$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: ub8RB1XxsohMklUxm3Pt5tLuUxnvjl2rFysEV7RLab0= Subject key identifier: 24:AE:8E:06:C4:0D:4F:5A:7F:F7:59:2B:2E:12:E5:C9:F6:5A:A3:B3 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 0847 Signing time: Tue 12 May 2026 21:00:21 +0000 Manifest this update: Tue 12 May 2026 21:00:20 +0000 Manifest next update: Tue 19 May 2026 21:00:20 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: k9tAmA8eXbMUOUB2WiQdaE5drQ8DRr8SMXNHKceq8k4=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: FELlTiK0zkTPaIvuZPqjSFuesBh1m/szylRmww5rrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: May 12 21:00:20 2026 GMT Not After : May 19 21:00:20 2026 GMT Subject: CN=6a0394e4-4a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:28:db:f4:dc:c0:7d:3c:a7:24:b9:87:da: 67:97:60:db:30:05:28:a0:20:6d:ac:87:a1:f2:a7: 50:1f:3c:38:b4:e7:c9:5c:f5:ab:94:55:24:4d:07: 05:fe:00:31:b0:09:58:c2:9c:16:ea:83:e7:cf:30: 82:9b:07:e6:45:c2:4b:33:dd:6f:6c:29:22:bf:cc: 4c:99:a3:3f:3b:a6:55:56:d3:76:d2:43:8f:43:b4: 65:39:55:47:da:5a:bc:71:54:58:16:9c:f3:0d:02: 83:d7:da:4f:c7:0b:c5:88:11:7a:14:a6:f5:62:f9: 72:1b:ef:cd:c6:28:46:06:63:be:f2:65:68:15:c7: fa:6a:f6:76:fd:7e:7b:f1:09:12:e3:18:a8:af:a2: d5:95:be:e7:62:eb:55:7a:1d:6f:cf:5e:6f:f9:5e: ae:73:6a:06:ca:fa:fd:16:80:17:a5:c2:6b:12:d8: da:93:28:fa:7e:bc:e6:72:8c:2d:9f:fb:61:a2:b9: 42:90:ca:7c:5c:3b:ca:0d:0a:e8:2f:65:4f:b0:d3: 95:6c:db:f8:0a:76:30:3f:04:f7:11:8d:63:48:ce: 0c:58:45:ca:fe:22:b8:32:ee:d7:6d:6d:79:88:9e: f0:07:9b:7a:e1:e3:95:1d:87:4e:f3:04:2e:c3:4a: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AE:8E:06:C4:0D:4F:5A:7F:F7:59:2B:2E:12:E5:C9:F6:5A:A3:B3 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:cc:b7:26:fb:b8:1a:4b:cd:93:97:9c:9b:7d:67:0e:35:09: 84:1e:c2:98:eb:90:ca:8c:2b:11:09:35:32:d6:0e:a4:4a:84: 19:09:78:09:a7:77:eb:58:c1:46:34:34:25:23:92:f8:ed:8f: 27:15:63:58:88:de:23:8c:38:04:e3:d1:48:8f:01:11:cd:ed: 81:78:a6:ae:fc:20:8a:c2:4c:e5:4c:07:93:f2:c5:8e:89:86: 5b:2b:1a:29:d2:c3:58:1a:3d:ce:fd:a6:ee:8a:2f:a2:19:ac: 69:ec:c9:7f:7b:de:d1:0b:ec:f8:ff:d8:cc:75:89:3d:4b:d7: ed:0b:a0:aa:b7:cc:30:5e:39:da:a7:7b:b1:cf:85:48:e0:8a: 74:c6:22:b7:38:3c:56:ae:37:e0:b0:6c:54:b7:fc:f2:e7:56: 19:24:2c:6b:94:cf:32:d9:fe:c9:06:6e:f9:eb:67:63:ca:5f: 83:a8:9b:ac:0b:c0:84:25:78:43:1e:9b:df:ab:2e:85:8f:79: 7d:51:ae:25:7e:50:50:a5:56:4d:13:c0:1a:ec:e1:e4:6d:f5: 14:73:b0:8e:5f:f1:a2:c7:91:81:da:55:38:8e:10:eb:ae:97: ce:dc:ec:b0:aa:28:c4:f9:93:c1:3d:6b:07:56:ae:f3:e2:8f: 08:5a:7a:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjYwNTEyMjEwMDIwWhcNMjYwNTE5MjEwMDIwWjAYMRYwFAYD VQQDEw02YTAzOTRlNC00YTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbYo2/TcwH08pyS5h9pnl2DbMAUooCBtrIeh8qdQHzw4tOfJXPWrlFUkTQcF /gAxsAlYwpwW6oPnzzCCmwfmRcJLM91vbCkiv8xMmaM/O6ZVVtN20kOPQ7RlOVVH 2lq8cVRYFpzzDQKD19pPxwvFiBF6FKb1YvlyG+/NxihGBmO+8mVoFcf6avZ2/X57 8QkS4xior6LVlb7nYutVeh1vz15v+V6uc2oGyvr9FoAXpcJrEtjakyj6frzmcowt n/thorlCkMp8XDvKDQroL2VPsNOVbNv4CnYwPwT3EY1jSM4MWEXK/iK4Mu7XbW15 iJ7wB5t64eOVHYdO8wQuw0q6iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSujgbE DU9af/dZKy4S5cn2WqOzMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAscy3Jvu4GkvNk5ecm31nDjUJhB7CmOuQyowrEQk1MtYOpEqEGQl4Cad361jB RjQ0JSOS+O2PJxVjWIjeI4w4BOPRSI8BEc3tgXimrvwgisJM5UwHk/LFjomGWysa KdLDWBo9zv2m7oovohmsaezJf3ve0Qvs+P/YzHWJPUvX7QugqrfMMF452qd7sc+F SOCKdMYitzg8Vq434LBsVLf88udWGSQsa5TPMtn+yQZu+etnY8pfg6ibrAvAhCV4 Qx6b36suhY95fVGuJX5QUKVWTRPAGuzh5G31FHOwjl/xoseRgdpVOI4Q666Xztzs sKooxPmTwT1rB1au8+KPCFp6UQ== -----END CERTIFICATE-----Generated at Wed May 13 05:14:01 2026 by rpki-client