$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: bPbftT+9snfmIu/veA5aLIcx7e/lbCPtPjBLb1TdiEU= Subject key identifier: 6B:E4:48:05:5F:46:AE:3C:B0:9E:E6:6E:7D:F0:2F:59:B1:C0:D6:0F Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 01E7 Signing time: Thu 21 May 2026 03:40:37 +0000 Manifest this update: Thu 21 May 2026 03:40:36 +0000 Manifest next update: Thu 28 May 2026 03:40:36 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: CUpuNeFvTXPycegWkKM0+EfCW1bI9WDIQA9pljyhi1w=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: May 21 03:40:36 2026 GMT Not After : May 28 03:40:36 2026 GMT Subject: CN=6a0e7eb4-de93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:28:8c:b1:8f:48:4f:1f:f3:4c:46:01:c8: 75:94:1a:1f:a7:53:a8:ae:77:d6:a5:0c:79:6b:01: 14:0e:5c:e8:24:bf:cd:a7:04:df:c3:f2:48:a5:de: c7:3d:ec:39:92:43:7c:ef:b2:30:43:61:95:98:be: af:f2:2c:c9:aa:34:a0:c4:cd:5b:76:f5:10:82:20: ae:7e:6d:23:76:c9:ce:f8:5e:fb:80:f6:3d:18:3c: 54:be:7a:9f:13:e6:6f:21:bb:b6:97:fd:9b:a0:30: 2e:23:11:de:fc:4c:c5:89:62:d5:e6:bf:9c:3a:8d: 5e:d0:04:ee:d7:07:1b:23:54:53:fd:aa:be:76:76: 46:f4:44:88:4a:e2:ec:e6:ea:14:07:66:a2:1c:9d: 03:15:b7:bc:fc:91:c7:f9:d1:77:7b:a1:a5:5a:fa: ac:8d:20:30:cd:c8:ca:93:ea:5c:7c:1f:57:65:20: d8:bb:84:cf:77:94:3b:97:5e:9a:a5:b9:d1:f7:85: ea:d2:d3:03:47:5c:12:55:8c:98:ab:ea:89:83:20: 09:48:0b:ae:21:f8:6e:19:5a:50:9d:82:f0:10:4d: 83:02:eb:42:50:e9:6f:a0:c9:38:bd:bc:c0:8d:ad: 2b:ce:b6:99:11:dd:e0:c0:a5:a0:42:6d:6d:39:e6: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:48:05:5F:46:AE:3C:B0:9E:E6:6E:7D:F0:2F:59:B1:C0:D6:0F X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:07:46:aa:16:e2:e8:0b:e6:a5:eb:2d:e9:86:79:db:b4:a2: b8:ac:46:6a:01:96:9a:8b:ee:a7:3b:79:c7:5f:78:c0:e0:21: ab:70:60:0f:ef:87:cb:20:b4:fa:eb:7d:a9:78:63:05:58:eb: f3:a7:c6:8a:c0:8b:ab:2a:d8:9d:f8:a2:25:da:38:7b:32:6b: cc:38:50:13:98:80:69:cd:95:1c:69:e8:59:63:b6:ab:dd:56: 7a:c1:a9:1e:17:09:2d:98:8a:6a:4e:7f:42:76:5e:61:d0:74: 97:97:5c:c4:01:37:46:ae:92:4c:39:45:20:34:14:92:a9:e3: 7a:27:1f:cf:34:2f:4e:15:d9:9a:ea:d1:b0:e2:72:48:63:f1: f9:e6:fb:70:de:e4:e1:15:8a:90:9b:c4:6f:3e:db:25:af:3c: 7d:2a:98:f3:49:5e:f1:7e:3c:b4:ef:65:30:94:89:c1:dd:4a: 84:1a:aa:63:dc:c2:b5:49:ea:77:60:ba:11:7c:b3:f9:89:9f: f6:5d:38:0a:56:c2:e3:9d:f6:32:cb:53:05:b5:9e:12:7a:b3: 84:b9:48:8a:dc:fc:d5:00:4c:32:9e:71:3d:61:4c:f9:77:05: e1:47:2c:83:e8:9d:19:83:2e:c3:e3:aa:63:79:2f:a9:6a:7d: 22:5b:c2:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwNTIxMDM0MDM2WhcNMjYwNTI4MDM0MDM2WjAYMRYwFAYD VQQDEw02YTBlN2ViNC1kZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHwojLGPSE8f80xGAch1lBofp1OornfWpQx5awEUDlzoJL/NpwTfw/JIpd7H Pew5kkN877IwQ2GVmL6v8izJqjSgxM1bdvUQgiCufm0jdsnO+F77gPY9GDxUvnqf E+ZvIbu2l/2boDAuIxHe/EzFiWLV5r+cOo1e0ATu1wcbI1RT/aq+dnZG9ESISuLs 5uoUB2aiHJ0DFbe8/JHH+dF3e6GlWvqsjSAwzcjKk+pcfB9XZSDYu4TPd5Q7l16a pbnR94Xq0tMDR1wSVYyYq+qJgyAJSAuuIfhuGVpQnYLwEE2DAutCUOlvoMk4vbzA ja0rzraZEd3gwKWgQm1tOeailQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvkSAVf Rq48sJ7mbn3wL1mxwNYPMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGQdGqhbi6Avmpest6YZ527SiuKxGagGWmovupzt5x194wOAhq3BgD++HyyC0 +ut9qXhjBVjr86fGisCLqyrYnfiiJdo4ezJrzDhQE5iAac2VHGnoWWO2q91WesGp HhcJLZiKak5/QnZeYdB0l5dcxAE3Rq6STDlFIDQUkqnjeicfzzQvThXZmurRsOJy SGPx+eb7cN7k4RWKkJvEbz7bJa88fSqY80le8X48tO9lMJSJwd1KhBqqY9zCtUnq d2C6EXyz+Ymf9l04ClbC4532MstTBbWeEnqzhLlIitz81QBMMp5xPWFM+XcF4Ucs g+idGYMuw+OqY3kvqWp9IlvCJg== -----END CERTIFICATE-----Generated at Thu May 21 15:03:40 2026 by rpki-client