$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: oBm4ahLvU/prP0oRqA0dbIQPHZMO1FyLopppGvSr/Ts= Subject key identifier: 5D:3B:40:B8:5E:6B:AC:D9:6C:94:42:15:87:3F:2D:E8:C9:79:AD:04 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 01FF Signing time: Thu 21 May 2026 03:09:38 +0000 Manifest this update: Thu 21 May 2026 03:09:37 +0000 Manifest next update: Thu 28 May 2026 03:09:37 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: L843pinQTZYocp98vAaQi65V/Z0/YSZjM1fs2XpO5P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: May 21 03:09:37 2026 GMT Not After : May 28 03:09:37 2026 GMT Subject: CN=6a0e7772-8c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:ba:0a:9d:c1:51:44:da:0f:f7:88:3e:f6: 3f:9b:98:fc:af:42:69:bc:5e:c9:db:52:36:bf:56: 8a:de:7e:d7:39:96:aa:b0:fd:09:e1:ca:99:d2:50: 9d:ea:39:c8:2c:c0:07:b7:aa:af:4b:3c:9b:c5:c8: c1:03:66:e5:16:eb:e0:a8:e4:57:b1:10:96:c7:a6: 9f:df:17:9f:29:cd:5c:54:88:3d:11:d2:20:c6:cb: f8:f0:d2:e6:19:51:c9:85:15:b3:93:3d:7c:94:88: ef:61:c1:ae:86:d0:a4:3e:9c:3a:97:e9:e1:5b:09: a8:05:63:21:8e:6f:6d:ed:9b:22:da:f4:af:36:be: d6:c1:9a:c9:4d:e0:01:a4:13:cd:b9:da:4c:e7:ff: aa:fb:3e:40:94:7c:a4:c8:ef:81:e7:4f:00:58:72: 00:11:75:81:72:56:5e:95:03:f2:c0:d9:d0:a5:a6: ba:2e:c6:fb:40:83:e5:e3:0e:ee:f4:70:02:3b:88: da:b0:9a:31:dd:58:ae:43:18:8e:42:0b:c8:c7:0c: 6e:97:fa:17:be:10:80:9f:63:73:a0:cb:03:97:17: 4b:fb:be:f0:2d:81:fd:ed:33:c8:1a:d8:3c:2e:9b: 17:fe:e1:64:f0:1c:ff:32:2b:71:a3:b9:37:e7:02: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:40:B8:5E:6B:AC:D9:6C:94:42:15:87:3F:2D:E8:C9:79:AD:04 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:fa:05:ea:78:a5:6f:6f:45:19:d9:f1:e4:e9:6a:6b:3f:84: 40:70:58:ff:c1:fa:31:83:94:ed:a9:94:fb:f0:27:cd:5d:46: 29:c1:ae:66:7d:e1:48:27:39:68:86:6a:5d:5e:e0:cf:09:10: d1:d7:a7:d7:da:89:02:29:ce:39:3c:70:ba:21:38:85:f2:a4: f1:32:2b:f3:d5:21:80:56:73:09:c4:2a:9b:fc:17:71:85:5a: 37:8d:ca:e6:78:4a:ba:e5:4e:82:76:06:7e:aa:7b:7f:8b:59: 3e:57:5a:ee:27:27:79:02:4b:2c:b0:ae:d6:5d:d3:f9:68:6f: a1:3a:7a:b6:10:3f:a2:e2:4b:e3:cf:d3:a9:1e:e6:0e:8d:1a: de:a2:58:14:05:d7:51:85:2c:6a:fe:67:25:fd:7c:82:a2:9e: 95:38:d9:a4:de:b3:1c:a9:6d:a3:02:e6:ec:48:7e:eb:74:17: 7b:34:39:3a:25:84:1d:91:bc:1a:4c:88:70:ee:11:ae:de:ce: 81:b3:74:48:e7:d0:0a:f6:c4:86:f9:43:8d:3e:97:c0:2b:98: 0b:fc:a4:8b:9a:8c:25:2f:62:74:00:1f:f9:24:3d:c5:93:d6: 84:c3:1b:af:72:8f:81:61:a7:60:2c:cb:5c:31:95:f3:f7:a7: 7c:58:3d:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwNTIxMDMwOTM3WhcNMjYwNTI4MDMwOTM3WjAYMRYwFAYD VQQDEw02YTBlNzc3Mi04YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI+6Cp3BUUTaD/eIPvY/m5j8r0JpvF7J21I2v1aK3n7XOZaqsP0J4cqZ0lCd 6jnILMAHt6qvSzybxcjBA2blFuvgqORXsRCWx6af3xefKc1cVIg9EdIgxsv48NLm GVHJhRWzkz18lIjvYcGuhtCkPpw6l+nhWwmoBWMhjm9t7Zsi2vSvNr7WwZrJTeAB pBPNudpM5/+q+z5AlHykyO+B508AWHIAEXWBclZelQPywNnQpaa6Lsb7QIPl4w7u 9HACO4jasJox3ViuQxiOQgvIxwxul/oXvhCAn2NzoMsDlxdL+77wLYH97TPIGtg8 LpsX/uFk8Bz/Mitxo7k35wILZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF07QLhe a6zZbJRCFYc/LejJea0EMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxfoF6nilb29FGdnx5Olqaz+EQHBY/8H6MYOU7amU+/AnzV1GKcGuZn3hSCc5 aIZqXV7gzwkQ0den19qJAinOOTxwuiE4hfKk8TIr89UhgFZzCcQqm/wXcYVaN43K 5nhKuuVOgnYGfqp7f4tZPlda7icneQJLLLCu1l3T+WhvoTp6thA/ouJL48/TqR7m Do0a3qJYFAXXUYUsav5nJf18gqKelTjZpN6zHKltowLm7Eh+63QXezQ5OiWEHZG8 GkyIcO4Rrt7OgbN0SOfQCvbEhvlDjT6XwCuYC/yki5qMJS9idAAf+SQ9xZPWhMMb r3KPgWGnYCzLXDGV8/enfFg96g== -----END CERTIFICATE-----Generated at Thu May 21 10:52:04 2026 by rpki-client