$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: 2nAtPYBhigOFluHdRQohH4+Lpl/4cBbh36kMH3ju4rg= Subject key identifier: B8:E0:72:3E:9F:0F:98:02:C4:6A:A1:CA:76:CD:31:2F:D4:B3:D5:F5 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0A2C Signing time: Tue 12 May 2026 19:49:40 +0000 Manifest this update: Tue 12 May 2026 19:49:40 +0000 Manifest next update: Tue 19 May 2026 19:49:40 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: pnZNgb4sq0lnOvUpQYIMKlNRUMvrjUCu26Rm9HlQG+8=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: 2OCGb2GsDSN9eWUkEJm9OxDpHisk081Il0yQc3djlTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: May 12 19:49:40 2026 GMT Not After : May 19 19:49:40 2026 GMT Subject: CN=6a038454-89e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:d3:c3:36:eb:9b:66:b5:49:63:9e:96:ba: e8:26:27:ac:25:ca:df:e0:f1:7b:9c:9d:db:6f:59: b2:68:9c:f2:c7:0f:c2:c3:47:44:cd:71:1a:3a:8a: eb:13:e3:08:6d:85:4f:73:d3:be:21:8f:10:c1:50: dd:8d:ef:bc:a5:9a:96:06:f4:6b:80:8e:2b:4b:45: 71:10:1e:5e:21:e4:6b:83:6d:3f:0f:26:ad:c2:fd: 71:4f:e4:ae:52:25:7f:4c:6f:a1:83:02:33:79:31: 54:de:20:65:a4:3e:38:f0:79:1f:30:93:9c:b6:ee: d5:2f:2a:a4:84:fe:2a:b7:a5:55:8d:59:60:60:f5: 3e:68:7b:da:69:ea:ca:28:c3:28:ec:d4:13:fc:8f: 13:0c:71:74:7d:3b:1b:63:70:ad:d3:ef:30:53:57: 9c:7f:ae:8e:b0:64:31:bd:b1:29:2f:73:4e:3d:9f: 2a:d7:48:78:07:cb:8d:7a:40:d6:2d:08:16:93:99: 9e:c8:18:1a:86:9e:01:ca:1b:9a:71:63:8f:64:da: 58:e9:69:0a:37:93:b3:4d:9a:20:41:be:05:38:6f: 92:5a:c8:c2:92:36:36:a9:d7:5f:c6:44:c5:e4:72: 58:93:2f:86:ba:43:2f:9e:47:aa:f4:5c:6f:4e:01: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:72:3E:9F:0F:98:02:C4:6A:A1:CA:76:CD:31:2F:D4:B3:D5:F5 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:3b:79:d4:06:ee:0a:07:3e:86:3a:fa:b4:ae:86:06:ad:66: c4:1a:5d:21:78:74:a8:25:81:75:e3:99:38:1f:ba:03:20:ee: 32:34:6f:8a:58:cc:54:d3:0d:50:74:be:80:fa:8e:83:86:d6: a1:31:e0:0a:39:e6:c7:c1:73:4f:58:e9:ef:78:d4:9c:89:e3: 51:90:b1:98:78:da:f5:2f:bb:1f:1f:86:9a:40:a3:fe:99:4e: c2:ad:56:68:f6:d9:5f:2d:e6:40:12:ff:b0:75:98:84:b3:14: 42:b7:09:1b:eb:c4:db:2e:3a:43:94:69:e1:af:7d:3c:02:a3: d8:5e:2e:a5:a4:02:1f:e5:0b:33:9d:5b:a6:f6:ef:95:b6:0f: f3:b5:95:ab:ac:dd:e0:40:c0:e2:20:7d:a3:c3:69:c0:b4:b3: 26:fc:e4:8d:ba:6e:c7:e1:7f:f0:d1:95:4d:ae:07:f9:78:96: 2b:83:76:40:9d:9d:76:43:db:83:dc:31:a1:c2:ba:39:4e:d2: d4:9f:36:ea:31:9b:b1:ab:97:40:a0:70:3f:8a:6e:31:d0:d9: cb:cd:cd:ad:82:72:14:66:90:dc:d0:36:15:48:a7:b7:77:a2: a1:00:1a:42:41:c6:a1:29:f3:da:a8:a7:1b:24:f3:72:16:06: 02:e4:5b:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjYwNTEyMTk0OTQwWhcNMjYwNTE5MTk0OTQwWjAYMRYwFAYD VQQDEw02YTAzODQ1NC04OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxArTwzbrm2a1SWOelrroJiesJcrf4PF7nJ3bb1myaJzyxw/Cw0dEzXEaOorr E+MIbYVPc9O+IY8QwVDdje+8pZqWBvRrgI4rS0VxEB5eIeRrg20/Dyatwv1xT+Su UiV/TG+hgwIzeTFU3iBlpD448HkfMJOctu7VLyqkhP4qt6VVjVlgYPU+aHvaaerK KMMo7NQT/I8TDHF0fTsbY3Ct0+8wU1ecf66OsGQxvbEpL3NOPZ8q10h4B8uNekDW LQgWk5meyBgahp4ByhuacWOPZNpY6WkKN5OzTZogQb4FOG+SWsjCkjY2qddfxkTF 5HJYky+GukMvnkeq9FxvTgEYxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjgcj6f D5gCxGqhynbNMS/Us9X1MB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARTt51AbuCgc+hjr6tK6GBq1mxBpdIXh0qCWBdeOZOB+6AyDuMjRviljMVNMN UHS+gPqOg4bWoTHgCjnmx8FzT1jp73jUnInjUZCxmHja9S+7Hx+GmkCj/plOwq1W aPbZXy3mQBL/sHWYhLMUQrcJG+vE2y46Q5Rp4a99PAKj2F4upaQCH+ULM51bpvbv lbYP87WVq6zd4EDA4iB9o8NpwLSzJvzkjbpux+F/8NGVTa4H+XiWK4N2QJ2ddkPb g9wxocK6OU7S1J826jGbsauXQKBwP4puMdDZy83NrYJyFGaQ3NA2FUint3eioQAa QkHGoSnz2qinGyTzchYGAuRbWA== -----END CERTIFICATE-----Generated at Wed May 13 14:32:59 2026 by rpki-client