$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: bIrdojumAbwBY4ELqTHIuxOidNCO2UXMEhOSscpF0oY= Subject key identifier: 11:F4:17:D1:A6:24:32:A8:69:46:19:15:0C:E6:E3:5B:8E:C1:D4:10 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 01E2 Signing time: Mon 11 May 2026 03:43:04 +0000 Manifest this update: Mon 11 May 2026 03:43:04 +0000 Manifest next update: Mon 18 May 2026 03:43:04 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: Cys6UKPtt6m2KLIUEqmbqyu44TaumJJZBYIw5/CrQX4=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: May 11 03:43:04 2026 GMT Not After : May 18 03:43:04 2026 GMT Subject: CN=6a015048-01de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:78:84:78:31:80:87:9d:f0:86:0c:98:9e: 70:ec:82:4b:2f:23:21:83:d4:48:a4:39:3c:05:a6: ca:6f:90:9f:4d:b5:ee:d6:e7:10:2f:bc:f1:36:e2: 5b:89:b8:dc:c6:ec:ab:c3:96:87:a5:c0:ee:ad:b0: 98:96:88:92:68:8e:f0:e3:6f:b2:e2:dc:62:1a:3b: e1:20:f9:c4:e0:d4:51:dd:aa:d9:cf:64:cb:c9:0c: 7a:71:86:12:23:3d:1b:0d:ec:25:7a:7d:1e:6a:3a: 2a:1b:73:1f:de:ff:75:f9:8f:c7:21:b1:b5:44:77: 04:b4:74:c3:d2:fc:b5:a3:fa:69:e9:1d:7c:c9:c0: 07:50:82:81:f8:fd:f9:67:c7:4e:3c:6a:10:75:0b: 94:3d:60:4f:3e:95:3e:4b:23:82:ca:a7:e7:dd:24: 00:51:3e:5d:83:fa:3d:00:37:45:6e:1b:b9:65:ae: a3:23:1c:f6:b2:09:c9:86:6d:f3:84:48:0f:8a:2d: ee:fb:33:1e:c2:e2:b1:54:52:51:df:32:c8:61:29: 85:9c:af:a5:4d:2f:5a:e0:9c:64:27:55:6a:89:6e: a5:84:58:ca:0a:69:f5:03:b8:fc:6e:44:f2:39:43: b1:0c:6d:68:ac:cd:fb:4e:0c:5f:43:29:32:db:73: 57:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:17:D1:A6:24:32:A8:69:46:19:15:0C:E6:E3:5B:8E:C1:D4:10 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:84:d5:7a:c1:08:e0:fe:89:23:e4:63:3b:49:43:eb:6d:0f: 12:74:5f:97:6c:c4:85:b8:ae:1d:aa:0c:b5:35:78:78:58:8b: f8:3a:6f:73:de:00:04:bc:3c:64:7c:61:f0:f2:b5:3f:5d:37: ec:e8:18:17:c7:ef:59:73:d7:35:8c:6b:30:bb:47:56:89:64: c9:f1:73:17:aa:4d:c7:6c:49:37:53:17:bc:83:39:d5:48:7b: a4:ca:d7:19:51:e2:c1:66:ea:a1:f8:6d:58:12:b8:15:82:81: d5:c6:d3:cf:f5:01:13:1f:9d:b2:7f:f5:53:d0:35:22:9a:cc: fc:00:42:49:75:32:e9:d8:b0:1c:8d:c4:cc:70:00:a4:d3:c4: 25:45:10:46:cf:2d:3a:60:53:69:9d:5f:ba:11:dd:47:24:4f: 05:59:58:6e:99:cb:31:84:8a:19:6d:8d:c4:6f:02:3f:3f:d6: 74:5a:6a:2b:0c:49:43:50:32:8c:b8:a4:c2:c8:aa:9e:0f:bb: 50:5e:7d:91:a3:42:02:7a:39:76:43:4f:fc:70:64:72:d9:b8: e7:82:ad:fc:90:19:24:a2:80:a7:d4:f3:e1:c7:95:0e:38:0d: 75:88:85:84:3a:5e:95:25:e3:93:b0:e3:b6:c4:33:01:34:64: 14:4a:ef:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwNTExMDM0MzA0WhcNMjYwNTE4MDM0MzA0WjAYMRYwFAYD VQQDEw02YTAxNTA0OC0wMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwB4hHgxgIed8IYMmJ5w7IJLLyMhg9RIpDk8BabKb5CfTbXu1ucQL7zxNuJb ibjcxuyrw5aHpcDurbCYloiSaI7w42+y4txiGjvhIPnE4NRR3arZz2TLyQx6cYYS Iz0bDewlen0eajoqG3Mf3v91+Y/HIbG1RHcEtHTD0vy1o/pp6R18ycAHUIKB+P35 Z8dOPGoQdQuUPWBPPpU+SyOCyqfn3SQAUT5dg/o9ADdFbhu5Za6jIxz2sgnJhm3z hEgPii3u+zMewuKxVFJR3zLIYSmFnK+lTS9a4JxkJ1VqiW6lhFjKCmn1A7j8bkTy OUOxDG1orM37TgxfQyky23NXfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBH0F9Gm JDKoaUYZFQzm41uOwdQQMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4TVesEI4P6JI+RjO0lD620PEnRfl2zEhbiuHaoMtTV4eFiL+Dpvc94ABLw8 ZHxh8PK1P1037OgYF8fvWXPXNYxrMLtHVolkyfFzF6pNx2xJN1MXvIM51Uh7pMrX GVHiwWbqofhtWBK4FYKB1cbTz/UBEx+dsn/1U9A1IprM/ABCSXUy6diwHI3EzHAA pNPEJUUQRs8tOmBTaZ1fuhHdRyRPBVlYbpnLMYSKGW2NxG8CPz/WdFpqKwxJQ1Ay jLikwsiqng+7UF59kaNCAno5dkNP/HBkctm454Kt/JAZJKKAp9Tz4ceVDjgNdYiF hDpelSXjk7DjtsQzATRkFErvig== -----END CERTIFICATE-----Generated at Wed May 13 01:40:08 2026 by rpki-client