$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: fahdUAB0YiGRWb7DrGu3OHFnCzl+19PE2Dk+Lz+eNwE= Subject key identifier: 10:7F:22:E7:7B:BA:1D:D3:CF:3F:77:CF:9B:39:A7:A5:DE:DC:A3:DC Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 01FD Signing time: Mon 11 May 2026 03:12:28 +0000 Manifest this update: Mon 11 May 2026 03:12:27 +0000 Manifest next update: Mon 18 May 2026 03:12:27 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: geSEpsrUmiJH1d8J7gO7ycCEIdgttoj28YIuCyA2ZFo=) 2: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: opDVDCbsBQzHpTdEZkXg8pK+yXFCw2wR9EtK3a8UOv0=) 3: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: AF0W4FDa8CoBiD6z3FUESJd4F8PISKrGbqKu0L1rR38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: May 11 03:12:27 2026 GMT Not After : May 18 03:12:27 2026 GMT Subject: CN=6a01491c-6e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:2f:7c:b8:6c:14:eb:f8:0c:fa:f5:73:92: 8b:3b:4a:b6:c8:d3:57:7c:1f:d1:ca:66:f7:23:38: c1:db:08:3a:37:98:1c:1f:10:59:90:fd:26:1e:44: 59:12:6d:b5:58:96:21:9e:16:c3:00:58:aa:35:0b: 82:68:1a:bf:2f:46:69:84:a1:cc:a9:b8:c3:8b:2a: 3c:fb:f2:e6:91:a5:db:b9:e3:31:bf:8e:72:a8:a6: f5:02:b1:01:da:ba:2d:d0:e7:72:c4:58:8f:8f:59: 75:d6:a5:76:70:37:9b:0b:1c:57:08:d8:52:7e:ad: da:32:1e:4f:5b:b5:9e:fa:e7:4c:c1:c5:27:f2:8b: cd:83:a6:af:78:7d:42:d5:9d:91:52:b3:16:d0:c5: 61:ed:4f:01:ab:bd:ba:36:fe:80:2d:61:af:6d:ad: 60:eb:aa:f0:9d:88:4d:50:02:c8:3c:72:86:d8:1f: 14:0a:21:14:29:ec:a2:dd:f7:6f:4d:5a:0c:7b:23: 26:4d:c6:25:f2:c0:5c:38:42:41:d3:bf:e1:b3:fc: 46:11:50:e7:5f:17:8e:f5:c1:fa:c8:1f:83:c3:76: c2:f5:c8:55:c3:59:8d:b4:47:cf:11:01:38:7b:9d: bf:19:fd:8b:8b:4c:a6:b7:ae:5e:5a:d8:58:1d:c8: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7F:22:E7:7B:BA:1D:D3:CF:3F:77:CF:9B:39:A7:A5:DE:DC:A3:DC X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:4b:60:9c:a3:2e:c8:78:01:f0:91:1a:2c:45:35:62:ac: 7f:b3:d2:bd:ea:c9:6c:36:98:bc:b1:92:4b:c5:d8:db:0b:ff: 0d:c1:68:fe:04:41:8f:b3:99:03:03:5f:67:57:66:39:c4:a9: e3:22:0f:98:5b:34:a9:bd:a9:ed:77:2c:bb:3a:40:d4:a7:a8: f1:df:cf:d3:a7:a8:c1:36:13:b0:77:6b:ac:4e:7d:58:7b:02: 4f:d5:de:06:8a:2b:79:1e:61:60:39:9d:a9:e4:09:4b:27:80: 98:be:09:3f:c9:a5:7f:49:d9:0a:7a:44:df:d8:5a:fc:97:63: 02:32:10:7c:59:a1:84:b8:d6:3f:0f:1b:40:45:95:33:3a:bc: 58:1c:49:5a:17:fa:4d:1b:c2:9a:e7:cf:a3:e7:22:86:15:c2: ef:a4:f0:d5:94:02:c4:e3:81:f8:2a:55:f3:70:69:41:83:e1: 41:ed:2c:c9:49:3b:6c:7f:23:89:50:2a:fd:dd:85:61:6f:13: 39:39:c5:d7:fa:98:e6:1c:ed:64:fc:b7:cb:a9:c7:dd:e7:41: 80:f5:34:e3:cb:49:cc:6c:e1:cc:c7:9d:70:e0:07:ba:69:d4: 81:82:8e:3e:76:f6:18:5f:cf:82:c4:da:22:c4:25:4c:d0:89: 67:ed:76:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjYwNTExMDMxMjI3WhcNMjYwNTE4MDMxMjI3WjAYMRYwFAYD VQQDEw02YTAxNDkxYy02ZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uwvfLhsFOv4DPr1c5KLO0q2yNNXfB/Rymb3IzjB2wg6N5gcHxBZkP0mHkRZ Em21WJYhnhbDAFiqNQuCaBq/L0ZphKHMqbjDiyo8+/LmkaXbueMxv45yqKb1ArEB 2rot0OdyxFiPj1l11qV2cDebCxxXCNhSfq3aMh5PW7We+udMwcUn8ovNg6aveH1C 1Z2RUrMW0MVh7U8Bq726Nv6ALWGvba1g66rwnYhNUALIPHKG2B8UCiEUKeyi3fdv TVoMeyMmTcYl8sBcOEJB07/hs/xGEVDnXxeO9cH6yB+Dw3bC9chVw1mNtEfPEQE4 e52/Gf2Li0ymt65eWthYHcjX+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBB/Iud7 uh3Tzz93z5s5p6Xe3KPcMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcABLYJyjLsh4AfCRGixFNWKsf7PSverJbDaYvLGSS8XY2wv/DcFo/gRBj7OZ AwNfZ1dmOcSp4yIPmFs0qb2p7XcsuzpA1Keo8d/P06eowTYTsHdrrE59WHsCT9Xe BooreR5hYDmdqeQJSyeAmL4JP8mlf0nZCnpE39ha/JdjAjIQfFmhhLjWPw8bQEWV Mzq8WBxJWhf6TRvCmufPo+cihhXC76Tw1ZQCxOOB+CpV83BpQYPhQe0syUk7bH8j iVAq/d2FYW8TOTnF1/qY5hztZPy3y6nH3edBgPU048tJzGzhzMedcOAHumnUgYKO Pnb2GF/PgsTaIsQlTNCJZ+12Lw== -----END CERTIFICATE-----Generated at Wed May 13 03:02:15 2026 by rpki-client