$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: 9R/fgh8mo5hAX4VBvYCPLf2sg6iLiV1nEISkhY8wUMo= Subject key identifier: B3:60:D9:CE:C9:0E:0E:3C:6E:97:9B:CB:4E:0E:1E:78:E1:FC:95:92 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0CE4 Signing time: Tue 12 May 2026 18:22:30 +0000 Manifest this update: Tue 12 May 2026 18:22:30 +0000 Manifest next update: Tue 19 May 2026 18:22:30 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: qyzsL02FVPu7UfP7B/E3+WpYZ0ZQ4y5G5ga/Ab9TleI=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: May 12 18:22:30 2026 GMT Not After : May 19 18:22:30 2026 GMT Subject: CN=6a036fe6-de9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:1e:0e:44:fa:d7:81:30:af:31:00:54:ca: 43:d0:65:2b:24:02:78:f1:0a:81:4b:1e:89:ea:a0: 22:5d:13:19:df:e0:fe:c4:a0:1a:80:8b:e0:0e:4c: b5:f6:5e:65:d4:09:5d:00:e1:c9:f8:20:08:a2:3c: b9:56:2b:72:eb:c3:89:84:47:e3:1f:bc:38:3f:cf: 2c:bb:60:d8:0d:a9:a2:5d:0e:25:61:01:ba:fc:59: a7:73:f6:cc:95:9b:04:35:74:cd:40:0d:f8:f6:61: bb:e4:4f:04:ef:10:86:ea:d6:f9:83:7f:2e:ae:0d: bb:fe:55:80:63:67:6a:ff:25:e3:95:13:a7:82:fe: d2:8e:dc:00:fe:85:19:84:7e:c9:cb:af:c7:ba:a9: bb:c2:bf:b5:5b:2d:3c:08:ee:cf:80:72:7c:f9:af: f4:a9:30:d0:4e:33:93:d5:aa:ae:d8:35:fe:4e:f0: 05:d8:91:b7:7f:89:ea:8f:41:a2:98:5e:fc:83:29: 7e:04:42:fd:ab:be:44:9c:18:d1:be:ec:aa:20:b7: f9:bb:53:68:73:0e:11:e8:40:a7:0f:e5:6c:da:e2: 8f:bc:aa:ae:9d:2e:64:ca:5e:17:f6:b6:41:43:01: 82:ee:48:d6:ca:99:18:de:9c:00:24:24:8f:39:54: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:D9:CE:C9:0E:0E:3C:6E:97:9B:CB:4E:0E:1E:78:E1:FC:95:92 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0b:af:04:f5:fd:66:c8:8f:ab:fa:58:c1:0b:dd:6c:6a:ff: 2b:6d:92:d7:db:d2:2e:02:e9:91:e6:29:c4:84:72:66:40:28: be:d6:58:04:6c:a8:4a:b8:e4:7f:d2:b8:fb:53:d9:15:7a:92: 4f:34:37:aa:17:f3:60:53:2b:b1:31:45:e1:a0:07:16:d9:f6: 1f:26:3f:dc:81:7e:c5:ec:eb:61:6a:1d:0a:da:ed:e0:65:b5: a4:a3:04:c1:1e:61:58:a5:af:e7:c0:af:ad:46:47:50:6c:f9: 74:f4:e7:2b:88:06:31:f9:6b:91:ce:f0:3c:8d:a7:1e:4c:e3: 4c:86:1a:51:53:1c:4b:66:c8:df:49:27:1e:5d:b5:84:5e:2c: b2:78:0e:60:83:68:fa:e5:a9:4f:5a:ed:e5:a5:86:b4:47:d5: bc:04:9d:ea:0b:17:85:12:78:b0:b6:e6:68:e4:33:ad:ff:9e: e9:0c:7d:4a:87:e5:ec:b1:64:d5:dc:9c:b1:d4:df:0b:f0:c4: bd:d2:d4:d7:24:d9:49:eb:a1:69:18:b6:2e:60:7e:13:2a:25: 0e:6c:18:9c:88:dc:8e:9a:90:5b:44:a4:b9:8b:1f:d2:2a:93: 7b:a8:72:35:ec:e7:bc:95:22:57:64:74:9e:b0:18:59:82:e8: d9:4b:c7:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwNTEyMTgyMjMwWhcNMjYwNTE5MTgyMjMwWjAYMRYwFAYD VQQDEw02YTAzNmZlNi1kZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M8eDkT614EwrzEAVMpD0GUrJAJ48QqBSx6J6qAiXRMZ3+D+xKAagIvgDky1 9l5l1AldAOHJ+CAIojy5Vity68OJhEfjH7w4P88su2DYDamiXQ4lYQG6/Fmnc/bM lZsENXTNQA349mG75E8E7xCG6tb5g38urg27/lWAY2dq/yXjlROngv7SjtwA/oUZ hH7Jy6/Huqm7wr+1Wy08CO7PgHJ8+a/0qTDQTjOT1aqu2DX+TvAF2JG3f4nqj0Gi mF78gyl+BEL9q75EnBjRvuyqILf5u1Nocw4R6ECnD+Vs2uKPvKqunS5kyl4X9rZB QwGC7kjWypkY3pwAJCSPOVQBAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNg2c7J Dg48bpeby04OHnjh/JWSMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASguvBPX9ZsiPq/pYwQvdbGr/K22S19vSLgLpkeYpxIRyZkAovtZYBGyoSrjk f9K4+1PZFXqSTzQ3qhfzYFMrsTFF4aAHFtn2HyY/3IF+xezrYWodCtrt4GW1pKME wR5hWKWv58CvrUZHUGz5dPTnK4gGMflrkc7wPI2nHkzjTIYaUVMcS2bI30knHl21 hF4ssngOYINo+uWpT1rt5aWGtEfVvASd6gsXhRJ4sLbmaOQzrf+e6Qx9Sofl7LFk 1dycsdTfC/DEvdLU1yTZSeuhaRi2LmB+EyolDmwYnIjcjpqQW0SkuYsf0iqTe6hy NeznvJUiV2R0nrAYWYLo2UvHag== -----END CERTIFICATE-----Generated at Wed May 13 06:35:59 2026 by rpki-client