$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: 9gvr5NAvfOaKSiNY0fSo+JEPajWYRTG7Z/myc7AeHNY= Subject key identifier: AF:2B:A8:10:D0:76:0E:7B:BA:B4:74:EB:9F:8D:D9:38:8B:BB:BF:C6 Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 08A2 Signing time: Tue 12 May 2026 15:55:38 +0000 Manifest this update: Tue 12 May 2026 15:55:38 +0000 Manifest next update: Tue 19 May 2026 15:55:38 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: VQY7N0ZrnLXGn8OrLzFWTZvo5tJOb7azShPKyx5L5DY=) 2: 6205FF52113D11F1BF40122E203D8C67.roa (hash: YZA4lVzt1mgdsEJ++kdTfFeCS9rYdciYFwgd714ipgA=) 3: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: gRWxoMUhWR3o1/E004zC+NaDH3WtqhH3fFB+vz1MWo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: May 12 15:55:38 2026 GMT Not After : May 19 15:55:38 2026 GMT Subject: CN=6a034d7a-c8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:33:4b:25:8e:f8:74:aa:f1:ec:4d:ed:b8: f1:4e:20:e3:7b:59:bb:3b:fb:eb:2e:44:da:c3:64: eb:da:83:b1:29:73:2e:1b:ac:c5:ac:d3:0d:c9:7e: 15:f6:ac:c4:3b:71:2e:e5:64:da:d2:7b:18:84:5c: ae:cf:8e:7e:8a:2f:a5:91:2d:0f:64:ef:80:20:c1: 2f:d0:b9:c3:7e:e2:4c:09:0c:94:ad:46:d0:58:8e: ea:a4:c4:d7:b6:56:cb:d4:a4:8c:0b:e5:6c:81:28: 34:ae:ab:45:ec:91:90:68:86:e9:97:b5:79:94:67: 2a:1b:4d:52:b4:82:68:f9:df:2e:0e:db:5f:ed:76: 6a:e7:88:53:14:21:82:47:ef:0d:13:85:b7:81:f5: aa:d3:31:9f:e3:6d:fb:9b:1e:87:50:b2:0a:b9:4f: dd:18:84:0b:8a:ea:89:21:94:48:ea:a9:0e:27:88: fc:31:d6:59:84:2f:46:93:d7:b3:07:1b:67:ee:d4: 98:b7:1a:9a:c4:df:71:be:6a:d1:75:71:f8:32:31: 6e:e7:98:60:92:da:ef:1f:2d:85:ca:f4:20:ca:ab: 65:72:57:26:f4:36:b3:d0:d0:f6:35:e2:41:41:e4: 2a:d5:7b:d3:5e:2f:17:0b:89:07:60:e9:4b:bd:3e: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:A8:10:D0:76:0E:7B:BA:B4:74:EB:9F:8D:D9:38:8B:BB:BF:C6 X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b9:d1:66:80:9d:41:3c:eb:cd:a9:9f:2e:a7:34:a5:df:98: 72:55:dd:22:48:97:c8:91:5d:f6:b6:78:0f:2e:15:01:22:bb: bf:20:fc:6c:2f:26:7a:42:6b:f8:3b:f1:0c:73:e7:3e:d6:1e: 9f:de:2d:21:26:50:b0:03:3a:57:27:5e:2c:26:f5:81:f4:f0: 37:0b:32:c5:d3:f5:0a:21:d9:06:d5:b0:2f:75:c6:8f:87:e0: 35:39:be:4f:3f:30:a6:fe:ba:c7:cf:32:b0:fe:13:36:68:5c: 1c:91:32:dd:bb:c8:dd:e6:30:e4:93:ec:7d:bd:be:fc:d5:19: bb:bb:7d:ea:6a:21:f7:58:94:da:b7:e3:71:1f:b7:6b:69:b8: 06:9e:19:49:d0:0c:67:19:b0:03:45:d2:00:eb:0d:c3:e0:42: 43:c1:aa:bd:6e:73:06:bc:7b:39:d5:a1:3e:be:92:b7:8e:5a: 60:f5:18:ef:25:0d:7f:61:dc:79:95:71:b4:8c:1b:41:cb:0b: 68:78:f8:5c:e3:85:39:04:fe:50:09:3c:ff:fc:0d:34:0a:7a: 1f:db:d3:ea:5b:51:de:f5:98:59:68:c7:22:30:b2:49:bb:ad: 9e:61:84:91:d4:b2:6c:6c:ee:17:3f:7b:7c:9c:76:b6:98:14: a1:e4:f5:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjYwNTEyMTU1NTM4WhcNMjYwNTE5MTU1NTM4WjAYMRYwFAYD VQQDEw02YTAzNGQ3YS1jOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18QzSyWO+HSq8exN7bjxTiDje1m7O/vrLkTaw2Tr2oOxKXMuG6zFrNMNyX4V 9qzEO3Eu5WTa0nsYhFyuz45+ii+lkS0PZO+AIMEv0LnDfuJMCQyUrUbQWI7qpMTX tlbL1KSMC+VsgSg0rqtF7JGQaIbpl7V5lGcqG01StIJo+d8uDttf7XZq54hTFCGC R+8NE4W3gfWq0zGf4237mx6HULIKuU/dGIQLiuqJIZRI6qkOJ4j8MdZZhC9Gk9ez Bxtn7tSYtxqaxN9xvmrRdXH4MjFu55hgktrvHy2FyvQgyqtlclcm9Daz0ND2NeJB QeQq1XvTXi8XC4kHYOlLvT4d7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8rqBDQ dg57urR065+N2TiLu7/GMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaLnRZoCdQTzrzamfLqc0pd+YclXdIkiXyJFd9rZ4Dy4VASK7vyD8bC8mekJr +DvxDHPnPtYen94tISZQsAM6VydeLCb1gfTwNwsyxdP1CiHZBtWwL3XGj4fgNTm+ Tz8wpv66x88ysP4TNmhcHJEy3bvI3eYw5JPsfb2+/NUZu7t96moh91iU2rfjcR+3 a2m4Bp4ZSdAMZxmwA0XSAOsNw+BCQ8GqvW5zBrx7OdWhPr6St45aYPUY7yUNf2Hc eZVxtIwbQcsLaHj4XOOFOQT+UAk8//wNNAp6H9vT6ltR3vWYWWjHIjCySbutnmGE kdSybGzuFz97fJx2tpgUoeT1kw== -----END CERTIFICATE-----Generated at Wed May 13 12:45:24 2026 by rpki-client