$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json) Hash identifier: y5XpWSJYvrWmz1cVoSRRDo0JY0tqG8d3XwFsRGMCefM= Subject key identifier: 69:0F:29:3D:56:D9:3B:FC:05:66:D9:01:6C:15:17:5F:5F:1B:91:AC Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft Manifest number: 3A Signing time: Wed 13 May 2026 08:41:18 +0000 Manifest this update: Wed 13 May 2026 08:41:17 +0000 Manifest next update: Wed 20 May 2026 08:41:17 +0000 Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: 5mCDeuHKsO8thUbShmDJanlMrvEl55IihnS3gU8Pl/c=) 2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Validity Not Before: May 13 08:41:17 2026 GMT Not After : May 20 08:41:17 2026 GMT Subject: CN=6a04392e-5067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:8a:79:92:68:5e:61:52:f3:af:e3:30:51: 0b:f8:71:db:c4:81:6d:f9:14:6d:3e:16:5e:cb:00: 65:ec:93:a5:81:43:5a:8c:7a:7f:71:52:58:51:47: 8c:63:90:f4:f7:d5:e5:35:74:af:e7:7f:f3:90:2b: fc:15:41:14:72:81:cc:f5:5b:3a:d7:58:59:3f:d0: 08:b2:00:25:6c:05:45:81:e1:c8:33:47:db:18:5b: ae:a3:81:7b:d0:4c:ec:34:b7:13:46:38:ed:c4:9d: 07:84:74:65:ce:0c:c6:85:f8:17:75:9f:d6:31:f9: 50:ad:04:8a:9b:af:16:34:c3:6c:86:9d:f1:cb:d2: 1d:0c:34:8a:03:78:0d:f3:0a:f3:a6:2a:ba:ef:d0: e2:1b:f3:c7:d8:05:06:a2:e3:56:ae:4f:4f:ac:5c: 08:ea:4e:8d:c1:99:56:d9:df:ae:5c:3a:e9:1d:3a: c5:d0:7d:5a:e1:9c:38:b5:9e:9f:fa:b3:5d:9c:9c: fc:3b:0d:76:bb:20:be:85:c2:12:26:16:b6:80:cf: b6:a0:35:fa:9a:fa:a6:4d:0d:87:2b:00:e6:02:f5: 98:ca:06:dd:4d:fa:65:6a:a8:c8:1d:91:07:12:9b: 36:7a:97:93:64:40:0b:53:c0:8b:b6:82:64:5c:19: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0F:29:3D:56:D9:3B:FC:05:66:D9:01:6C:15:17:5F:5F:1B:91:AC X509v3 Authority Key Identifier: keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:67:b7:ab:52:dd:4b:ad:76:66:10:55:a0:79:f9:37:99:83: 36:2c:1a:31:a8:b9:8d:74:8a:76:0c:92:57:d8:44:92:af:4d: f0:82:80:29:57:4f:85:87:94:ec:22:d4:ee:89:dd:10:d8:cd: f7:ea:37:82:2f:80:80:05:f7:1a:3e:8c:02:57:41:85:91:4f: e5:c3:a2:20:da:46:f4:e6:24:12:ad:18:0d:f6:0a:eb:ef:ba: 43:20:1d:b1:0b:eb:6f:d8:be:fa:ef:fe:3f:dd:c9:33:43:e6: 1b:4a:1e:a2:55:e1:e1:06:7d:c0:a1:53:15:d5:28:08:9d:08: 3a:0a:63:b8:a8:8e:62:3e:01:4e:72:b9:df:a0:04:50:24:4b: c1:51:7d:0d:1d:1d:e9:75:f4:cf:33:4f:6d:89:f9:4f:66:15: 52:b9:59:60:98:72:be:a6:a2:ea:b2:b5:fd:57:8e:bc:ba:ae: cc:e9:73:2a:01:2a:13:eb:76:dd:41:d3:90:50:a9:b3:52:c9: 08:56:3c:9e:2c:9f:33:df:74:e7:a9:c8:8c:74:c3:61:c0:97: 07:d0:bd:b4:06:80:dd:31:d9:6a:dc:26:c1:00:bc:84:7f:26: 6d:72:49:ef:fb:ba:98:f0:69:d5:f5:85:20:57:38:25:d9:5e: 4f:c0:84:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0I3QjExMC8GA1UEBRMoMjI1NkI4MkIwQTZFREM2MjY4QTNDQzkwQUNDMDVDNzRG MTE0Q0UzOTAeFw0yNjA1MTMwODQxMTdaFw0yNjA1MjAwODQxMTdaMBgxFjAUBgNV BAMTDTZhMDQzOTJlLTUwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMeop5kmheYVLzr+MwUQv4cdvEgW35FG0+Fl7LAGXsk6WBQ1qMen9xUlhRR4xj kPT31eU1dK/nf/OQK/wVQRRygcz1WzrXWFk/0AiyACVsBUWB4cgzR9sYW66jgXvQ TOw0txNGOO3EnQeEdGXODMaF+Bd1n9Yx+VCtBIqbrxY0w2yGnfHL0h0MNIoDeA3z CvOmKrrv0OIb88fYBQai41auT0+sXAjqTo3BmVbZ365cOukdOsXQfVrhnDi1np/6 s12cnPw7DXa7IL6FwhImFraAz7agNfqa+qZNDYcrAOYC9ZjKBt1N+mVqqMgdkQcS mzZ6l5NkQAtTwIu2gmRcGVknAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaQ8pPVbZ O/wFZtkBbBUXX18bkawwHwYDVR0jBBgwFoAUIla4Kwpu3GJoo8yQrMBcdPEUzjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QjdCLzRDQjNBMzg0RkJF OTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSWxhNEt3cHUzR0pvbzh5UXJNQmNkUEVVemprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QjdCLzRDQjNBMzg0RkJFOTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dK b284eVFyTUJjZFBFVXpqay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhZ7erUt1LrXZmEFWgefk3mYM2LBoxqLmNdIp2DJJX2ESSr03wgoApV0+Fh5Ts ItTuid0Q2M336jeCL4CABfcaPowCV0GFkU/lw6Ig2kb05iQSrRgN9grr77pDIB2x C+tv2L767/4/3ckzQ+YbSh6iVeHhBn3AoVMV1SgInQg6CmO4qI5iPgFOcrnfoARQ JEvBUX0NHR3pdfTPM09tiflPZhVSuVlgmHK+pqLqsrX9V468uq7M6XMqASoT63bd QdOQUKmzUskIVjyeLJ8z33TnqciMdMNhwJcH0L20BoDdMdlq3CbBALyEfyZtcknv +7qY8GnV9YUgVzgl2V5PwISs -----END CERTIFICATE-----Generated at Wed May 13 12:11:52 2026 by rpki-client