$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: m5fOaQyEUk8sXgwqp2XC44VtkDppnlL90cEqpumUvyY= Subject key identifier: FD:3E:79:22:9D:D6:01:F7:E2:78:5A:2B:B4:AC:01:28:1F:64:DD:CA Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0289 Signing time: Fri 15 May 2026 01:52:17 +0000 Manifest this update: Fri 15 May 2026 01:52:16 +0000 Manifest next update: Fri 22 May 2026 01:52:16 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: OlPab7KLdZRfvdaAaztCeaZtMwGolu6jwDtHXKGgDAA=) 2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) 3: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 01:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: May 15 01:52:16 2026 GMT Not After : May 22 01:52:16 2026 GMT Subject: CN=6a067c51-a217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:a0:7b:d0:12:c1:f8:c0:f0:b5:ee:e4:38: c9:bc:72:eb:05:bc:7b:52:5c:d2:5e:5e:0f:cb:13: 5c:12:d5:ac:18:c5:ae:ad:f5:9e:8e:c7:7b:b3:cd: f8:60:84:17:7b:32:99:e5:3c:02:ab:1d:d9:4f:0d: fe:11:b1:62:e6:8a:e6:68:39:6e:45:c3:12:a8:47: 40:08:6c:9e:32:52:ff:da:00:d7:c8:e3:1b:21:b2: 6b:b2:ef:f7:de:a7:a9:66:f1:be:56:81:dd:3e:06: c9:fe:ca:36:db:d9:48:01:a9:23:6d:49:01:05:5e: 79:55:f9:d5:21:a0:a2:ec:db:91:00:a9:7a:77:95: 5f:bc:9a:b6:e6:ab:34:49:89:7b:66:c1:df:87:83: 45:13:01:85:a5:aa:f6:43:8f:c3:6f:6a:58:21:31: c9:60:bc:27:42:19:b9:3f:98:e2:0d:b3:cf:23:7e: d2:70:6e:4a:e0:a7:d1:4c:18:bd:90:c5:2b:bb:27: 29:28:56:95:2a:a5:07:0d:43:65:ac:4b:45:e7:75: 5f:73:54:31:1d:d7:f8:b2:98:ad:69:8e:ed:a9:ac: 96:5d:2e:e6:fe:0c:95:74:47:61:21:db:af:f4:cb: d5:78:06:08:91:35:26:4c:57:8e:b5:01:1c:07:1f: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3E:79:22:9D:D6:01:F7:E2:78:5A:2B:B4:AC:01:28:1F:64:DD:CA X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ec:a0:65:1d:52:1e:c1:8a:03:a5:86:d9:fa:c1:b5:fb:81: 20:93:6b:a4:e0:d0:cd:f6:ba:01:51:ce:3f:03:fc:c3:31:41: cc:88:11:d6:aa:ef:2c:ae:e7:2c:ee:7c:d3:13:d0:99:e6:50: 7f:54:0c:51:6b:cb:84:c9:3f:73:38:59:fe:d1:a9:e1:d5:c1: 52:e0:4a:aa:cb:4f:4b:a0:21:c0:61:d2:3b:b6:3d:61:c0:44: e5:04:19:a8:4b:98:ab:6d:95:8f:89:5e:c4:92:a9:76:44:b9: d1:e0:d3:68:9e:92:81:c3:3e:71:df:75:f7:7e:75:f4:78:b6: 06:69:5c:a0:94:06:03:e5:5a:6e:10:63:8c:44:56:80:6d:4d: df:7a:05:d2:de:ef:c1:ad:69:30:5f:c9:d7:11:85:45:e3:b8: e6:b3:59:31:6e:4d:b0:2a:80:ae:28:fe:83:e7:3d:1e:bf:b4: d1:99:48:23:4d:c6:d0:58:6f:97:0b:43:73:50:3c:3f:ba:c2: cc:41:b5:04:59:0d:ae:79:58:41:12:a4:b0:be:b6:61:b3:07: a8:11:ac:da:23:e9:2d:cf:82:ae:8b:5d:6a:c4:55:30:fe:ee: 5c:33:48:3d:a2:6e:2f:f5:9c:b2:a8:df:b3:95:79:4d:8c:60: 4a:71:b4:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwNTE1MDE1MjE2WhcNMjYwNTIyMDE1MjE2WjAYMRYwFAYD VQQDEw02YTA2N2M1MS1hMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFyge9ASwfjA8LXu5DjJvHLrBbx7UlzSXl4PyxNcEtWsGMWurfWejsd7s834 YIQXezKZ5TwCqx3ZTw3+EbFi5ormaDluRcMSqEdACGyeMlL/2gDXyOMbIbJrsu/3 3qepZvG+VoHdPgbJ/so229lIAakjbUkBBV55VfnVIaCi7NuRAKl6d5VfvJq25qs0 SYl7ZsHfh4NFEwGFpar2Q4/Db2pYITHJYLwnQhm5P5jiDbPPI37ScG5K4KfRTBi9 kMUruycpKFaVKqUHDUNlrEtF53Vfc1QxHdf4spitaY7tqayWXS7m/gyVdEdhIduv 9MvVeAYIkTUmTFeOtQEcBx8qBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0+eSKd 1gH34nhaK7SsASgfZN3KMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJuygZR1SHsGKA6WG2frBtfuBIJNrpODQzfa6AVHOPwP8wzFBzIgR1qrvLK7n LO580xPQmeZQf1QMUWvLhMk/czhZ/tGp4dXBUuBKqstPS6AhwGHSO7Y9YcBE5QQZ qEuYq22Vj4lexJKpdkS50eDTaJ6SgcM+cd9193519Hi2BmlcoJQGA+VabhBjjERW gG1N33oF0t7vwa1pMF/J1xGFReO45rNZMW5NsCqArij+g+c9Hr+00ZlII03G0Fhv lwtDc1A8P7rCzEG1BFkNrnlYQRKksL62YbMHqBGs2iPpLc+CrotdasRVMP7uXDNI PaJuL/Wcsqjfs5V5TYxgSnG0fQ== -----END CERTIFICATE-----Generated at Sat May 16 22:01:32 2026 by rpki-client