$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft File: iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json) Hash identifier: 5xQOoZLqJmCOt9Kgm1n1+TBxe9Zj5q0vLINSTPQglU8= Subject key identifier: C0:63:42:5D:BE:E1:4A:3D:11:A3:A7:EB:99:CF:ED:C9:43:85:26:71 Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71 Certificate issuer: /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft Manifest number: 0154 Signing time: Thu 21 May 2026 05:13:36 +0000 Manifest this update: Thu 21 May 2026 05:13:35 +0000 Manifest next update: Thu 28 May 2026 05:13:35 +0000 Files and hashes: 1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: VIQC7hMsJ6EdqjP5oYmqFFwFYLsxfbQxaxdjIhkguo8=) 2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: oQRja5kNE1xgzFCqir1541pX0ir8ZOqbUXiW5IO5uBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71 Validity Not Before: May 21 05:13:35 2026 GMT Not After : May 28 05:13:35 2026 GMT Subject: CN=6a0e947f-21dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:54:2e:85:67:7f:b4:b1:4c:1e:87:02:da: c1:73:ac:7c:10:75:a1:b2:90:b2:eb:4d:b7:fe:e8: 95:ad:04:a2:21:fb:64:13:07:38:e9:3c:2a:ad:0a: 51:23:5f:ef:10:02:e1:33:ee:dc:ba:86:27:a1:b4: e4:fc:ef:97:34:87:6b:be:ee:75:d4:e0:c4:57:af: 4f:ee:e4:5a:1b:1b:82:e9:5a:cd:12:22:06:86:28: c7:5f:ba:7e:f4:a9:ce:f8:fc:f8:eb:94:c7:e6:ec: 7e:fd:98:3a:de:74:fd:12:eb:9e:f9:75:20:67:16: aa:b1:af:c5:d4:65:98:1d:de:b4:2a:de:ad:2d:a6: 85:64:5a:8c:40:a9:5b:21:0f:60:3b:eb:30:ad:4a: d5:a7:26:c8:7d:25:9c:86:e9:e3:49:bf:ea:fd:1d: a0:c3:3f:d1:05:56:a6:01:96:61:c8:12:c6:94:db: 64:eb:fe:5f:27:05:31:ed:a9:4e:c2:e4:a0:2d:33: 3a:1a:7f:4a:80:54:91:ea:2b:85:24:56:43:4e:7e: 8d:ed:e0:69:91:4d:dc:61:3b:26:71:d2:df:2d:c8: 95:61:dc:2e:79:53:9d:a7:7e:89:20:58:45:79:d9: d0:04:9a:d5:16:ad:b1:d8:11:b5:21:b3:fb:f2:59: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:63:42:5D:BE:E1:4A:3D:11:A3:A7:EB:99:CF:ED:C9:43:85:26:71 X509v3 Authority Key Identifier: keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:da:03:1a:78:90:68:43:1f:5c:3f:4f:c9:e7:bf:34:dd:b8: 11:76:c0:c2:d1:15:fd:cd:b4:06:58:f8:3e:e7:57:ee:73:fe: b4:7e:fc:cc:ee:de:06:0b:e8:32:57:db:7e:d5:d3:ac:70:a2: ae:74:b8:59:e5:8c:4f:ca:7f:91:02:ac:d6:50:f0:c3:23:42: f8:22:68:3c:54:c6:f3:34:08:16:b1:c6:ce:b6:fb:ed:70:f0: bb:cd:59:77:49:6f:f9:92:61:d7:2b:1f:61:ca:e9:ec:57:a9: ae:1a:db:41:8b:9d:b1:00:d7:3e:75:0b:fb:a7:97:5f:69:d2: 16:16:ae:b3:07:87:10:08:90:2a:b1:cf:47:2b:59:8b:36:a6: 3e:2c:0b:a6:70:82:ea:b6:fa:ab:fa:05:dd:7f:63:fe:ef:aa: 17:ab:31:89:fc:cf:82:e4:34:31:90:23:71:5c:c6:c1:49:86: 90:db:95:5a:e5:24:da:8d:5d:db:ac:e5:46:5a:7f:07:4f:00: cf:c3:d0:b1:b9:9d:12:6c:53:cc:b9:7a:92:a0:7f:5a:72:63: a6:60:bf:28:77:a6:53:ab:50:7f:6e:f5:96:a9:c5:e3:21:8f: f0:d6:5c:c8:a9:76:82:e0:01:82:5b:0f:9f:9a:a5:42:f6:67: 79:82:a7:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3OTAxMTAvBgNVBAUTKDg5NDI4OUFENDBFRTdFNjI2RjVDRDgyRkNFQzU0MDZE QjkxRTFFNzEwHhcNMjYwNTIxMDUxMzM1WhcNMjYwNTI4MDUxMzM1WjAYMRYwFAYD VQQDEw02YTBlOTQ3Zi0yMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTlULoVnf7SxTB6HAtrBc6x8EHWhspCy6023/uiVrQSiIftkEwc46TwqrQpR I1/vEALhM+7cuoYnobTk/O+XNIdrvu511ODEV69P7uRaGxuC6VrNEiIGhijHX7p+ 9KnO+Pz465TH5ux+/Zg63nT9Euue+XUgZxaqsa/F1GWYHd60Kt6tLaaFZFqMQKlb IQ9gO+swrUrVpybIfSWchunjSb/q/R2gwz/RBVamAZZhyBLGlNtk6/5fJwUx7alO wuSgLTM6Gn9KgFSR6iuFJFZDTn6N7eBpkU3cYTsmcdLfLciVYdwueVOdp36JIFhF ednQBJrVFq2x2BG1IbP78lknuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBjQl2+ 4Uo9EaOn65nP7clDhSZxMB8GA1UdIwQYMBaAFIlCia1A7n5ib1zYL87FQG25Hh5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc5MC83MTgwNUJBQzVB RTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZtSnZYTmd2enNWQWJia2VI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVS0pyVUR1Zm1KdlhOZ3Z6c1ZBYmJrZUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTc5MC83MTgwNUJBQzVBRTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZt SnZYTmd2enNWQWJia2VIbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwNoDGniQaEMfXD9Pyee/NN24EXbAwtEV/c20Blj4PudX7nP+tH78zO7eBgvo MlfbftXTrHCirnS4WeWMT8p/kQKs1lDwwyNC+CJoPFTG8zQIFrHGzrb77XDwu81Z d0lv+ZJh1ysfYcrp7FeprhrbQYudsQDXPnUL+6eXX2nSFhausweHEAiQKrHPRytZ izamPiwLpnCC6rb6q/oF3X9j/u+qF6sxifzPguQ0MZAjcVzGwUmGkNuVWuUk2o1d 26zlRlp/B08Az8PQsbmdEmxTzLl6kqB/WnJjpmC/KHemU6tQf271lqnF4yGP8NZc yKl2guABglsPn5qlQvZneYKniA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:46 2026 by rpki-client