$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: lM8TOx//FbYDkstxqXT9eP7XO9fu9S/cBLfYuJWoVGg= Subject key identifier: B4:E6:B3:18:BC:36:BF:D5:E1:85:03:45:BB:6C:04:A7:A1:3A:18:B3 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1C89 Signing time: Tue 12 May 2026 16:11:40 +0000 Manifest this update: Tue 12 May 2026 16:11:39 +0000 Manifest next update: Tue 19 May 2026 16:11:39 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: a7zmzv6XqWg96OGsa0ngJs9wjdUzvE6BEBqUDAKX3FY=) 2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=) 3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7342 (0x1cae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: May 12 16:11:39 2026 GMT Not After : May 19 16:11:39 2026 GMT Subject: CN=6a03513c-61f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7c:44:da:f7:6c:d0:76:39:c3:0d:b9:0f:94: 2b:81:48:ae:da:c9:6f:f1:ab:02:16:78:2d:d8:cd: 30:86:9d:f7:5c:ce:ea:e6:f4:93:98:db:a1:e2:26: b5:9c:e4:f9:09:aa:9c:f1:21:53:ed:33:9d:00:85: 8b:07:c3:96:5b:b9:f0:28:ff:cd:82:b8:13:b1:4f: 01:7c:0f:7a:82:eb:91:66:7c:a9:5a:2e:58:c7:fc: b5:d5:7c:ff:6f:85:e3:bf:6e:73:da:54:5d:45:27: 2f:fb:ab:9e:58:83:e5:c9:2c:20:c7:30:89:70:04: 99:54:30:b8:8e:50:d6:55:b1:60:57:d4:6c:68:e6: ab:63:53:8e:ba:72:56:7d:4c:74:b8:27:08:54:b9: 60:1b:d5:f2:92:66:a6:2a:07:23:6e:1f:27:7a:63: ee:a8:0c:43:75:8c:29:8c:4e:35:0e:6f:54:be:a6: 89:24:79:ad:43:e7:d7:a2:16:f7:ba:10:e7:10:fa: 96:74:c1:65:7d:f3:b6:96:7a:12:46:95:21:2a:80: fc:6c:26:9d:73:d3:87:3c:38:f9:f9:51:72:ea:40: 34:b6:95:69:82:46:b9:77:45:86:8a:fb:a1:bd:a5: e9:13:55:63:27:3c:dc:7f:60:68:b8:93:04:7e:78: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:B3:18:BC:36:BF:D5:E1:85:03:45:BB:6C:04:A7:A1:3A:18:B3 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6a:39:fb:32:52:ad:a3:e8:8d:64:52:61:a5:7c:5d:6c:d8: 7b:60:54:42:db:13:75:6b:6d:54:17:55:ad:e6:84:7f:ab:f6: d6:45:78:96:7c:e5:3d:40:bb:bc:31:41:93:32:18:19:73:66: 7a:ac:26:f2:04:0b:87:5c:5d:ad:58:84:89:43:51:7f:3f:22: d0:01:b1:4d:e4:86:92:58:5f:93:bf:8a:bd:c0:76:4d:83:fc: e6:53:fd:b5:2c:49:26:6b:da:96:40:19:b8:4e:74:65:90:11: a1:99:68:62:2d:91:71:bd:0e:08:e0:e4:28:68:d3:ae:7c:c1: 81:e4:44:ca:c2:90:00:39:62:88:35:b4:0a:8f:7b:6d:78:ef: f8:12:df:1c:05:20:7b:20:be:e8:1c:d0:1d:22:26:f3:5c:c3: 5f:d3:f7:ae:40:9d:52:75:12:8d:12:59:2f:a8:b6:fb:86:c1: 4b:26:c9:b6:ec:64:53:59:ad:11:41:95:94:a8:50:8a:7d:60: 88:64:fa:ee:52:f3:16:2e:06:c9:f1:db:a8:c6:d3:d1:06:01: d6:15:4a:5a:37:d5:88:bd:fc:bc:a1:5c:67:11:f7:a3:d9:55: 77:cc:d0:f6:35:04:bf:1d:69:c6:f4:6d:19:64:15:6e:cd:b3: 00:4d:65:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjYwNTEyMTYxMTM5WhcNMjYwNTE5MTYxMTM5WjAYMRYwFAYD VQQDEw02YTAzNTEzYy02MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+HxE2vds0HY5ww25D5QrgUiu2slv8asCFngt2M0whp33XM7q5vSTmNuh4ia1 nOT5Caqc8SFT7TOdAIWLB8OWW7nwKP/NgrgTsU8BfA96guuRZnypWi5Yx/y11Xz/ b4Xjv25z2lRdRScv+6ueWIPlySwgxzCJcASZVDC4jlDWVbFgV9RsaOarY1OOunJW fUx0uCcIVLlgG9XykmamKgcjbh8nemPuqAxDdYwpjE41Dm9UvqaJJHmtQ+fXohb3 uhDnEPqWdMFlffO2lnoSRpUhKoD8bCadc9OHPDj5+VFy6kA0tpVpgka5d0WGivuh vaXpE1VjJzzcf2BouJMEfnhOMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTmsxi8 Nr/V4YUDRbtsBKehOhizMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAemo5+zJSraPojWRSYaV8XWzYe2BUQtsTdWttVBdVreaEf6v21kV4lnzlPUC7 vDFBkzIYGXNmeqwm8gQLh1xdrViEiUNRfz8i0AGxTeSGklhfk7+KvcB2TYP85lP9 tSxJJmvalkAZuE50ZZARoZloYi2Rcb0OCODkKGjTrnzBgeREysKQADliiDW0Co97 bXjv+BLfHAUgeyC+6BzQHSIm81zDX9P3rkCdUnUSjRJZL6i2+4bBSybJtuxkU1mt EUGVlKhQin1giGT67lLzFi4GyfHbqMbT0QYB1hVKWjfViL38vKFcZxH3o9lVd8zQ 9jUEvx1pxvRtGWQVbs2zAE1l5A== -----END CERTIFICATE-----Generated at Wed May 13 07:52:11 2026 by rpki-client