$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: AdUKFVaXKSJ3RcyD1tX4yQU+AHR+o3KHA7Rird8dzdA= Subject key identifier: D6:27:5A:55:5D:0C:75:82:E4:57:1F:59:0B:22:21:0C:0C:15:34:6F Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1713 Signing time: Tue 12 May 2026 16:38:37 +0000 Manifest this update: Tue 12 May 2026 16:38:37 +0000 Manifest next update: Tue 19 May 2026 16:38:37 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: 6+3Sp1ci+NEKXS/W+5ZDtz22iLJg0c3JkszMZZOxIJs=) 2: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=) 3: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=) 4: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5936 (0x1730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: May 12 16:38:37 2026 GMT Not After : May 19 16:38:37 2026 GMT Subject: CN=6a03578d-0d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:ff:29:8d:a4:9b:d0:9a:a5:b0:c3:54:9e: b5:8c:3c:05:b9:c9:aa:6f:1b:a6:6d:8d:ff:5e:96: 82:ec:0e:ac:43:20:81:8b:39:53:82:74:62:ef:2a: 96:bc:25:71:31:f5:e5:24:33:e0:71:92:6d:d6:96: 89:97:8c:29:64:d3:3a:8d:12:a6:5e:43:85:2e:fc: 3c:73:79:70:52:43:60:d0:06:92:b1:dc:3d:e6:c3: 75:98:57:dd:dc:1f:4d:21:c4:9c:9a:6f:68:3b:04: 1b:8e:df:5e:3d:50:95:53:a5:90:21:b1:26:23:b6: 39:cc:27:ac:af:d5:2e:51:cd:90:c6:dc:d5:d7:cd: 0f:0c:3a:21:3b:ff:93:80:78:2e:c9:c6:e3:25:b8: 42:f8:f2:fc:f6:e7:dc:a9:58:0e:8b:a5:fc:03:c5: 82:57:1a:e6:68:5e:42:7e:e5:1d:9c:4d:2a:72:76: a8:95:57:e2:42:bd:ea:8d:69:d5:47:92:17:c3:d0: 85:27:e3:b5:1d:96:df:c5:65:3d:7b:ef:fb:be:8e: 2c:c5:c0:6c:25:52:ce:54:ba:e2:43:22:67:9b:fb: 52:13:12:4c:b8:6a:39:dc:ed:db:c1:5a:b3:f4:e8: 82:ed:6d:1e:5b:7a:1e:c9:28:4c:06:56:ed:10:86: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:5A:55:5D:0C:75:82:E4:57:1F:59:0B:22:21:0C:0C:15:34:6F X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8e:9a:e8:56:04:23:65:2e:d1:74:f6:fb:45:b1:61:2d:ef: 7d:8c:c0:13:25:f8:d7:ca:24:77:72:77:34:d2:30:52:c1:d2: 1b:2f:b1:84:bb:9e:22:a5:80:e0:43:79:c9:a8:ee:43:e7:95: 56:28:dc:68:3f:49:9d:06:b3:ed:49:50:0f:e6:a2:59:5f:44: 3d:3c:6a:ec:27:a5:8d:2c:5c:ad:10:b1:aa:41:a0:75:b7:f8: b2:8f:e3:91:e6:65:c3:e8:e0:a3:f2:a3:44:46:50:db:bb:3e: 01:09:b6:c0:a7:f6:f4:51:c1:ae:39:d9:53:1a:00:66:8a:98: 6c:8f:82:1d:07:b0:75:34:5e:2f:6f:63:e2:2e:23:e5:1d:df: 58:ce:3f:2c:f8:23:93:23:ff:e8:d4:4d:ac:be:a0:79:f9:20: 65:1c:fe:72:47:7c:86:87:90:cb:68:ec:50:a9:bd:d3:25:50: 5f:26:9c:af:92:dc:5d:27:19:c1:48:97:79:5a:a7:22:0f:59: a6:ce:d3:b5:65:cd:79:f0:23:be:f3:1b:ff:81:b7:4a:ba:dd: 60:61:0b:b6:a2:d0:7a:f0:ac:00:39:f2:07:03:a1:6b:f5:80: 48:dc:0b:ec:41:c2:59:24:74:b4:3e:ea:54:23:38:db:48:9a: e8:8d:03:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwNTEyMTYzODM3WhcNMjYwNTE5MTYzODM3WjAYMRYwFAYD VQQDEw02YTAzNTc4ZC0wZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocP/KY2km9CapbDDVJ61jDwFucmqbxumbY3/XpaC7A6sQyCBizlTgnRi7yqW vCVxMfXlJDPgcZJt1paJl4wpZNM6jRKmXkOFLvw8c3lwUkNg0AaSsdw95sN1mFfd 3B9NIcScmm9oOwQbjt9ePVCVU6WQIbEmI7Y5zCesr9UuUc2QxtzV180PDDohO/+T gHguycbjJbhC+PL89ufcqVgOi6X8A8WCVxrmaF5CfuUdnE0qcnaolVfiQr3qjWnV R5IXw9CFJ+O1HZbfxWU9e+/7vo4sxcBsJVLOVLriQyJnm/tSExJMuGo53O3bwVqz 9OiC7W0eW3oeyShMBlbtEIadeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYnWlVd DHWC5FcfWQsiIQwMFTRvMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjo6a6FYEI2Uu0XT2+0WxYS3vfYzAEyX418okd3J3NNIwUsHSGy+xhLueIqWA 4EN5yajuQ+eVVijcaD9JnQaz7UlQD+aiWV9EPTxq7CeljSxcrRCxqkGgdbf4so/j keZlw+jgo/KjREZQ27s+AQm2wKf29FHBrjnZUxoAZoqYbI+CHQewdTReL29j4i4j 5R3fWM4/LPgjkyP/6NRNrL6gefkgZRz+ckd8hoeQy2jsUKm90yVQXyacr5LcXScZ wUiXeVqnIg9Zps7TtWXNefAjvvMb/4G3SrrdYGELtqLQevCsADnyBwOha/WASNwL 7EHCWSR0tD7qVCM420ia6I0Dsw== -----END CERTIFICATE-----Generated at Wed May 13 02:57:13 2026 by rpki-client