$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: pe89D/kuVv3rLm/Z0C6zEcYp5n4UatSNhb01gGHL3fE= Subject key identifier: 76:45:73:43:7D:3A:F1:0A:2E:1E:20:8E:53:7D:3C:7B:FA:F5:52:3E Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 4B Signing time: Mon 11 May 2026 08:32:48 +0000 Manifest this update: Mon 11 May 2026 08:32:48 +0000 Manifest next update: Mon 18 May 2026 08:32:48 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: irtZvQDnYTeED+OqvJVcfGpfqEZdNkfJgZs7QNurP80=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: May 11 08:32:48 2026 GMT Not After : May 18 08:32:48 2026 GMT Subject: CN=6a019430-d8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:ab:9c:aa:49:9b:8c:5b:38:06:c4:68:5d: 57:63:83:b4:3d:43:7e:dd:f9:f4:13:eb:68:36:a0: b5:c4:16:73:6b:af:72:4a:95:58:0b:fd:1b:66:c5: d4:1f:df:97:8f:c7:28:61:6f:36:f7:22:5d:9a:2d: 35:a3:a3:38:4c:5b:ca:67:d2:d3:91:f3:ce:81:5f: 0d:76:e7:ba:d9:7f:fb:db:9f:53:35:47:9e:ad:7c: 15:da:34:84:8b:40:6f:95:7e:aa:9f:e5:53:d1:f4: 97:fd:00:52:32:46:31:6d:dc:21:a3:76:d3:98:ce: 70:4f:c1:a4:3e:21:af:bd:0f:ae:8b:49:14:a7:f1: 6c:60:a7:dc:96:4b:27:a1:ae:39:9e:60:05:1d:12: ce:e1:0c:e3:b5:00:61:f7:b4:56:31:1e:68:33:b7: 50:0f:e0:f3:59:17:43:f9:6e:ed:e2:06:a3:dc:76: ba:e5:15:20:23:ce:2b:e7:bb:fb:09:78:f0:ce:16: 51:35:3a:99:62:fb:39:28:5b:f4:53:23:49:7c:f7: b6:33:00:0d:f4:44:2e:43:8e:eb:3d:3a:c6:c7:5f: 67:1e:a3:da:d8:1c:6b:64:b0:bb:91:5f:54:08:5a: 81:22:54:20:ea:03:e7:07:49:55:b0:e5:65:6a:64: 49:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:45:73:43:7D:3A:F1:0A:2E:1E:20:8E:53:7D:3C:7B:FA:F5:52:3E X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c2:38:63:65:9b:5c:b6:4b:c2:18:f5:fa:4c:bb:85:27:85: cb:30:62:39:f6:35:75:90:c7:e7:52:cf:b0:0b:3c:a9:98:ae: 39:4a:a7:fb:31:d0:b9:2c:64:dc:4a:23:6d:3b:9b:74:bf:cb: 32:6f:bb:a5:a4:63:30:29:f2:11:eb:cf:19:86:ca:23:b7:69: 00:27:ba:2a:fb:18:5d:b7:c8:ca:80:65:61:cf:fc:e2:23:de: aa:51:ec:d6:14:d3:91:97:46:63:b7:bf:5a:85:79:07:8d:1a: ff:60:64:39:36:af:5e:5e:52:dd:d8:58:f8:e1:94:d5:a3:1c: 55:67:c7:c7:66:01:4c:6e:38:b6:11:eb:f9:b5:cf:4e:a7:42: 54:48:a5:e6:31:e5:64:74:6a:4f:cd:f5:80:d0:23:91:f9:6d: 23:33:2c:f0:00:83:49:ae:a6:1e:bd:10:b9:40:77:b2:9d:24: c6:f0:1c:00:3f:9a:70:01:3f:01:2c:c8:08:33:5d:b4:a2:30: 20:fa:3f:37:75:26:23:e6:b8:47:03:20:6d:df:73:0a:36:0a: 2d:bc:5e:a5:36:35:54:1c:13:fc:e7:db:df:ed:49:7e:94:9d: 40:53:6e:54:fd:48:e4:6f:78:bf:45:95:3c:67:7c:cb:3a:60: 90:8a:c5:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzJFQjExMC8GA1UEBRMoMjAwM0VFNDA1MjI5RDg4Qzk0OEI3NkRDMTk1RDQzMEJD MDIwQUYxRTAeFw0yNjA1MTEwODMyNDhaFw0yNjA1MTgwODMyNDhaMBgxFjAUBgNV BAMTDTZhMDE5NDMwLWQ4ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe6qucqkmbjFs4BsRoXVdjg7Q9Q37d+fQT62g2oLXEFnNrr3JKlVgL/RtmxdQf 35ePxyhhbzb3Il2aLTWjozhMW8pn0tOR886BXw1257rZf/vbn1M1R56tfBXaNISL QG+Vfqqf5VPR9Jf9AFIyRjFt3CGjdtOYznBPwaQ+Ia+9D66LSRSn8Wxgp9yWSyeh rjmeYAUdEs7hDOO1AGH3tFYxHmgzt1AP4PNZF0P5bu3iBqPcdrrlFSAjzivnu/sJ ePDOFlE1Opli+zkoW/RTI0l897YzAA30RC5Djus9OsbHX2ceo9rYHGtksLuRX1QI WoEiVCDqA+cHSVWw5WVqZEkhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdkVzQ306 8QouHiCOU308e/r1Uj4wHwYDVR0jBBgwFoAUIAPuQFIp2IyUi3bcGV1DC8Agrx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzg5OTcyNTEyRTUz NDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSUFQdVFGSXAySXlVaTNiY0dWMURDOEFncng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MkVCLzg5OTcyNTEyRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5 VWkzYmNHVjFEQzhBZ3J4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvwjhjZZtctkvCGPX6TLuFJ4XLMGI59jV1kMfnUs+wCzypmK45Sqf7MdC5LGTc SiNtO5t0v8syb7ulpGMwKfIR688Zhsojt2kAJ7oq+xhdt8jKgGVhz/ziI96qUezW FNORl0Zjt79ahXkHjRr/YGQ5Nq9eXlLd2Fj44ZTVoxxVZ8fHZgFMbji2Eev5tc9O p0JUSKXmMeVkdGpPzfWA0COR+W0jMyzwAINJrqYevRC5QHeynSTG8BwAP5pwAT8B LMgIM120ojAg+j83dSYj5rhHAyBt33MKNgotvF6lNjVUHBP859vf7Ul+lJ1AU25U /Ujkb3i/RZU8Z3zLOmCQisU1 -----END CERTIFICATE-----Generated at Wed May 13 04:13:47 2026 by rpki-client