$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: VPuJTNy+1josoGrEPNqxNDdmUC50mQENnez250ZpxS4= Subject key identifier: C1:E2:AB:34:93:17:6A:AF:B9:99:CA:07:2F:03:A3:AA:BF:50:EB:4C Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 01C0 Signing time: Wed 13 May 2026 04:05:34 +0000 Manifest this update: Wed 13 May 2026 04:05:34 +0000 Manifest next update: Wed 20 May 2026 04:05:34 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: ZQS/SCWcGaO8jC6VM7bnXQjb/ycU9pH5a5U+a7qTaSE=) 2: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) 3: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: zRLwbdLjJcZ9xIvEJX9pjeEu223B0K+u9rS591OrK1I=) 4: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: May 13 04:05:34 2026 GMT Not After : May 20 04:05:34 2026 GMT Subject: CN=6a03f88e-019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f0:eb:81:dc:43:d9:05:e0:3d:36:b9:a8:a1: 6a:a7:03:71:22:a6:2b:8a:ef:97:04:a1:d6:02:3c: 89:a7:3d:33:61:fd:d2:50:d0:41:a5:7e:49:14:a2: 10:8b:22:57:aa:98:63:c4:9f:ca:01:01:4c:66:30: f6:06:11:0b:fe:12:6f:62:26:94:23:57:6a:77:72: 70:93:f6:96:18:79:cf:7d:78:dd:35:49:e2:46:61: 7c:dc:47:4c:c9:24:69:f9:47:56:5f:33:cf:57:33: f9:c8:1f:82:42:46:9e:0a:b3:c5:9c:96:67:b2:da: 85:41:96:8a:80:7e:11:b2:9f:30:f0:a2:5c:0e:e7: 23:e7:80:75:52:14:72:8b:34:31:5e:b0:d7:90:5b: 10:67:74:83:ef:06:7f:9f:80:56:12:62:f1:f3:87: 06:c3:6c:ce:4c:34:46:57:88:fc:fd:38:55:f5:4c: c7:20:12:d6:6d:f8:78:a5:00:e2:2a:2c:92:91:16: 75:57:20:f0:1d:45:37:b9:73:32:28:57:ed:ce:fe: ab:36:a3:a3:18:0f:7a:76:69:09:a0:3c:22:01:55: c7:0b:a6:c1:be:fb:b3:7f:0d:ef:ff:26:25:36:62: b0:95:be:1c:23:c9:92:e0:4e:46:3c:f1:34:2b:c9: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:AB:34:93:17:6A:AF:B9:99:CA:07:2F:03:A3:AA:BF:50:EB:4C X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fa:7d:e6:87:02:2a:8b:c9:74:5a:44:b0:a8:e6:27:21:35: 79:6b:c8:f6:96:ee:4e:50:53:03:75:a4:f7:3e:3e:18:d1:96: 99:25:f6:9f:23:9a:e6:d9:1c:05:6e:53:50:60:a6:01:7f:b8: 8a:fc:f6:cb:ba:00:21:c4:61:b3:2f:71:25:fb:86:ef:58:b7: 84:f0:29:1d:24:a7:b3:60:47:b9:4e:55:6f:d7:e2:c0:6f:69: 9a:ca:75:45:19:fd:4b:8c:1c:20:61:24:b1:d7:67:ea:ef:aa: 4e:f1:52:ae:62:fc:85:14:28:31:25:d7:f8:28:1b:d0:d9:88: 6a:e8:e9:b2:5f:bb:56:d4:eb:6b:69:bc:e1:cf:80:80:f8:19: 9d:1a:12:0c:62:22:41:da:a4:e9:e9:40:8e:39:0a:44:04:55: ed:a2:5e:02:b1:fc:60:ec:bb:29:06:9e:11:06:9a:3d:c9:35: c8:e6:34:75:e7:7b:dd:7d:dd:4d:1c:52:4f:2a:43:47:4e:92: 80:d0:f6:cc:a7:51:7c:ff:14:02:1d:74:a5:38:5a:91:19:97: dc:3c:d4:ca:75:5f:64:1b:fe:96:41:41:2a:48:14:6d:83:ce: 1f:67:e1:2e:37:bd:7b:20:8d:a7:eb:fd:2c:a8:49:2b:cc:cf: ec:3b:76:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwNTEzMDQwNTM0WhcNMjYwNTIwMDQwNTM0WjAYMRYwFAYD VQQDEw02YTAzZjg4ZS0wMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/DrgdxD2QXgPTa5qKFqpwNxIqYriu+XBKHWAjyJpz0zYf3SUNBBpX5JFKIQ iyJXqphjxJ/KAQFMZjD2BhEL/hJvYiaUI1dqd3Jwk/aWGHnPfXjdNUniRmF83EdM ySRp+UdWXzPPVzP5yB+CQkaeCrPFnJZnstqFQZaKgH4Rsp8w8KJcDucj54B1UhRy izQxXrDXkFsQZ3SD7wZ/n4BWEmLx84cGw2zOTDRGV4j8/ThV9UzHIBLWbfh4pQDi KiySkRZ1VyDwHUU3uXMyKFftzv6rNqOjGA96dmkJoDwiAVXHC6bBvvuzfw3v/yYl NmKwlb4cI8mS4E5GPPE0K8kTdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHiqzST F2qvuZnKBy8Do6q/UOtMMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATvp95ocCKovJdFpEsKjmJyE1eWvI9pbuTlBTA3Wk9z4+GNGWmSX2nyOa5tkc BW5TUGCmAX+4ivz2y7oAIcRhsy9xJfuG71i3hPApHSSns2BHuU5Vb9fiwG9pmsp1 RRn9S4wcIGEksddn6u+qTvFSrmL8hRQoMSXX+Cgb0NmIaujpsl+7VtTra2m84c+A gPgZnRoSDGIiQdqk6elAjjkKRARV7aJeArH8YOy7KQaeEQaaPck1yOY0ded73X3d TRxSTypDR06SgND2zKdRfP8UAh10pThakRmX3DzUynVfZBv+lkFBKkgUbYPOH2fh Lje9eyCNp+v9LKhJK8zP7Dt2mw== -----END CERTIFICATE-----Generated at Wed May 13 15:32:00 2026 by rpki-client