$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: s2qrg/ksVPgbiKXkWuQreXd7GC2xxBw+Tcy4t/DQnuc= Subject key identifier: D2:9D:D7:91:BD:DD:84:DF:26:05:22:D6:93:BD:F5:6E:FB:2D:F2:F4 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 0567 Signing time: Wed 20 May 2026 23:26:24 +0000 Manifest this update: Wed 20 May 2026 23:26:23 +0000 Manifest next update: Wed 27 May 2026 23:26:23 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: ygHTV9AW6Pna7t0TeOGNnsS8iXeCO3hj5j2Z3OXvwAA=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: May 20 23:26:23 2026 GMT Not After : May 27 23:26:23 2026 GMT Subject: CN=6a0e431f-400c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:33:83:1b:81:3d:4b:64:7e:fd:6d:88:b9: 2d:11:fb:77:5c:dd:c5:2d:b0:9a:69:6f:78:b8:35: 9b:56:75:57:b3:cb:c2:f6:c2:ca:0e:97:76:0e:c5: fb:51:da:dd:f5:3b:ef:7d:4b:0a:a4:d4:1a:68:f5: 15:0b:6a:a8:7d:51:40:ab:53:4e:b5:7e:36:58:24: d4:c5:9f:b1:9e:7b:a9:be:75:e8:1d:a4:b3:97:55: 06:cd:bc:30:62:dd:ad:5d:ab:fc:0e:43:ea:c3:b1: 44:d3:ed:20:d7:66:74:d1:90:07:60:16:2f:37:da: 13:a6:a6:77:01:db:a4:2f:b2:50:2e:12:9b:45:b5: 2d:67:c3:5e:5f:71:32:c6:c9:3b:3b:66:67:9b:f4: f9:9e:c5:1e:7d:76:e0:93:67:5f:c0:f2:79:b8:24: e4:8e:4d:8d:4d:4e:3d:30:c6:a7:36:64:d5:5b:ae: bd:f0:be:1f:2d:c4:26:05:a5:e0:21:25:17:1a:36: 40:8b:d1:78:57:d2:49:f8:22:c9:8d:44:07:c3:7d: 0b:08:75:dd:d5:f3:8b:0c:7e:f7:2c:17:31:93:9b: 44:98:cc:fa:01:2b:e5:53:f4:e3:41:6b:b9:53:d4: be:0d:0c:92:ac:4c:e4:f2:e6:24:cc:cc:e8:d2:e6: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:D7:91:BD:DD:84:DF:26:05:22:D6:93:BD:F5:6E:FB:2D:F2:F4 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:71:d1:b0:75:5b:35:12:cc:37:08:ff:ab:5a:07:3f:52:df: 7a:cd:87:f1:af:3a:0d:e6:3e:bb:70:e0:11:6d:17:ae:6a:95: 0c:9f:68:d9:ac:36:39:ca:d5:7a:7d:30:4f:ac:91:a8:75:a6: 4e:f0:4d:45:69:ae:48:3b:08:c5:31:34:b3:53:8b:ac:55:3e: f5:2b:f3:f6:57:1e:92:12:53:34:fc:32:01:1c:e5:c8:f9:ed: a1:3c:8a:2c:5c:aa:e5:75:2c:e3:8f:70:63:86:bd:f6:4b:73: 00:10:d6:54:90:bc:cb:b7:f7:0a:58:f3:29:0d:96:d4:8f:68: d1:92:ac:38:a0:ab:b4:89:c0:e8:78:1a:14:3e:a7:e1:f3:49: 20:73:c9:0c:70:b5:90:5e:96:07:95:ea:8a:37:51:df:ce:4b: f8:72:ab:06:7e:87:ec:c1:91:50:77:21:82:13:0a:3a:93:54: 79:70:96:92:45:42:11:93:86:11:91:6e:e6:10:09:e5:cb:3f: 10:36:a8:a8:ab:5d:6a:6b:da:cd:bc:fc:00:18:23:66:57:44: 31:0c:54:c2:dc:8c:0c:74:14:e8:2f:db:4e:7c:e6:60:c7:fe: e7:61:ff:f9:b2:1c:62:67:fb:a1:7e:71:f9:37:5c:d6:f9:93: d8:17:4b:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjYwNTIwMjMyNjIzWhcNMjYwNTI3MjMyNjIzWjAYMRYwFAYD VQQDEw02YTBlNDMxZi00MDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFYzgxuBPUtkfv1tiLktEft3XN3FLbCaaW94uDWbVnVXs8vC9sLKDpd2DsX7 Udrd9TvvfUsKpNQaaPUVC2qofVFAq1NOtX42WCTUxZ+xnnupvnXoHaSzl1UGzbww Yt2tXav8DkPqw7FE0+0g12Z00ZAHYBYvN9oTpqZ3AdukL7JQLhKbRbUtZ8NeX3Ey xsk7O2Znm/T5nsUefXbgk2dfwPJ5uCTkjk2NTU49MManNmTVW6698L4fLcQmBaXg ISUXGjZAi9F4V9JJ+CLJjUQHw30LCHXd1fOLDH73LBcxk5tEmMz6ASvlU/TjQWu5 U9S+DQySrEzk8uYkzMzo0uZc1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKd15G9 3YTfJgUi1pO99W77LfL0MB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXHRsHVbNRLMNwj/q1oHP1Lfes2H8a86DeY+u3DgEW0XrmqVDJ9o2aw2OcrV en0wT6yRqHWmTvBNRWmuSDsIxTE0s1OLrFU+9Svz9lcekhJTNPwyARzlyPntoTyK LFyq5XUs449wY4a99ktzABDWVJC8y7f3CljzKQ2W1I9o0ZKsOKCrtInA6HgaFD6n 4fNJIHPJDHC1kF6WB5XqijdR385L+HKrBn6H7MGRUHchghMKOpNUeXCWkkVCEZOG EZFu5hAJ5cs/EDaoqKtdamvazbz8ABgjZldEMQxUwtyMDHQU6C/bTnzmYMf+52H/ +bIcYmf7oX5x+Tdc1vmT2BdLcQ== -----END CERTIFICATE-----Generated at Thu May 21 11:15:21 2026 by rpki-client