$ rpki-client -vvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft File: -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json) Hash identifier: uer2affJTG1ciis01E/TxkkUepD5U6AF+Oxi9wBnRHE= Subject key identifier: 78:52:31:4C:5D:33:BB:F0:0D:D3:42:FB:71:32:B7:50:4F:64:0F:CF Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft Manifest number: 03F9 Signing time: Wed 13 May 2026 00:35:10 +0000 Manifest this update: Wed 13 May 2026 00:35:09 +0000 Manifest next update: Wed 20 May 2026 00:35:09 +0000 Files and hashes: 1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: fG2bUE44D0eG1XgND27U/x23tEDOhVZi1tL4GSIRD3s=) 2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: 1651DDZqfZG0+Q1CtVyAE69Gh2+OtTkbKUiK/1/L4rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914711C, serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Validity Not Before: May 13 00:35:09 2026 GMT Not After : May 20 00:35:09 2026 GMT Subject: CN=6a03c73e-0bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:1c:41:d6:25:55:bc:20:95:c3:8b:6e:f3: be:76:c6:fc:80:ed:bc:26:2b:09:18:21:22:ba:3d: 31:82:0b:c5:c1:21:4c:34:2e:d6:38:20:1f:c6:eb: 69:ad:ee:8c:7e:99:e5:6f:11:5d:f5:c2:3c:19:8a: 25:08:9d:41:66:40:cb:2a:e7:f5:9a:48:e9:e9:19: b3:45:98:91:ec:b1:7c:6a:66:b9:a7:53:16:97:5b: 3d:ae:5f:e0:ce:bf:47:73:5a:b0:21:9e:a3:37:56: 53:0a:bc:91:0c:05:78:1a:60:f2:0e:4d:36:3a:a2: 72:75:b8:48:fa:fc:68:89:eb:fc:21:f5:87:8f:2b: 6e:60:22:05:45:19:f2:53:34:1c:91:03:c9:39:01: 8f:2e:fb:78:d0:a9:14:ca:3d:89:05:cb:fd:75:06: ca:cb:17:77:82:8e:b9:71:fa:87:da:2c:a7:64:2a: 99:12:ef:69:ea:95:a2:b4:24:f3:23:45:f0:95:84: 65:17:9f:81:dc:63:91:a4:7b:68:a1:71:3c:61:2a: 66:f3:11:65:85:8b:20:2e:33:dc:77:27:f3:8d:f5: 4a:82:78:ea:41:5a:25:29:69:e8:47:5a:9d:8f:ce: 1f:e8:88:46:e1:8b:9b:c4:cd:0d:2d:03:3b:e7:38: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:31:4C:5D:33:BB:F0:0D:D3:42:FB:71:32:B7:50:4F:64:0F:CF X509v3 Authority Key Identifier: keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:59:41:24:2d:32:68:fe:01:e2:b8:61:f7:01:4b:b2:43:d9: 20:59:d7:22:14:83:5f:1a:4b:39:ab:87:aa:14:b4:e8:a9:a7: f8:2d:26:3b:89:9a:b6:46:ab:77:e3:0b:0d:e3:8b:94:ab:9a: 7d:d9:fa:d0:19:e7:70:6f:5b:66:4c:b8:10:55:99:14:7b:9d: 60:ab:b9:82:69:6d:9d:90:17:4b:5e:ad:35:33:db:6a:14:b1: 30:06:93:7a:9a:9a:18:4a:40:9b:e2:49:08:d9:cf:ff:5c:fc: c5:52:a9:20:ee:31:b0:17:82:75:ee:2a:aa:3f:33:88:c2:f0: 51:d2:a5:49:96:46:62:4b:50:11:5a:c5:4b:a5:0c:de:a5:0f: d0:7d:3e:15:8c:e9:3e:a6:2c:41:a4:96:a4:63:68:ca:1b:e9: e0:a3:46:51:94:cd:d2:e7:42:c9:f4:1a:ce:cb:8b:db:1e:2a: 8d:d0:6d:9f:eb:99:85:8a:2f:99:64:14:71:fd:fb:79:f0:91: 8f:7f:21:e2:b8:77:89:21:fa:f0:e6:96:18:33:e1:fe:0d:08: d0:d8:74:e3:5a:af:dd:2b:3b:b8:b1:a6:df:19:00:fe:d7:8d: 3f:bc:4f:e3:45:49:01:b2:72:e4:86:3c:86:35:6a:c1:73:66: ed:1d:49:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxMUMxMTAvBgNVBAUTKEZBMjZGMzRBODMzOUIxREYzNkRDOUMxMTkxMjA1N0Mz QTU4M0Y2NzMwHhcNMjYwNTEzMDAzNTA5WhcNMjYwNTIwMDAzNTA5WjAYMRYwFAYD VQQDEw02YTAzYzczZS0wYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlkcQdYlVbwglcOLbvO+dsb8gO28JisJGCEiuj0xggvFwSFMNC7WOCAfxutp re6MfpnlbxFd9cI8GYolCJ1BZkDLKuf1mkjp6RmzRZiR7LF8ama5p1MWl1s9rl/g zr9Hc1qwIZ6jN1ZTCryRDAV4GmDyDk02OqJydbhI+vxoiev8IfWHjytuYCIFRRny UzQckQPJOQGPLvt40KkUyj2JBcv9dQbKyxd3go65cfqH2iynZCqZEu9p6pWitCTz I0XwlYRlF5+B3GORpHtooXE8YSpm8xFlhYsgLjPcdyfzjfVKgnjqQVolKWnoR1qd j84f6IhG4YubxM0NLQM75zgALQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhSMUxd M7vwDdNC+3Eyt1BPZA/PMB8GA1UdIwQYMBaAFPom80qDObHfNtycEZEgV8Olg/Zz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzExQy9BOEFDNzI1MEJC QTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNkODIzSndSa1NCWHc2V0Q5 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1pYnpTb001c2Q4MjNKd1JrU0JYdzZXRDluTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzExQy9BOEFDNzI1MEJCQTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNk ODIzSndSa1NCWHc2V0Q5bk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhVlBJC0yaP4B4rhh9wFLskPZIFnXIhSDXxpLOauHqhS06Kmn+C0mO4matkar d+MLDeOLlKuafdn60BnncG9bZky4EFWZFHudYKu5gmltnZAXS16tNTPbahSxMAaT epqaGEpAm+JJCNnP/1z8xVKpIO4xsBeCde4qqj8ziMLwUdKlSZZGYktQEVrFS6UM 3qUP0H0+FYzpPqYsQaSWpGNoyhvp4KNGUZTN0udCyfQazsuL2x4qjdBtn+uZhYov mWQUcf37efCRj38h4rh3iSH68OaWGDPh/g0I0Nh041qv3Ss7uLGm3xkA/teNP7xP 40VJAbJy5IY8hjVqwXNm7R1JkA== -----END CERTIFICATE-----Generated at Wed May 13 05:20:37 2026 by rpki-client