6e:12:8e:4a:57:4e:47: 22:f2:29:91:51:05:16:cc:31:04:24:e9:0c:6d:cc: b8:b1:7d:68:1d:42:ad:27:1d:07:39:93:a7:6b:cd: c4:99:c6:16:2d:77:2e:d5:1f:fb:5a:70:55:4e:b9: 94:ca:95:ba:38:e4:09:a4:53:84:86:5d:99:9f:5a: e7:77:d0:03:be:c8:07:73:aa:f7:98:70:19:cb:ec: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:59:FD:E4:1B:92:40:E3:94:A5:47:E9:26:24:18:41:6D:E5:18:48 X509v3 Authority Key Identifier: keyid:22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:40:95:08:1c:cb:cf:32:69:17:e0:89:de:e1:c8:8a:9c:cb: 43:86:71:4f:32:91:c1:97:23:cc:a8:25:6b:76:17:e2:2e:ba: 4c:4f:b4:67:88:f5:1e:1b:e5:7f:39:b2:74:a3:6f:d5:37:05: f9:50:3d:7b:ff:5e:c3:ff:96:89:d0:e8:3d:3b:d0:b8:b0:73: ba:1e:3d:e9:d1:b3:a0:f3:0a:06:d9:a4:6c:66:44:bb:15:2f: 1e:1c:ed:e9:58:19:82:43:a4:82:5c:2c:9a:00:68:a9:2b:86: 0e:4c:ca:cf:2f:a8:f0:68:2e:15:56:0e:e9:68:4b:37:43:09: ac:b4:99:ee:1b:48:93:ab:b2:af:a7:3b:3d:78:e7:c7:41:55: 88:5f:d5:26:96:42:a0:c5:1e:af:08:e9:c6:c7:55:b9:0c:b7: cf:ce:74:c3:14:5a:48:1c:73:ba:3c:0f:bc:20:48:64:9a:21: 03:aa:42:cc:ec:a5:f0:8b:0f:1e:cb:ff:bc:9c:9d:45:27:98: fe:b5:66:a5:b2:cd:79:7a:60:37:9e:35:a8:52:7e:d9:2a:a0: 86:ac:f8:e6:92:c9:3f:f3:a0:35:da:c9:1c:89:45:27:ee:18: 3b:45:93:4a:d8:48:b7:ab:2b:e0:52:c3:e1:95:2c:20:c4:ac: 5d:ee:ab:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzI0OTExMC8GA1UEBRMoMjJDMjkxNjc5NkI3MzI4N0NFQzkwQzM1MDdCMUM1OUZG Nzc1ODg3NzAeFw0yNjA1MTkwODU2MjdaFw0yNjA1MjYwODU2MjdaMBgxFjAUBgNV BAMTDTZhMGMyNWJjLTI5ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClJ8Glv7ZG8AT8lwSzYoKbfo8rCYzXmgrUpSjAwUDbr+QsItWzimpdW2kogeUg LFBhMxl/uGImDW3zOIk4qfARGnCVaFMUJTKOpISqlbaSL+GClq9nMzwLrdyvyZjH gsf5bnl9qhwsENybqB+Azesi4SbXTEwCbKq8GucxVMzWXiV18ZjPFXTUnFA+KO9P 7kPspp5XKtadaQC71bh+glE6oKOYVF2IsPl0WIy5bhKOSldORyLyKZFRBRbMMQQk 6QxtzLixfWgdQq0nHQc5k6drzcSZxhYtdy7VH/tacFVOuZTKlbo45AmkU4SGXZmf Wud30AO+yAdzqveYcBnL7PJdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmVn95BuS QOOUpUfpJiQYQW3lGEgwHwYDVR0jBBgwFoAUIsKRZ5a3MofOyQw1B7HFn/d1iHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMjQ5LzA5ODFFNURBM0Ux MDExRjE5MzBCQkJEMUFBODMzNzczL0lzS1JaNWEzTW9mT3lRdzFCN0hGbl9kMWlI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXNLUlo1YTNNb2ZPeVF3MUI3SEZuX2QxaUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz MjQ5LzA5ODFFNURBM0UxMDExRjE5MzBCQkJEMUFBODMzNzczL0lzS1JaNWEzTW9m T3lRdzFCN0hGbl9kMWlIYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADQJUIHMvPMmkX4Ine4ciKnMtDhnFPMpHBlyPMqCVrdhfiLrpMT7RniPUeG+V/ ObJ0o2/VNwX5UD17/17D/5aJ0Og9O9C4sHO6Hj3p0bOg8woG2aRsZkS7FS8eHO3p WBmCQ6SCXCyaAGipK4YOTMrPL6jwaC4VVg7paEs3QwmstJnuG0iTq7Kvpzs9eOfH QVWIX9UmlkKgxR6vCOnGx1W5DLfPznTDFFpIHHO6PA+8IEhkmiEDqkLM7KXwiw8e y/+8nJ1FJ5j+tWalss15emA3njWoUn7ZKqCGrPjmksk/86A12skciUUn7hg7RZNK 2Ei3qyvgUsPhlSwgxKxd7quz -----END CERTIFICATE-----Generated at Thu May 21 09:39:28 2026 by rpki-client