$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: laTiniyQAr2bgnznVv/sYL6E7BxCi1x80ANucZRUPpM= Subject key identifier: C6:C9:FF:5E:21:4B:90:47:A6:DC:CC:7F:96:38:BB:75:BF:BC:CE:D1 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 08B0 Signing time: Sat 16 May 2026 20:28:08 +0000 Manifest this update: Sat 16 May 2026 20:28:07 +0000 Manifest next update: Sat 23 May 2026 20:28:07 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: 0Rk5lawRVPasAgMpYKyaKgPGLtoD7Xp4M+2jzgr3kmo=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=) 3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=) 4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: May 16 20:28:07 2026 GMT Not After : May 23 20:28:07 2026 GMT Subject: CN=6a08d357-3b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:a8:73:68:0a:37:9b:10:80:6a:5b:67:91: b1:70:a3:7d:ad:01:8f:94:8f:16:75:35:d2:8f:49: b9:b8:b4:1d:05:08:bf:29:5d:c7:f0:72:68:14:65: 5d:93:a7:87:96:38:03:4b:99:dc:74:60:d8:32:2a: 02:61:e1:3e:fc:94:10:96:5f:68:f5:72:41:d8:0b: ff:22:68:9a:b2:7d:13:53:f0:83:78:e4:4f:fc:5e: f2:50:37:43:57:40:79:45:b0:db:ff:12:a2:e3:5b: 71:f2:ae:4c:ad:9a:6f:40:0c:6f:84:0e:ec:94:00: 20:f6:4c:a7:b7:a4:be:8a:d7:52:64:a5:30:ee:40: b9:f2:b1:a0:38:c5:9d:9a:54:8f:21:a1:2f:18:f2: 50:64:07:e7:bb:a7:df:19:5c:8b:fa:9c:c2:61:aa: 3c:20:0c:81:c0:ef:48:1e:b8:1b:a7:f6:16:03:e6: 66:da:22:f8:52:71:57:46:a7:15:26:4f:f6:09:54: 13:db:1b:c0:77:c3:73:76:e2:2a:d7:e4:9f:df:58: 20:01:e5:a6:ab:44:0f:45:c4:b9:7b:93:ee:73:ee: d7:54:26:12:7d:09:47:86:2f:23:0b:28:3d:90:58: a7:56:b8:16:2a:cf:b5:c3:fc:49:83:96:06:12:bf: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C9:FF:5E:21:4B:90:47:A6:DC:CC:7F:96:38:BB:75:BF:BC:CE:D1 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:65:87:d5:a5:7e:45:e8:53:27:5a:30:14:38:1c:7c:5b:e6: 5a:70:3b:b8:2e:c6:f3:be:12:90:4e:96:b8:c3:61:6a:3d:21: 25:0f:16:d0:9e:02:4b:b5:e4:b9:17:17:a8:b3:1d:38:3f:25: 43:08:9b:a0:90:67:2e:0f:cf:d8:7f:8e:22:1f:f9:bd:c7:ac: 8b:14:b3:4d:eb:69:cd:23:a3:16:67:7a:b7:c3:3e:29:06:a0: da:79:2b:f2:27:72:34:89:f3:8b:68:bb:e0:9b:ac:82:48:e7: d8:03:c0:35:48:15:10:17:90:56:aa:d9:30:6e:05:0a:d9:11: d7:bf:f5:fb:20:05:a3:f8:6b:67:64:c3:0e:c2:a2:ac:73:1f: ac:7c:65:83:4a:a5:a0:fa:a6:14:2c:65:8f:45:fe:e0:2b:b6: eb:13:e3:9d:a3:fc:d7:ef:e3:08:18:38:97:fe:ea:e1:ee:42: b6:1d:af:d2:73:00:7c:a9:07:43:dd:ab:0b:b6:2c:36:7a:2a: 27:04:64:ba:9b:03:81:3c:08:6f:1d:a6:7b:a8:72:6d:03:a4: 57:42:2b:79:58:38:97:ad:b7:57:75:c4:e1:aa:3d:54:29:d7: b6:8a:54:64:01:f0:d8:2a:f7:fa:27:54:26:66:cb:94:08:d5: 84:9b:0e:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjYwNTE2MjAyODA3WhcNMjYwNTIzMjAyODA3WjAYMRYwFAYD VQQDEw02YTA4ZDM1Ny0zYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRaoc2gKN5sQgGpbZ5GxcKN9rQGPlI8WdTXSj0m5uLQdBQi/KV3H8HJoFGVd k6eHljgDS5ncdGDYMioCYeE+/JQQll9o9XJB2Av/Imiasn0TU/CDeORP/F7yUDdD V0B5RbDb/xKi41tx8q5MrZpvQAxvhA7slAAg9kynt6S+itdSZKUw7kC58rGgOMWd mlSPIaEvGPJQZAfnu6ffGVyL+pzCYao8IAyBwO9IHrgbp/YWA+Zm2iL4UnFXRqcV Jk/2CVQT2xvAd8NzduIq1+Sf31ggAeWmq0QPRcS5e5Puc+7XVCYSfQlHhi8jCyg9 kFinVrgWKs+1w/xJg5YGEr89nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbJ/14h S5BHptzMf5Y4u3W/vM7RMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4GWH1aV+RehTJ1owFDgcfFvmWnA7uC7G874SkE6WuMNhaj0hJQ8W0J4CS7Xk uRcXqLMdOD8lQwiboJBnLg/P2H+OIh/5vcesixSzTetpzSOjFmd6t8M+KQag2nkr 8idyNInzi2i74Jusgkjn2APANUgVEBeQVqrZMG4FCtkR17/1+yAFo/hrZ2TDDsKi rHMfrHxlg0qloPqmFCxlj0X+4Cu26xPjnaP81+/jCBg4l/7q4e5Cth2v0nMAfKkH Q92rC7YsNnoqJwRkupsDgTwIbx2me6hybQOkV0IreVg4l623V3XE4ao9VCnXtopU ZAHw2Cr3+idUJmbLlAjVhJsObw== -----END CERTIFICATE-----Generated at Sat May 16 23:30:50 2026 by rpki-client