$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json) Hash identifier: pD8CftRVrHhUhZYd3+HdELBcJGkJW+045MaJNBd4YRM= Subject key identifier: 07:62:F8:12:B0:F7:53:CC:AF:E2:3E:43:28:1C:85:C0:53:B4:D2:01 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft Manifest number: 0734 Signing time: Tue 12 May 2026 22:05:52 +0000 Manifest this update: Tue 12 May 2026 22:05:51 +0000 Manifest next update: Tue 19 May 2026 22:05:51 +0000 Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: U7/40HFWOXwf04O3bcsEn6Co0LZj/YxtJbUcHiA9Is8=) 2: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=) 3: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=) 4: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=) 5: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=) 6: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=) 7: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=) 8: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=) 9: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=) 10: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=) 11: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=) 12: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: May 12 22:05:51 2026 GMT Not After : May 19 22:05:51 2026 GMT Subject: CN=6a03a440-6173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:ec:2e:2c:05:ce:32:be:37:b1:79:91:da: 2f:05:94:64:1d:dc:dd:f5:6b:ef:50:47:af:73:8b: 71:30:14:29:ee:43:6d:66:4c:96:47:80:97:bc:ba: bf:df:9f:ce:8e:99:17:98:bf:34:37:c5:43:ef:ed: 3b:6e:1f:34:52:28:ac:67:cd:aa:5e:7f:44:1c:ed: 7e:d5:67:cf:d3:f4:ad:e5:aa:62:44:2b:99:84:b3: 86:0f:1a:4b:b9:ec:09:e5:6d:36:15:c5:d8:78:be: b3:13:93:ba:21:6f:8d:b9:0c:df:04:b8:2f:0d:c0: 45:bb:9a:91:46:83:e5:9f:7b:0f:db:67:59:1f:e4: 31:b9:ff:7a:d6:e7:76:bf:97:a1:3d:ab:c2:f9:80: d1:64:e2:4a:9e:21:ee:34:12:6c:8e:c8:70:1b:4f: 4d:a0:22:0f:ad:31:ce:b9:5a:24:68:e1:31:8a:22: a2:82:0c:73:ca:0d:3c:0f:7e:55:e7:80:52:fb:9f: ff:65:78:96:87:51:0c:77:49:2d:95:ba:16:60:37: 05:1a:95:db:0a:20:f6:b0:61:17:50:54:61:de:67: a4:37:81:54:d0:54:0e:a4:3f:34:39:01:5e:17:03: 54:2f:55:87:4b:93:2b:1e:76:2c:a9:9b:f3:09:bf: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:F8:12:B0:F7:53:CC:AF:E2:3E:43:28:1C:85:C0:53:B4:D2:01 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a3:05:6a:ba:33:51:72:9a:f8:60:ca:83:61:70:0d:c7:b0: 1e:3e:4f:df:89:fc:bf:8b:0d:34:e3:40:03:0d:11:d3:bb:cb: d0:26:17:80:e3:7a:0c:3b:bb:94:8a:f9:2c:6d:8b:01:00:b8: 0f:b5:51:47:8f:1a:22:b0:f9:40:d3:70:b4:a6:6e:96:24:df: ec:1e:e8:79:10:87:64:ee:ef:4e:73:62:1f:05:1e:0c:aa:30: 66:bc:f3:f2:3f:2e:64:45:ec:23:be:13:9d:48:12:bb:a7:95: df:f9:f4:97:2e:99:9c:91:b9:d4:06:15:90:0d:31:84:0f:22: 9f:2a:ab:2e:a8:f4:c6:d1:59:05:1d:d7:bd:c4:ff:11:0f:2f: ed:90:6f:00:64:37:a7:68:c1:1c:8f:d3:ed:1b:58:fb:b1:a3: 06:f2:ad:41:eb:55:04:91:60:55:1e:2a:25:83:6e:d8:55:d8: 0f:a5:59:9d:ab:f1:63:b6:52:3c:cc:2a:44:f2:00:2e:9b:b3: 81:4d:3c:1b:6b:d3:dd:67:ad:2a:33:6e:0c:ec:44:65:9b:f2: 8e:d9:a3:3b:f4:ed:04:29:1b:c1:d2:29:a7:8b:55:cc:3f:b3: dd:3f:0a:bc:a5:e1:b6:15:70:5d:14:37:3b:15:02:46:7d:cb: 80:5d:95:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYwNTEyMjIwNTUxWhcNMjYwNTE5MjIwNTUxWjAYMRYwFAYD VQQDEw02YTAzYTQ0MC02MTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRDsLiwFzjK+N7F5kdovBZRkHdzd9WvvUEevc4txMBQp7kNtZkyWR4CXvLq/ 35/OjpkXmL80N8VD7+07bh80UiisZ82qXn9EHO1+1WfP0/St5apiRCuZhLOGDxpL uewJ5W02FcXYeL6zE5O6IW+NuQzfBLgvDcBFu5qRRoPln3sP22dZH+Qxuf961ud2 v5ehPavC+YDRZOJKniHuNBJsjshwG09NoCIPrTHOuVokaOExiiKiggxzyg08D35V 54BS+5//ZXiWh1EMd0ktlboWYDcFGpXbCiD2sGEXUFRh3mekN4FU0FQOpD80OQFe FwNUL1WHS5MrHnYsqZvzCb9Y7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdi+BKw 91PMr+I+QygchcBTtNIBMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3 Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACqMFarozUXKa+GDKg2FwDcewHj5P34n8v4sNNONAAw0R07vL0CYXgON6DDu7 lIr5LG2LAQC4D7VRR48aIrD5QNNwtKZuliTf7B7oeRCHZO7vTnNiHwUeDKowZrzz 8j8uZEXsI74TnUgSu6eV3/n0ly6ZnJG51AYVkA0xhA8inyqrLqj0xtFZBR3XvcT/ EQ8v7ZBvAGQ3p2jBHI/T7RtY+7GjBvKtQetVBJFgVR4qJYNu2FXYD6VZnavxY7ZS PMwqRPIALpuzgU08G2vT3WetKjNuDOxEZZvyjtmjO/TtBCkbwdIpp4tVzD+z3T8K vKXhthVwXRQ3OxUCRn3LgF2V4Q== -----END CERTIFICATE-----Generated at Wed May 13 12:48:22 2026 by rpki-client