$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft File: I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft (raw, json) Hash identifier: H6BrwDrJuP+sT2cyLZOVZx7hfuZZ+atUZYe/fn79Nsg= Subject key identifier: DF:BE:00:9A:10:A5:32:E8:E5:67:5A:72:AD:03:FE:D9:06:BF:C4:F5 Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28 Certificate issuer: /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft Manifest number: 34 Signing time: Mon 11 May 2026 08:53:06 +0000 Manifest this update: Mon 11 May 2026 08:53:06 +0000 Manifest next update: Mon 18 May 2026 08:53:06 +0000 Files and hashes: 1: I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl (hash: cUgDWdDWkLY5sR8MHrlpYf9WL4tDpXepRES1q398Bms=) 2: 3F7E724808FA11F1B69E3FD3313D8C67.roa (hash: NZDM0P5b400zVrhyd2jzSLfxw/qGeaxR3jXe0NSn67o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828 Validity Not Before: May 11 08:53:06 2026 GMT Not After : May 18 08:53:06 2026 GMT Subject: CN=6a0198f2-4a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:bd:27:6d:77:4f:8f:72:f3:2c:5d:b1:d8: 30:0e:3a:71:66:4b:86:01:15:51:cf:05:3f:20:82: 8b:b1:42:b8:8e:bc:ca:61:13:04:77:98:a5:de:52: 00:63:1b:6b:5a:ed:6e:bb:2a:86:65:ba:05:04:7f: c8:e6:22:50:af:4b:de:53:f6:e6:5b:4e:4a:51:93: c3:db:01:90:f3:4d:8e:5a:b1:4e:a5:76:f9:43:2e: cc:04:60:a6:6a:90:03:b7:f4:fb:79:ce:41:89:a1: 52:a9:84:7a:42:1f:d3:50:e0:33:6b:2e:a2:56:a7: 04:a6:d6:b6:5d:1f:26:25:da:d5:72:9d:73:b0:6c: b7:43:1d:b6:0f:f3:09:19:53:0a:21:64:e9:a0:3b: 4d:1d:f8:eb:58:74:c3:af:3e:ec:e4:b1:a7:9c:d3: 31:bc:50:e8:90:a6:19:9b:06:56:ed:33:52:01:11: e9:33:c1:a7:b5:51:26:1b:d6:c2:61:22:5b:be:44: 32:d6:89:fa:d9:d0:98:81:d6:be:bf:61:6b:ac:0c: 9e:fc:83:7d:57:ed:c7:f4:fe:9c:55:f4:6a:07:2b: 8e:db:bd:b3:de:f3:6e:6f:c9:0b:26:a3:03:e6:35: 11:59:a1:88:cb:24:53:2a:60:58:91:e7:13:81:81: 16:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:00:9A:10:A5:32:E8:E5:67:5A:72:AD:03:FE:D9:06:BF:C4:F5 X509v3 Authority Key Identifier: keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:e2:4a:c6:5e:f6:4d:b3:ab:97:10:d6:09:85:ef:7d:dd:d4: de:ce:b1:77:2a:dd:52:8f:73:cb:7d:78:99:67:20:48:11:46: d2:48:2d:eb:fb:35:6f:a3:72:d4:47:ed:6d:b2:17:17:c1:9a: f3:9e:47:20:aa:5a:49:ab:ef:70:af:81:50:8e:96:b9:d3:33: c6:72:01:d5:20:85:89:53:76:b6:3a:48:01:7c:ed:27:c9:88: ce:b2:4b:6a:d7:79:c9:ee:29:61:fe:6e:ed:88:d5:0d:42:f5: 90:e7:a0:a6:19:d8:06:ee:09:a0:30:ff:3b:bf:8c:16:6a:22: 75:a8:c6:b3:84:66:85:3a:02:54:e8:a8:b9:88:64:d4:67:75: 2f:75:04:79:8e:7d:c3:ce:75:5a:cf:09:de:77:f8:d2:11:98: e9:40:53:63:49:58:ef:67:5b:54:60:dc:4a:8e:c4:20:eb:f5: 7b:98:e4:60:c4:b5:47:6d:94:4b:e6:af:99:e0:3b:5c:16:bf: 11:bd:39:96:71:44:6a:15:83:d1:c5:da:e4:ae:7d:a9:8d:f1: dd:cc:e4:f6:5e:69:6b:96:ec:d0:57:7e:e4:29:01:be:56:11: c3:18:02:46:75:09:b2:63:c0:74:f2:a1:c7:ad:f8:d0:ab:21: fe:7a:aa:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 REIwODExMC8GA1UEBRMoMjM5MUZCNEQ5QUVENDRBQjgwRTZBRkQ4RDgyMEExQzA2 NDQzOTgyODAeFw0yNjA1MTEwODUzMDZaFw0yNjA1MTgwODUzMDZaMBgxFjAUBgNV BAMTDTZhMDE5OGYyLTRhNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPF70nbXdPj3LzLF2x2DAOOnFmS4YBFVHPBT8ggouxQriOvMphEwR3mKXeUgBj G2ta7W67KoZlugUEf8jmIlCvS95T9uZbTkpRk8PbAZDzTY5asU6ldvlDLswEYKZq kAO39Pt5zkGJoVKphHpCH9NQ4DNrLqJWpwSm1rZdHyYl2tVynXOwbLdDHbYP8wkZ UwohZOmgO00d+OtYdMOvPuzksaec0zG8UOiQphmbBlbtM1IBEekzwae1USYb1sJh Ilu+RDLWifrZ0JiB1r6/YWusDJ78g31X7cf0/pxV9GoHK47bvbPe825vyQsmowPm NRFZoYjLJFMqYFiR5xOBgRZ5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU374AmhCl MujlZ1pyrQP+2Qa/xPUwHwYDVR0jBBgwFoAUI5H7TZrtRKuA5q/Y2CChwGRDmCgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEQjA4LzM4ODZFOEI4MDhG OTExRjE4MDg0RDA4NjMxM0Q4QzY3L0k1SDdUWnJ0Ukt1QTVxX1kyQ0Nod0dSRG1D Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTVIN1RacnRSS3VBNXFfWTJDQ2h3R1JEbUNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE QjA4LzM4ODZFOEI4MDhGOTExRjE4MDg0RDA4NjMxM0Q4QzY3L0k1SDdUWnJ0Ukt1 QTVxX1kyQ0Nod0dSRG1DZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDC4krGXvZNs6uXENYJhe993dTezrF3Kt1Sj3PLfXiZZyBIEUbSSC3r+zVvo3LU R+1tshcXwZrznkcgqlpJq+9wr4FQjpa50zPGcgHVIIWJU3a2OkgBfO0nyYjOsktq 13nJ7ilh/m7tiNUNQvWQ56CmGdgG7gmgMP87v4wWaiJ1qMazhGaFOgJU6Ki5iGTU Z3UvdQR5jn3DznVazwned/jSEZjpQFNjSVjvZ1tUYNxKjsQg6/V7mORgxLVHbZRL 5q+Z4DtcFr8RvTmWcURqFYPRxdrkrn2pjfHdzOT2XmlrluzQV37kKQG+VhHDGAJG dQmyY8B08qHHrfjQqyH+eqrh -----END CERTIFICATE-----Generated at Wed May 13 05:41:15 2026 by rpki-client