$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: WFEIHO1sqaAuvWF+Cm22a0wL6ihcC4B0chzrMknsDiU= Subject key identifier: 41:84:BE:2C:83:42:8E:CC:1F:8D:E6:D0:FC:17:3C:21:E4:81:85:D3 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0520 Signing time: Tue 12 May 2026 23:41:06 +0000 Manifest this update: Tue 12 May 2026 23:41:05 +0000 Manifest next update: Tue 19 May 2026 23:41:05 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: Xa7zyXA4jhRVfKGjuVFYMhddFirLikrwHkPnIkgK+tU=) 2: E097013E910C11EFB994E187C4F9AE02.roa (hash: ZdZHwag+6Cd1JHK+9hW+Jbti2LN6Ngqb+sChSvSjYdc=) 3: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qA7mB7J1Wr5PxdKSeV/plvT1JHfQHozWTf8vXejp5kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: May 12 23:41:05 2026 GMT Not After : May 19 23:41:05 2026 GMT Subject: CN=6a03ba91-2a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:09:18:eb:7d:83:45:c1:13:34:bb:95:68: 95:88:19:15:86:39:31:45:78:49:cf:43:7e:f9:a1: 01:d8:ae:e8:4f:6a:60:f2:4f:e3:31:b3:18:7e:a0: 23:c4:cc:3d:ab:0c:93:e7:ce:0b:35:78:d7:f2:b5: 92:ac:c2:99:03:d8:1e:77:e4:dd:e7:ce:56:36:e4: 6a:01:0f:80:8d:73:e6:f1:09:b8:e3:7d:f5:63:6b: ba:bb:99:85:82:7e:95:13:67:3a:a3:67:dd:56:46: af:91:9d:f7:37:79:62:c3:42:8a:2e:bc:e1:59:e2: 1b:96:a3:3c:91:c9:94:f0:27:75:cf:4e:f8:c8:ff: f7:5b:cc:5d:15:c1:b7:9b:09:af:c5:0b:fa:81:c1: d0:d5:bf:81:68:7e:cd:1e:48:b2:c9:4b:73:95:4b: 45:a1:d6:e6:32:3e:04:23:6c:68:e8:d4:d4:8d:f0: d8:4b:ff:fa:24:e6:29:54:45:0f:0f:cc:f2:6a:9c: d4:00:3a:63:12:0f:90:b6:8b:f8:1c:29:ad:f7:e4: 6c:0e:73:fb:9b:0c:ee:84:c4:fe:6a:d7:3a:2b:66: 5b:77:12:dd:32:46:32:4a:b1:60:b7:35:fa:fc:ed: c8:6e:57:f5:1d:83:64:e6:16:92:26:fe:75:4f:96: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:84:BE:2C:83:42:8E:CC:1F:8D:E6:D0:FC:17:3C:21:E4:81:85:D3 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:21:18:8d:a5:16:c7:0a:f9:c0:d9:57:14:92:1d:f2:a9:ee: 9f:52:a0:a1:90:08:dc:b8:d6:6f:31:75:92:43:6c:dd:67:9c: 35:87:8e:7f:1c:9d:ab:a4:07:f5:4d:2c:ee:3a:de:af:1b:eb: 93:c5:5a:b7:6f:b5:6a:5d:83:88:7f:54:20:dc:d6:40:bd:ca: 06:20:cf:17:37:19:d9:b5:36:8c:82:da:73:51:00:41:58:2b: 83:50:0d:c7:f2:c7:e4:35:24:96:8b:fc:be:b7:9a:00:da:aa: 59:78:49:ba:bd:38:e6:2f:5a:dd:8d:d4:40:46:af:a2:c6:fa: 8c:cd:11:93:77:69:51:5d:fb:b0:0c:e2:06:02:f1:23:ac:d2: 42:70:df:5c:dc:9a:a1:f0:c3:c9:1f:96:84:97:36:b7:cd:f8: 2a:04:25:51:d9:37:1a:0f:8a:d4:80:99:8c:36:3c:9b:4c:b3: 88:0f:2c:ac:39:ae:5f:d9:d8:1e:0e:30:6c:64:e6:4a:9d:1e: 53:6f:f6:6d:c1:71:66:00:59:c3:90:e4:bc:ea:b7:bf:3a:85: 7c:c4:64:5a:2b:6a:6f:ec:2b:44:82:e1:99:26:4d:51:03:b6: 5d:6a:43:89:10:a5:ba:4a:9a:a9:61:f5:7d:bf:04:39:4b:da: d5:9f:7c:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjYwNTEyMjM0MTA1WhcNMjYwNTE5MjM0MTA1WjAYMRYwFAYD VQQDEw02YTAzYmE5MS0yYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZMJGOt9g0XBEzS7lWiViBkVhjkxRXhJz0N++aEB2K7oT2pg8k/jMbMYfqAj xMw9qwyT584LNXjX8rWSrMKZA9ged+Td585WNuRqAQ+AjXPm8Qm44331Y2u6u5mF gn6VE2c6o2fdVkavkZ33N3liw0KKLrzhWeIblqM8kcmU8Cd1z074yP/3W8xdFcG3 mwmvxQv6gcHQ1b+BaH7NHkiyyUtzlUtFodbmMj4EI2xo6NTUjfDYS//6JOYpVEUP D8zyapzUADpjEg+Qtov4HCmt9+RsDnP7mwzuhMT+atc6K2ZbdxLdMkYySrFgtzX6 /O3Iblf1HYNk5haSJv51T5adqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGEviyD Qo7MH43m0PwXPCHkgYXTMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkCEYjaUWxwr5wNlXFJId8qnun1KgoZAI3LjWbzF1kkNs3WecNYeOfxydq6QH 9U0s7jrerxvrk8Vat2+1al2DiH9UINzWQL3KBiDPFzcZ2bU2jILac1EAQVgrg1AN x/LH5DUklov8vreaANqqWXhJur045i9a3Y3UQEavosb6jM0Rk3dpUV37sAziBgLx I6zSQnDfXNyaofDDyR+WhJc2t834KgQlUdk3Gg+K1ICZjDY8m0yziA8srDmuX9nY Hg4wbGTmSp0eU2/2bcFxZgBZw5DkvOq3vzqFfMRkWitqb+wrRILhmSZNUQO2XWpD iRClukqaqWH1fb8EOUva1Z98wQ== -----END CERTIFICATE-----Generated at Wed May 13 08:17:49 2026 by rpki-client