$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: CxSdLUZwKe4e5aaxJt+QwD/B9hVx3gpUtt/mdZeKhss= Subject key identifier: 44:8A:8E:FD:7B:44:5E:DC:B0:FE:CB:5A:82:37:92:76:22:31:40:38 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 0A9A Signing time: Wed 20 May 2026 19:32:59 +0000 Manifest this update: Wed 20 May 2026 19:32:59 +0000 Manifest next update: Wed 27 May 2026 19:32:59 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: xx3aXPVvaiHwN8kdSuhbCvHlI4IUdjsNfWKg81hqyxY=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: CU9KCOMgB/CimY7ixX135rNt1bHyh2BWO2MK74ixj8U=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: 7eNnv9/n13JHxhn9eXPX/2+r30TjaibukF568rxiuT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: May 20 19:32:59 2026 GMT Not After : May 27 19:32:59 2026 GMT Subject: CN=6a0e0c6b-ecce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:93:3a:47:ae:46:7b:a2:9f:d5:74:7f:7f: 3f:5a:31:8c:0c:36:90:cb:38:6c:e5:10:2d:1e:1e: 37:2b:d3:ba:de:b9:23:d0:e1:d5:63:a5:0f:d1:1b: 75:84:f0:a3:8f:ee:60:bf:33:fc:a3:b7:16:fa:b1: 5f:11:d7:cd:6f:e1:03:7b:f2:63:cd:a1:5b:38:ec: f0:24:16:24:18:a8:1c:66:81:b4:2c:aa:a2:40:3b: 09:e9:fd:e2:d6:47:12:e4:94:db:6e:13:b2:52:62: a3:ca:81:16:1f:df:bc:19:dd:32:53:85:62:41:1c: 98:eb:ef:fb:a8:99:36:57:39:53:1d:1e:24:4a:58: 01:5b:3d:1a:55:0e:e3:74:4d:70:aa:83:e5:bd:3e: 81:65:bc:d5:2a:c5:aa:00:9d:84:7a:9a:f1:15:ce: 9c:0b:5f:cf:45:45:e8:93:34:e0:fe:16:0c:44:77: 75:52:8c:06:9c:31:57:c3:0c:87:cb:00:ad:18:b0: 9b:72:06:20:be:49:8c:68:6b:eb:90:33:83:c2:2e: 24:f0:29:ad:ef:7f:25:19:2c:4c:78:bd:7e:d9:ea: df:36:89:e5:8a:98:9c:ac:c1:82:eb:09:1b:8f:06: bd:37:4b:8d:f5:81:35:f8:a0:db:60:12:6e:cd:63: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:8E:FD:7B:44:5E:DC:B0:FE:CB:5A:82:37:92:76:22:31:40:38 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:11:20:c1:67:9c:72:98:c7:77:68:4a:e4:fe:fe:3c:8a:b4: 89:88:a5:f5:98:45:58:b3:94:f6:4a:e6:20:48:fb:4e:56:c4: 86:e9:f9:1c:72:0a:5c:d2:ae:c5:00:03:75:55:97:6f:cf:2c: 58:3e:95:6d:2d:f2:fb:46:c2:d7:fb:01:e2:53:41:8d:21:28: 7c:7f:79:85:ef:12:80:e2:b8:5d:6d:2e:e8:d4:03:05:67:dd: 4a:80:d9:41:a4:fe:7a:f5:0b:2d:de:62:80:73:59:c3:0f:dc: cc:44:84:eb:d8:d1:63:0b:d4:23:69:bd:ff:2e:cf:78:64:0c: d4:a5:c3:33:c2:56:bf:e6:78:54:a2:38:3e:e8:4d:92:6b:df: a4:37:d7:45:0e:17:e4:e1:0a:fe:36:36:7b:02:33:0b:11:67: 13:f4:13:75:79:05:f3:a2:16:71:e9:41:6d:41:74:59:4e:d9: 28:25:d0:ed:e2:90:26:ba:6f:c5:d4:94:31:e5:12:70:91:11: 5f:5c:fd:c6:fd:3f:2c:10:a2:8f:c0:ad:89:73:9f:1a:53:1f: 44:d7:45:6d:04:79:4a:a0:b9:51:11:b5:b5:51:2b:30:71:4f: 26:8f:55:a1:e5:7d:c4:1b:a9:d5:88:51:bc:eb:bb:84:7c:c2: 77:fa:03:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjYwNTIwMTkzMjU5WhcNMjYwNTI3MTkzMjU5WjAYMRYwFAYD VQQDEw02YTBlMGM2Yi1lY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRiTOkeuRnuin9V0f38/WjGMDDaQyzhs5RAtHh43K9O63rkj0OHVY6UP0Rt1 hPCjj+5gvzP8o7cW+rFfEdfNb+EDe/JjzaFbOOzwJBYkGKgcZoG0LKqiQDsJ6f3i 1kcS5JTbbhOyUmKjyoEWH9+8Gd0yU4ViQRyY6+/7qJk2VzlTHR4kSlgBWz0aVQ7j dE1wqoPlvT6BZbzVKsWqAJ2EeprxFc6cC1/PRUXokzTg/hYMRHd1UowGnDFXwwyH ywCtGLCbcgYgvkmMaGvrkDODwi4k8Cmt738lGSxMeL1+2erfNonlipicrMGC6wkb jwa9N0uN9YE1+KDbYBJuzWPOVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESKjv17 RF7csP7LWoI3knYiMUA4MB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWBEgwWeccpjHd2hK5P7+PIq0iYil9ZhFWLOU9krmIEj7TlbEhun5HHIKXNKu xQADdVWXb88sWD6VbS3y+0bC1/sB4lNBjSEofH95he8SgOK4XW0u6NQDBWfdSoDZ QaT+evULLd5igHNZww/czESE69jRYwvUI2m9/y7PeGQM1KXDM8JWv+Z4VKI4PuhN kmvfpDfXRQ4X5OEK/jY2ewIzCxFnE/QTdXkF86IWcelBbUF0WU7ZKCXQ7eKQJrpv xdSUMeUScJERX1z9xv0/LBCij8CtiXOfGlMfRNdFbQR5SqC5URG1tVErMHFPJo9V oeV9xBup1YhRvOu7hHzCd/oDAA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:54 2026 by rpki-client