$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: 4upP40dlJC6WIxKjKPMwtKrhG506SVrCORvtQDPrwLI= Subject key identifier: 32:92:8A:E3:93:6E:6F:44:A5:18:F9:BF:01:56:B2:9F:6E:5E:BC:3A Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0A30 Signing time: Wed 20 May 2026 19:47:13 +0000 Manifest this update: Wed 20 May 2026 19:47:12 +0000 Manifest next update: Wed 27 May 2026 19:47:12 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: ppubKK7ySyXJoJZwH7N69qVpCRZfUARoiqU38kXPLus=) 2: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: 2OCGb2GsDSN9eWUkEJm9OxDpHisk081Il0yQc3djlTw=) 3: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: May 20 19:47:12 2026 GMT Not After : May 27 19:47:12 2026 GMT Subject: CN=6a0e0fc1-d35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:64:85:7f:ae:ea:75:00:d1:43:7a:85:f2: c4:a7:b3:42:78:21:bf:bf:84:02:6f:c0:24:25:88: b7:26:3a:82:c6:02:e4:61:ae:11:f9:bf:2b:a1:42: 8f:cd:00:bc:8a:44:b6:7a:dd:73:66:5c:4b:3b:98: 06:e3:7e:ff:09:35:e1:21:1a:48:35:26:fb:ed:b5: fa:b5:3f:7c:28:3e:e2:3d:a3:21:e7:56:ab:5b:4a: 7a:93:f9:da:9b:96:95:c0:6c:f1:7b:62:55:1e:f6: 6d:d0:df:36:db:8b:6b:ac:0e:d2:2e:49:89:17:5a: b2:3d:2c:62:f3:57:de:48:b9:64:32:ea:4f:d2:96: ab:fa:de:5a:e4:d4:83:8d:cc:ff:11:67:56:ea:35: 1e:79:29:37:82:5b:5e:92:a1:52:d4:dc:21:4e:94: 84:ee:68:cb:34:2d:7b:fb:1a:82:89:64:8d:7a:79: 76:53:a1:7b:38:79:15:bb:03:50:b6:56:67:60:63: 12:2c:60:e6:c2:bb:81:bd:28:69:d5:a7:d0:92:6f: 94:f7:93:a6:78:af:7e:65:76:fe:83:1d:e4:34:51: 6f:68:b8:c0:84:09:e5:f0:11:68:a7:a1:08:b7:0b: 22:db:38:01:0e:c4:a0:33:d0:a8:ae:5b:e6:75:fd: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:92:8A:E3:93:6E:6F:44:A5:18:F9:BF:01:56:B2:9F:6E:5E:BC:3A X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:a7:b2:fa:f0:8a:c9:8c:2f:01:08:46:2d:d5:6f:ef:ba: 21:9d:e5:99:be:dc:8c:c2:a7:64:53:f5:fe:89:ac:1d:91:98: 12:25:7b:92:fc:2d:a9:97:38:6c:13:cb:7d:53:74:fd:28:99: 53:ea:8f:02:19:3f:f2:ef:d8:55:15:07:9e:bf:88:80:f2:cc: 55:7f:64:32:22:0a:95:1b:06:61:6c:2a:0a:6a:be:b4:6b:10: 61:48:21:30:1c:02:bf:fe:eb:60:e7:63:9e:45:0b:41:db:fc: 91:0b:30:21:f3:a0:4e:d5:10:fb:0b:4b:30:97:e6:b2:a7:ac: 98:69:4f:b5:a9:25:85:25:bb:3f:39:60:f3:e3:e9:d4:2a:18: f6:9e:c7:28:f3:3c:18:c1:a5:01:aa:68:13:c2:4d:6c:f9:22: 5c:c5:66:b6:fb:54:bf:f5:dd:da:b1:af:a5:23:6b:dc:63:72: 57:9e:3d:22:24:07:4a:fa:d4:3c:42:69:bc:cc:1d:c5:3c:f5: 23:1b:98:d6:09:79:f3:97:d3:3d:1e:e6:a6:7d:88:14:8e:a9: 92:ad:c0:10:af:52:a1:88:4b:55:9e:15:b2:3a:32:eb:5f:51: c2:ff:a6:c1:20:f3:44:49:5c:91:53:03:0f:0c:10:4e:ea:a6: 3d:25:3d:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjYwNTIwMTk0NzEyWhcNMjYwNTI3MTk0NzEyWjAYMRYwFAYD VQQDEw02YTBlMGZjMS1kMzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArExkhX+u6nUA0UN6hfLEp7NCeCG/v4QCb8AkJYi3JjqCxgLkYa4R+b8roUKP zQC8ikS2et1zZlxLO5gG437/CTXhIRpINSb77bX6tT98KD7iPaMh51arW0p6k/na m5aVwGzxe2JVHvZt0N8224trrA7SLkmJF1qyPSxi81feSLlkMupP0par+t5a5NSD jcz/EWdW6jUeeSk3gltekqFS1NwhTpSE7mjLNC17+xqCiWSNenl2U6F7OHkVuwNQ tlZnYGMSLGDmwruBvShp1afQkm+U95OmeK9+ZXb+gx3kNFFvaLjAhAnl8BFop6EI twsi2zgBDsSgM9Corlvmdf35eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKSiuOT bm9EpRj5vwFWsp9uXrw6MB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXBmnsvrwismMLwEIRi3Vb++6IZ3lmb7cjMKnZFP1/omsHZGYEiV7kvwtqZc4 bBPLfVN0/SiZU+qPAhk/8u/YVRUHnr+IgPLMVX9kMiIKlRsGYWwqCmq+tGsQYUgh MBwCv/7rYOdjnkULQdv8kQswIfOgTtUQ+wtLMJfmsqesmGlPtaklhSW7Pzlg8+Pp 1CoY9p7HKPM8GMGlAapoE8JNbPkiXMVmtvtUv/Xd2rGvpSNr3GNyV549IiQHSvrU PEJpvMwdxTz1IxuY1gl585fTPR7mpn2IFI6pkq3AEK9SoYhLVZ4Vsjoy619Rwv+m wSDzRElckVMDDwwQTuqmPSU9+Q== -----END CERTIFICATE-----Generated at Thu May 21 17:11:29 2026 by rpki-client