$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: yAGJtIq2ExSwUO0XdMliJB3exAtLDkxtsxtzThIRBQY= Subject key identifier: A7:09:04:31:C4:85:6B:7E:86:4F:BD:E0:6B:A0:DB:A3:E4:1D:87:54 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0CA8 Signing time: Wed 20 May 2026 18:32:57 +0000 Manifest this update: Wed 20 May 2026 18:32:56 +0000 Manifest next update: Wed 27 May 2026 18:32:56 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: OBUyD9KmRZFKWIaWwVjBfc67mlUaTnXI7T9AuzNj1dg=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: May 20 18:32:56 2026 GMT Not After : May 27 18:32:56 2026 GMT Subject: CN=6a0dfe58-6f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:32:6b:4b:05:6f:15:e4:2b:a9:31:40:06: 3e:79:87:ed:a1:81:a6:27:f2:3e:57:06:28:1a:be: 40:04:46:01:77:e3:4c:a2:81:7c:99:c6:26:94:d9: b0:33:b7:54:83:b6:ac:70:f2:62:67:41:bd:f4:98: d3:9f:2f:24:29:f6:76:6b:9d:7a:14:55:ff:b9:c6: 83:52:20:d4:71:0f:df:99:7a:7a:82:4d:a5:94:4a: 1f:7d:81:93:96:0f:8a:08:e3:e5:84:31:2e:bf:e2: 4e:40:06:3e:df:ec:41:90:78:5e:6b:96:2c:56:1d: 11:a4:8b:d5:5d:dc:04:e0:70:fa:72:94:09:13:60: a9:4c:18:d5:56:e5:0c:cd:cc:54:3a:60:70:eb:10: dd:3d:b7:90:a5:ba:f5:84:3a:ab:59:3c:d4:3e:28: 7a:fd:44:7d:b0:67:e5:a1:a0:6b:e2:18:a0:f5:23: 86:53:92:08:eb:d4:37:3c:61:5b:27:25:77:1a:7a: 2a:8b:c3:48:b3:b9:10:92:2b:d1:07:db:22:9d:c4: c0:46:b6:c9:54:7c:66:90:bf:a9:d6:87:95:7f:ba: d2:dd:b8:e3:1a:02:a6:77:00:12:d3:bc:51:83:e3: 11:3d:4f:dc:50:44:de:b0:e5:d6:17:92:3c:17:ac: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:09:04:31:C4:85:6B:7E:86:4F:BD:E0:6B:A0:DB:A3:E4:1D:87:54 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7f:e7:d9:2a:b9:79:38:5e:46:88:00:f2:df:9e:95:c6:bc: 16:e7:0d:06:af:54:55:bd:08:c1:03:d1:6e:c3:dd:3d:f7:be: 22:77:e0:ef:d1:a6:40:2c:cf:90:2c:a1:59:2a:ee:fa:48:37: e6:42:7a:a8:e2:46:f0:f0:15:3b:81:05:d6:91:ee:d2:70:eb: 0b:40:ee:ee:64:43:6b:be:82:b4:8e:19:47:be:f2:4f:cb:8f: f0:af:63:f6:83:0b:cc:65:f7:77:49:98:8b:a7:94:b3:77:03: a8:e8:72:3c:8d:fd:e3:0f:bd:0e:fe:ac:b1:18:a3:ba:31:7a: 9d:a7:a7:c9:9e:c4:ad:19:b7:12:b1:16:d6:85:41:41:ae:e1: 83:1f:39:cf:ae:a0:6f:b3:48:2c:eb:81:49:aa:3e:4a:96:85: 11:00:39:5b:2a:db:d9:8f:24:6f:f0:ef:35:5e:f4:da:9f:58: 82:70:61:98:31:7f:86:6e:bc:f7:f7:86:00:1b:08:3a:45:52: 74:9b:a4:09:7f:bd:c5:bc:04:f4:bc:eb:a8:e3:50:92:cb:3d: 66:e1:7e:57:38:e7:c4:55:99:b1:88:d6:9d:b6:5f:00:2f:b9: a0:4e:25:eb:3c:03:12:67:33:a4:73:9a:72:e4:26:1b:9a:e6: 29:42:5a:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjYwNTIwMTgzMjU2WhcNMjYwNTI3MTgzMjU2WjAYMRYwFAYD VQQDEw02YTBkZmU1OC02ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ncya0sFbxXkK6kxQAY+eYftoYGmJ/I+VwYoGr5ABEYBd+NMooF8mcYmlNmw M7dUg7ascPJiZ0G99JjTny8kKfZ2a516FFX/ucaDUiDUcQ/fmXp6gk2llEoffYGT lg+KCOPlhDEuv+JOQAY+3+xBkHhea5YsVh0RpIvVXdwE4HD6cpQJE2CpTBjVVuUM zcxUOmBw6xDdPbeQpbr1hDqrWTzUPih6/UR9sGfloaBr4hig9SOGU5II69Q3PGFb JyV3Gnoqi8NIs7kQkivRB9sincTARrbJVHxmkL+p1oeVf7rS3bjjGgKmdwAS07xR g+MRPU/cUETesOXWF5I8F6xuKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcJBDHE hWt+hk+94Gug26PkHYdUMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMn/n2Sq5eTheRogA8t+elca8FucNBq9UVb0IwQPRbsPdPfe+Infg79GmQCzP kCyhWSru+kg35kJ6qOJG8PAVO4EF1pHu0nDrC0Du7mRDa76CtI4ZR77yT8uP8K9j 9oMLzGX3d0mYi6eUs3cDqOhyPI394w+9Dv6ssRijujF6naenyZ7ErRm3ErEW1oVB Qa7hgx85z66gb7NILOuBSao+SpaFEQA5Wyrb2Y8kb/DvNV702p9YgnBhmDF/hm68 9/eGABsIOkVSdJukCX+9xbwE9LzrqONQkss9ZuF+VzjnxFWZsYjWnbZfAC+5oE4l 6zwDEmczpHOacuQmG5rmKUJaow== -----END CERTIFICATE-----Generated at Thu May 21 09:35:57 2026 by rpki-client