$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: ecafjpLffEaKYum7I/fTb/LoQMLtK/ZzZaLfuKcQmNg= Subject key identifier: E2:BE:3E:5D:39:9A:CC:6F:2A:E5:79:96:50:B3:05:AA:BB:26:26:46 Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 8E Signing time: Thu 21 May 2026 07:39:05 +0000 Manifest this update: Thu 21 May 2026 07:39:04 +0000 Manifest next update: Thu 28 May 2026 07:39:04 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: V90CBATcaNERE9shnSZOupWFGnqoLbp3Zxxk1keoqSY=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: May 21 07:39:04 2026 GMT Not After : May 28 07:39:04 2026 GMT Subject: CN=6a0eb699-b3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:35:f4:37:7b:3e:dd:df:b8:11:c4:82:3c: 59:3f:64:ab:89:82:14:dc:f1:7e:26:28:a2:76:51: 69:de:f5:19:dd:11:5d:d8:0a:5d:a8:3b:29:20:2b: 4b:30:06:c9:5d:63:58:96:f8:08:31:2b:b3:51:8f: 0c:05:54:0f:d8:7b:ba:0e:92:24:f7:7e:d0:0f:49: ac:be:20:de:d5:1a:56:e2:72:cc:c7:72:84:30:24: 66:e1:03:0f:4d:d6:c2:0d:5e:7f:d4:84:6c:70:af: de:2b:0b:05:6f:7e:28:46:c3:d1:14:a8:dd:d9:6c: 5a:42:24:57:03:5c:d3:9d:1c:86:be:b2:27:77:b4: 18:a8:ec:b3:28:14:b5:2f:23:bf:47:e1:f3:9f:8b: f5:9a:4e:52:77:69:8c:a0:c6:ae:11:f6:f5:50:1a: 74:9c:b5:4f:51:c1:e7:3b:19:fa:0c:af:05:af:7c: 51:54:86:d1:b0:0f:fa:ee:5a:d8:75:07:6c:56:48: aa:6a:52:a6:62:10:7a:9a:0d:aa:b0:84:1c:2c:74: e4:28:37:7d:13:33:06:fb:a9:57:f6:a4:ee:c4:4c: 2d:61:23:5b:8a:fc:90:dc:66:a0:ea:2e:d8:3f:6e: c6:9a:c4:7c:9a:14:a4:bd:ab:de:d6:a0:71:cd:5a: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BE:3E:5D:39:9A:CC:6F:2A:E5:79:96:50:B3:05:AA:BB:26:26:46 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d3:8b:98:b0:3c:54:eb:42:ff:69:c5:3b:47:a8:68:74:99: 30:a3:71:58:da:77:fe:a8:2d:0a:2f:ea:a8:49:cb:24:57:db: e5:f0:af:ee:b0:8f:98:ee:80:0f:ac:fd:af:61:3e:a9:e1:01: 1c:7b:42:b7:dc:5b:9f:d7:f6:e0:54:ff:8c:9f:e2:6a:26:9e: f8:28:56:7d:9c:96:3a:00:78:00:f3:8d:8a:f3:70:26:1c:01: 14:61:50:53:f9:a9:11:fb:25:00:d2:2c:ff:cc:13:60:80:82: 8b:2f:41:51:b5:1f:72:59:bf:77:19:63:28:c5:79:93:49:4f: 78:78:af:5a:da:8b:ab:24:7c:3c:54:da:8c:2b:4f:eb:ea:67: 20:e5:cc:0a:75:f4:87:07:cb:0b:3f:df:8b:cc:4a:c1:3f:a2: c4:60:12:27:f2:71:ef:7e:ce:66:d5:e1:05:21:ff:b2:2f:12: 1d:4f:f3:f2:c1:a5:45:b7:ae:1c:20:5c:df:60:02:b5:71:81: 81:ef:ee:55:54:08:24:88:cb:31:6d:26:49:ad:c9:06:30:f9: ed:bc:6a:44:27:08:1f:6f:15:e6:c1:3d:c0:f6:fa:f4:a7:92: d3:ca:13:52:5b:68:d5:bd:1b:22:ae:3f:5f:7b:fb:e8:f8:ef: 7d:6f:82:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxODUxMTAvBgNVBAUTKDg5Nzg0RDZEOTM4QjA1Q0MzQjdCNjY2RTVFN0FFRTky MjNERTRENzAwHhcNMjYwNTIxMDczOTA0WhcNMjYwNTI4MDczOTA0WjAYMRYwFAYD VQQDEw02YTBlYjY5OS1iM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApW419Dd7Pt3fuBHEgjxZP2SriYIU3PF+JiiidlFp3vUZ3RFd2ApdqDspICtL MAbJXWNYlvgIMSuzUY8MBVQP2Hu6DpIk937QD0msviDe1RpW4nLMx3KEMCRm4QMP TdbCDV5/1IRscK/eKwsFb34oRsPRFKjd2WxaQiRXA1zTnRyGvrInd7QYqOyzKBS1 LyO/R+Hzn4v1mk5Sd2mMoMauEfb1UBp0nLVPUcHnOxn6DK8Fr3xRVIbRsA/67lrY dQdsVkiqalKmYhB6mg2qsIQcLHTkKDd9EzMG+6lX9qTuxEwtYSNbivyQ3Gag6i7Y P27GmsR8mhSkvave1qBxzVqjLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK+Pl05 msxvKuV5llCzBaq7JiZGMB8GA1UdIwQYMBaAFIl4TW2TiwXMO3tmbl567pIj3k1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODE4NS84NTAxMTUzMjg0 QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9pWGhOYlpPTEJjdzdlMlp1WG5ydWtpUGVU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE4NS84NTAxMTUzMjg0QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9pWGhOYlpPTEJj dzdlMlp1WG5ydWtpUGVUWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdOLmLA8VOtC/2nFO0eoaHSZMKNxWNp3/qgtCi/qqEnLJFfb5fCv7rCPmO6A D6z9r2E+qeEBHHtCt9xbn9f24FT/jJ/iaiae+ChWfZyWOgB4APONivNwJhwBFGFQ U/mpEfslANIs/8wTYICCiy9BUbUfclm/dxljKMV5k0lPeHivWtqLqyR8PFTajCtP 6+pnIOXMCnX0hwfLCz/fi8xKwT+ixGASJ/Jx737OZtXhBSH/si8SHU/z8sGlRbeu HCBc32ACtXGBge/uVVQIJIjLMW0mSa3JBjD57bxqRCcIH28V5sE9wPb69KeS08oT Ulto1b0bIq4/X3v76PjvfW+CPQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:12 2026 by rpki-client