$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: UlwJoo5sIIZRYrR5TWMvUzEhR1P23T0y1R3+PEsuD9U= Subject key identifier: 04:E7:84:0B:4A:D8:A0:4B:20:58:DF:78:96:BA:04:79:23:60:42:9B Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0BE2 Signing time: Tue 12 May 2026 18:56:26 +0000 Manifest this update: Tue 12 May 2026 18:56:25 +0000 Manifest next update: Tue 19 May 2026 18:56:25 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: ar/iuUdozqV0DQA7zuAWbKYiCNseKL5dpdP9AWjzQVc=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 44ZNomVUKhNrCvYmD9LvtSWCJcYF4pVIBILUsyf7SwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: May 12 18:56:25 2026 GMT Not After : May 19 18:56:25 2026 GMT Subject: CN=6a0377da-9b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:83:7a:ee:76:92:99:9c:15:47:3a:63:7a: 60:ee:47:5c:73:b6:56:c9:61:50:5c:be:a0:d8:d4: 8d:15:f4:76:54:0a:5c:c5:ff:9d:e5:9a:87:86:f6: 9f:b7:22:7d:dc:f9:94:10:6c:f5:f3:b4:ab:4d:07: 3f:81:5f:d9:83:f4:3f:ee:84:8e:c1:53:65:e2:bd: 0a:7c:b7:3d:77:f9:b7:d0:87:56:ba:64:03:e2:58: 4e:cb:a2:b0:60:05:5b:73:59:fb:26:96:96:71:fd: 03:e7:cd:99:c3:75:89:f4:c5:64:5a:dc:f1:fe:9d: 10:aa:61:10:d0:a8:7e:41:f9:95:37:d6:17:c4:8a: 75:ab:ab:06:f7:f0:ae:84:19:fa:c0:f6:f3:78:31: a7:58:c2:3e:69:fc:52:3f:b2:9b:91:93:e1:8f:d3: 73:e2:8e:08:23:77:4e:bb:8b:d5:6a:90:32:a3:63: 6a:cb:3d:5a:c3:43:db:59:4c:72:06:e0:37:b3:57: 4b:5e:6a:c6:15:61:57:df:65:a2:44:be:5d:11:86: 39:cb:14:29:e2:68:88:b3:8c:68:03:95:a7:9d:01: 58:d8:9f:87:b3:3e:4e:d2:95:83:7c:80:37:80:77: 21:54:8b:4f:8a:cc:6f:02:bc:dd:f2:65:d7:3f:be: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E7:84:0B:4A:D8:A0:4B:20:58:DF:78:96:BA:04:79:23:60:42:9B X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ae:73:3e:dc:75:ef:94:94:b8:b3:52:66:8a:d0:6f:0f:cd: 3b:25:fd:f7:3c:36:c2:55:18:4c:f5:3b:46:69:c6:b5:be:6d: 02:36:83:a7:f6:ac:d6:60:0b:80:d0:58:01:92:5e:4c:87:24: 66:45:44:0a:6c:9a:eb:8a:84:a1:58:21:54:d9:19:d1:4c:63: 69:f3:a8:dd:9c:3a:49:6d:c0:87:d8:2a:d8:5e:12:18:61:f9: 4e:43:c9:8f:99:e3:98:6f:84:25:9a:4a:76:00:81:10:3e:4c: eb:54:f7:cc:2b:37:50:04:20:d7:31:a5:cc:c7:3f:4e:c8:1b: c1:3c:eb:60:29:02:d9:7a:70:0d:f5:83:d3:36:76:ce:bd:a2: e0:a6:6e:58:f2:b9:ee:33:a2:d9:d5:1d:c8:4d:1e:19:4e:c9: 1a:5c:e8:3c:c3:54:99:34:0e:79:42:a8:a3:20:68:a4:0c:a4: 6f:9b:fe:61:89:71:8f:45:e2:eb:f9:af:82:7c:b9:95:27:96: c7:9f:26:d5:e4:69:11:38:32:33:5c:74:86:75:a4:e7:49:2a: 7d:ec:f8:53:70:76:6c:3b:6b:b8:cf:1f:ed:54:90:7d:f9:b1: 1d:aa:fc:19:18:a8:c2:3f:92:7d:92:1b:4b:92:3c:12:87:45: 12:6c:d1:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjYwNTEyMTg1NjI1WhcNMjYwNTE5MTg1NjI1WjAYMRYwFAYD VQQDEw02YTAzNzdkYS05YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+mDeu52kpmcFUc6Y3pg7kdcc7ZWyWFQXL6g2NSNFfR2VApcxf+d5ZqHhvaf tyJ93PmUEGz187SrTQc/gV/Zg/Q/7oSOwVNl4r0KfLc9d/m30IdWumQD4lhOy6Kw YAVbc1n7JpaWcf0D582Zw3WJ9MVkWtzx/p0QqmEQ0Kh+QfmVN9YXxIp1q6sG9/Cu hBn6wPbzeDGnWMI+afxSP7KbkZPhj9Nz4o4II3dOu4vVapAyo2Nqyz1aw0PbWUxy BuA3s1dLXmrGFWFX32WiRL5dEYY5yxQp4miIs4xoA5WnnQFY2J+Hsz5O0pWDfIA3 gHchVItPisxvArzd8mXXP76NjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATnhAtK 2KBLIFjfeJa6BHkjYEKbMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq65zPtx175SUuLNSZorQbw/NOyX99zw2wlUYTPU7RmnGtb5tAjaDp/as1mAL gNBYAZJeTIckZkVECmya64qEoVghVNkZ0UxjafOo3Zw6SW3Ah9gq2F4SGGH5TkPJ j5njmG+EJZpKdgCBED5M61T3zCs3UAQg1zGlzMc/TsgbwTzrYCkC2XpwDfWD0zZ2 zr2i4KZuWPK57jOi2dUdyE0eGU7JGlzoPMNUmTQOeUKooyBopAykb5v+YYlxj0Xi 6/mvgny5lSeWx58m1eRpETgyM1x0hnWk50kqfez4U3B2bDtruM8f7VSQffmxHar8 GRiowj+SfZIbS5I8EodFEmzR+Q== -----END CERTIFICATE-----Generated at Wed May 13 15:15:38 2026 by rpki-client