$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: xSvfNWbSlWzBodiKg0UWbRWso+fRrLU9yPyW4YOkx/w= Subject key identifier: A5:2B:93:91:4B:3F:19:A0:A2:BA:DC:11:7E:62:0A:E9:C1:17:F1:69 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: A1 Signing time: Tue 12 May 2026 22:28:03 +0000 Manifest this update: Tue 12 May 2026 22:28:03 +0000 Manifest next update: Tue 19 May 2026 22:28:03 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: FsTivPVJzBOyypNm6NB7Pli2XGZCaidmruPc+4lX9RU=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: I1AL4lbWGPIfV3u+8QvI9wVl+esLP3oBbI38pSI4a6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: May 12 22:28:03 2026 GMT Not After : May 19 22:28:03 2026 GMT Subject: CN=6a03a973-d5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:36:e1:40:b3:1f:62:da:0a:7b:42:1d:5e: 19:17:93:7a:51:f6:4b:78:e2:11:65:2a:1d:54:a1: 2f:77:50:b7:82:46:ae:eb:39:df:60:41:e3:b9:76: f9:46:00:64:f8:11:98:02:f3:7b:f7:58:02:c0:f5: 3f:12:50:f3:8e:fc:f9:3d:cd:a2:ec:5f:5d:69:f2: ee:68:58:ad:6b:b4:cf:db:a9:38:63:f8:37:a5:71: e9:fa:3f:e9:0d:cb:ce:b9:01:fa:5f:fa:fb:05:fd: 57:6f:ad:39:f4:bf:cf:43:b4:69:96:6d:eb:f4:96: a7:ac:75:f0:e7:8f:37:ab:e7:55:31:f4:16:d3:83: ff:5e:28:42:ac:76:6b:d2:7f:b3:77:de:c7:66:48: 12:a9:53:e6:af:c1:09:0b:64:e8:8a:52:37:fd:37: 2f:c1:e2:9f:2d:6b:6d:36:2f:93:3e:71:e3:61:55: 2d:fe:2f:8d:e9:a9:1b:d3:c8:8a:0f:28:98:c7:1f: 0c:8d:48:52:f3:22:29:ed:d8:2a:e1:5c:ef:9d:81: 38:8e:58:2a:38:b8:e7:9f:39:49:80:79:d8:f6:15: c9:c4:ba:b5:cf:9c:3b:56:62:35:c6:00:5a:41:4f: 9e:bb:6d:59:ad:6a:dc:1d:7b:6d:16:3b:8f:55:06: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2B:93:91:4B:3F:19:A0:A2:BA:DC:11:7E:62:0A:E9:C1:17:F1:69 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:bd:5d:e2:82:02:be:f3:c7:92:69:29:73:c6:66:74:71:f1: d5:4a:c6:df:4a:d1:d7:3d:8f:68:c4:7c:8f:a5:55:ea:ae:9f: 0b:84:20:60:bb:d3:6f:24:a2:f3:70:89:73:b3:1c:ed:56:ac: cc:67:ec:b0:1f:42:63:76:11:97:88:d9:97:9d:ae:d8:2a:40: 28:7c:71:e8:97:4a:05:dd:8e:0e:06:fb:15:04:1c:50:72:9d: d8:1c:2b:1e:7b:b1:4b:12:6c:a7:b9:46:55:84:21:8b:04:ba: c3:27:7d:b5:c1:ba:b9:be:95:c9:c8:f2:7b:20:28:f0:25:4b: 1a:b3:28:35:3b:bf:76:52:95:85:32:1e:3e:b4:45:c9:e0:10: 28:a1:54:38:e7:1b:c5:7e:88:51:91:03:25:a2:a0:f9:24:25: 49:00:1b:86:f6:e8:dd:87:64:fa:0f:b7:f9:bd:b5:e5:a5:b8: 74:1e:45:b3:cf:2b:e3:7e:93:48:47:d0:f1:f7:66:ef:1c:8c: 1a:af:f6:d4:59:03:c1:95:fb:19:52:6b:79:a3:24:24:40:a2: 38:83:88:dc:60:07:5f:4e:97:15:c6:dc:22:c7:64:83:fa:d6: 57:ca:83:5c:96:12:04:59:2b:ee:45:f1:f0:54:de:d9:bd:10: 60:54:4b:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw MTc4RUEzOUQwHhcNMjYwNTEyMjIyODAzWhcNMjYwNTE5MjIyODAzWjAYMRYwFAYD VQQDEw02YTAzYTk3My1kNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1824UCzH2LaCntCHV4ZF5N6UfZLeOIRZSodVKEvd1C3gkau6znfYEHjuXb5 RgBk+BGYAvN791gCwPU/ElDzjvz5Pc2i7F9dafLuaFita7TP26k4Y/g3pXHp+j/p DcvOuQH6X/r7Bf1Xb6059L/PQ7Rplm3r9JanrHXw5483q+dVMfQW04P/XihCrHZr 0n+zd97HZkgSqVPmr8EJC2ToilI3/TcvweKfLWttNi+TPnHjYVUt/i+N6akb08iK DyiYxx8MjUhS8yIp7dgq4VzvnYE4jlgqOLjnnzlJgHnY9hXJxLq1z5w7VmI1xgBa QU+eu21ZrWrcHXttFjuPVQb2HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUrk5FL PxmgorrcEX5iCunBF/FpMB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GMUFGMTA1MjYxREYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZG LTNaNmhxWGlIZFlCZU9vNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwL1d4oICvvPHkmkpc8ZmdHHx1UrG30rR1z2PaMR8j6VV6q6fC4QgYLvTbySi 83CJc7Mc7VaszGfssB9CY3YRl4jZl52u2CpAKHxx6JdKBd2ODgb7FQQcUHKd2Bwr HnuxSxJsp7lGVYQhiwS6wyd9tcG6ub6VycjyeyAo8CVLGrMoNTu/dlKVhTIePrRF yeAQKKFUOOcbxX6IUZEDJaKg+SQlSQAbhvbo3Ydk+g+3+b215aW4dB5Fs88r436T SEfQ8fdm7xyMGq/21FkDwZX7GVJreaMkJECiOIOI3GAHX06XFcbcIsdkg/rWV8qD XJYSBFkr7kXx8FTe2b0QYFRLeA== -----END CERTIFICATE-----Generated at Wed May 13 03:07:35 2026 by rpki-client