$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: 9IxFKs9JMC8okDEzGbghWTbljIapBTm2yjr/kYQ7z/8= Subject key identifier: CB:4F:54:78:CC:D2:01:95:12:DD:34:3D:CD:61:3B:B4:0F:22:45:44 Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 01BB Signing time: Mon 11 May 2026 03:57:56 +0000 Manifest this update: Mon 11 May 2026 03:57:56 +0000 Manifest next update: Mon 18 May 2026 03:57:56 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: SPpRPvBUohKYzKxCH1toWuia8BPqtn3F4cBlrJUvF38=) 2: DDFD7F92A36311F0BCF40B3CC4F9AE02.roa (hash: +itwix5tg1TL0xARCgIhfb+QDUeml9Ar+ujsgMhe8AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: May 11 03:57:56 2026 GMT Not After : May 18 03:57:56 2026 GMT Subject: CN=6a0153c4-2a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:8c:26:c0:02:51:19:4a:ae:16:cb:43:60: b7:7b:15:75:18:e5:c3:8c:7d:4d:e2:b5:e7:33:06: c6:08:b2:36:a8:f0:d0:f4:1a:df:e8:f3:33:01:a6: 87:32:a6:b4:72:f1:ce:5d:07:1c:c6:46:72:ad:b8: 6b:06:3f:64:11:ce:6d:f6:48:a4:9c:47:c9:0a:82: 2c:15:e5:57:01:28:33:00:e1:8d:02:3a:b8:0a:65: bc:6f:d1:74:c2:b3:24:9d:f0:24:98:4e:7f:8a:e9: f6:e2:d1:85:4b:ed:4b:d3:7e:10:c0:0c:ea:92:2a: 69:e7:69:c5:30:f7:d3:10:93:be:bc:fe:9e:5b:3a: 14:8b:16:56:4a:c8:93:7e:90:67:4f:36:65:55:52: 9c:f0:62:cf:b5:03:c8:67:b6:5c:a4:6b:4e:f0:ce: 37:89:ea:e4:68:62:52:ff:84:07:05:f0:db:63:9c: 5d:2c:99:58:17:da:f7:2c:ee:6b:1a:e4:3f:9b:f1: a3:73:1c:09:6c:70:54:fa:a3:dc:5d:46:56:8f:60: e2:d4:0a:2b:ce:7c:59:22:78:02:63:0d:ed:4f:6e: 1c:69:04:c3:4c:d3:46:f6:74:cc:e0:07:b9:7b:d2: ac:5f:c1:f4:12:59:3e:21:3b:44:ae:fa:ed:a8:d4: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:54:78:CC:D2:01:95:12:DD:34:3D:CD:61:3B:B4:0F:22:45:44 X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e4:4e:7c:fd:36:cc:b9:dd:f3:15:4c:92:81:0a:32:b3:de: 3b:ad:de:07:a8:e4:8c:3b:c2:54:24:68:d9:3d:1e:31:6b:85: 85:84:43:87:cd:1a:ee:af:d2:50:0c:2a:f7:69:45:be:6c:95: 9c:4e:cd:6b:39:a9:b9:0b:a6:0b:4f:0d:77:43:08:91:27:93: e4:e4:98:a3:15:d5:31:e3:ff:01:6f:64:9c:12:d2:bc:34:c7: 5a:35:7e:9b:e3:1a:0b:be:66:46:ba:f5:83:c9:63:86:2c:9e: 38:54:4e:3c:37:a3:94:51:0f:e7:50:08:b1:dd:a7:b1:31:fb: 5f:4a:1c:81:be:bd:fc:04:19:ac:c5:c9:0a:d6:ed:38:b0:c0: d9:5b:4d:05:35:99:e1:83:6f:8c:97:4e:5c:d8:45:e3:c4:6d: 03:28:20:4e:ce:ed:4d:27:3d:9b:dd:ad:97:f8:5c:e7:0d:c7: 1d:64:b2:e3:91:b2:2c:4f:d9:29:4c:96:23:11:54:54:86:28: 59:30:d6:9f:01:6d:ef:bd:b4:68:35:b8:bd:a0:87:16:31:e8: 5b:39:95:20:76:1e:23:11:1a:32:36:a8:19:6f:15:4d:23:b1: 02:e3:58:be:07:49:e4:de:c4:1e:61:f7:fb:24:3d:52:c7:10: 9f:35:d7:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYwNTExMDM1NzU2WhcNMjYwNTE4MDM1NzU2WjAYMRYwFAYD VQQDEw02YTAxNTNjNC0yYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EaMJsACURlKrhbLQ2C3exV1GOXDjH1N4rXnMwbGCLI2qPDQ9Brf6PMzAaaH Mqa0cvHOXQccxkZyrbhrBj9kEc5t9kiknEfJCoIsFeVXASgzAOGNAjq4CmW8b9F0 wrMknfAkmE5/iun24tGFS+1L034QwAzqkipp52nFMPfTEJO+vP6eWzoUixZWSsiT fpBnTzZlVVKc8GLPtQPIZ7ZcpGtO8M43ierkaGJS/4QHBfDbY5xdLJlYF9r3LO5r GuQ/m/GjcxwJbHBU+qPcXUZWj2Di1AorznxZIngCYw3tT24caQTDTNNG9nTM4Ae5 e9KsX8H0Elk+ITtErvrtqNR+SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtPVHjM 0gGVEt00Pc1hO7QPIkVEMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+ROfP02zLnd8xVMkoEKMrPeO63eB6jkjDvCVCRo2T0eMWuFhYRDh80a7q/S UAwq92lFvmyVnE7NazmpuQumC08Nd0MIkSeT5OSYoxXVMeP/AW9knBLSvDTHWjV+ m+MaC75mRrr1g8ljhiyeOFROPDejlFEP51AIsd2nsTH7X0ocgb69/AQZrMXJCtbt OLDA2VtNBTWZ4YNvjJdOXNhF48RtAyggTs7tTSc9m92tl/hc5w3HHWSy45GyLE/Z KUyWIxFUVIYoWTDWnwFt7720aDW4vaCHFjHoWzmVIHYeIxEaMjaoGW8VTSOxAuNY vgdJ5N7EHmH3+yQ9UscQnzXX1g== -----END CERTIFICATE-----Generated at Wed May 13 03:12:43 2026 by rpki-client