$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: awRPZleRxp9718t8nD0URQrlA+T9NHzQ1eAGK+0Nby0= Subject key identifier: D9:FB:C8:B5:3A:4F:69:B1:D2:75:AF:32:BF:1C:48:63:34:20:A8:6C Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0288 Signing time: Wed 13 May 2026 01:53:23 +0000 Manifest this update: Wed 13 May 2026 01:53:22 +0000 Manifest next update: Wed 20 May 2026 01:53:22 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: BT8Q4JlL41OhtSpOmTs+y2ZsmRETTH5GOurNB2WRoxY=) 2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) 3: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: May 13 01:53:22 2026 GMT Not After : May 20 01:53:22 2026 GMT Subject: CN=6a03d992-0c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:a0:9b:68:5d:bd:2a:55:f6:2f:9c:e4:5d: 54:9e:7c:12:8a:df:d1:dc:49:65:e1:35:13:52:46: e4:c7:0a:c3:a1:3c:e5:13:84:6f:1b:50:ea:0e:26: 3f:93:dd:bd:32:a4:d9:90:3e:14:b6:bd:f2:1e:ac: a2:a2:ef:73:a2:1e:89:46:2e:51:59:2e:f2:91:29: 91:4b:56:ad:80:c2:26:45:60:8c:75:67:c8:4a:bc: 9d:25:55:7d:44:1f:d6:4a:b3:6b:0a:d0:4a:95:14: fb:eb:9e:7c:43:a8:42:d7:83:2d:ec:fb:43:47:fd: 55:d5:6d:2f:78:14:37:e9:fe:75:cc:36:50:04:5e: 28:d6:cd:42:7e:22:08:57:9e:ea:88:f3:57:6e:84: 21:95:59:e2:56:68:b0:61:c8:da:1e:0e:9b:1a:77: 3d:c3:31:cd:a8:d7:1e:96:08:42:e4:63:4e:e8:b6: f5:ed:1c:53:19:0f:91:74:d5:e3:92:ff:7e:5b:0a: 5d:09:39:b0:cf:1e:cf:a7:58:4b:36:64:6d:2b:67: 86:39:bc:23:ee:28:4c:d6:e4:0e:eb:e5:20:4a:ca: 33:9d:58:25:78:82:99:fe:10:e1:04:b6:2e:88:3a: e2:91:7c:0d:99:51:d6:c4:ca:37:05:f7:5a:7d:f8: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FB:C8:B5:3A:4F:69:B1:D2:75:AF:32:BF:1C:48:63:34:20:A8:6C X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:10:3e:08:c9:e5:cb:1c:21:06:ef:07:39:29:2c:de:a9:3d: 8e:45:30:1c:f7:30:f5:c2:5c:f5:8c:ca:a3:61:e1:ab:da:27: 92:f0:5b:ce:ef:ee:ad:a2:4e:a4:a0:e8:c0:0f:6a:9d:ef:d5: be:31:5a:e3:56:0e:f2:a0:4c:fa:14:05:30:c7:e4:5c:f6:5b: b2:ae:47:4f:df:8a:e2:38:e3:e6:00:50:0b:ee:2f:bd:8c:59: 46:71:00:5c:79:54:c1:64:5d:35:bd:0c:a1:be:5f:2a:54:1d: e9:94:ba:e2:65:de:e1:fd:1f:ce:21:2c:05:54:2b:6b:2d:fa: cd:e0:9a:3f:d7:6b:c9:7a:76:64:50:df:3d:2d:a6:4f:0a:8f: 97:84:33:ce:82:0a:64:1a:84:d1:eb:97:be:7d:1b:29:5a:9c: 54:32:f9:0b:01:3a:83:dd:c1:ae:5c:00:43:24:44:c3:00:5c: b4:18:ba:61:96:77:a4:b4:74:2d:99:c8:cd:e6:0d:d7:6f:c9: f7:75:e1:dd:9b:21:63:c1:5c:8d:99:16:ac:d5:eb:04:be:a2: 60:88:3c:ad:93:c3:75:08:2e:9c:c7:f2:06:ff:fc:f2:ef:c4: 23:61:23:14:c2:48:9e:30:4d:a5:49:83:a5:4a:0a:09:69:9b: 9f:6b:0f:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwNTEzMDE1MzIyWhcNMjYwNTIwMDE1MzIyWjAYMRYwFAYD VQQDEw02YTAzZDk5Mi0wYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrygm2hdvSpV9i+c5F1UnnwSit/R3Ell4TUTUkbkxwrDoTzlE4RvG1DqDiY/ k929MqTZkD4Utr3yHqyiou9zoh6JRi5RWS7ykSmRS1atgMImRWCMdWfISrydJVV9 RB/WSrNrCtBKlRT76558Q6hC14Mt7PtDR/1V1W0veBQ36f51zDZQBF4o1s1CfiII V57qiPNXboQhlVniVmiwYcjaHg6bGnc9wzHNqNcelghC5GNO6Lb17RxTGQ+RdNXj kv9+WwpdCTmwzx7Pp1hLNmRtK2eGObwj7ihM1uQO6+UgSsoznVgleIKZ/hDhBLYu iDrikXwNmVHWxMo3Bfdaffi1TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNn7yLU6 T2mx0nWvMr8cSGM0IKhsMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjRA+CMnlyxwhBu8HOSks3qk9jkUwHPcw9cJc9YzKo2Hhq9onkvBbzu/uraJO pKDowA9qne/VvjFa41YO8qBM+hQFMMfkXPZbsq5HT9+K4jjj5gBQC+4vvYxZRnEA XHlUwWRdNb0Mob5fKlQd6ZS64mXe4f0fziEsBVQray36zeCaP9dryXp2ZFDfPS2m TwqPl4QzzoIKZBqE0euXvn0bKVqcVDL5CwE6g93BrlwAQyREwwBctBi6YZZ3pLR0 LZnIzeYN12/J93Xh3ZshY8FcjZkWrNXrBL6iYIg8rZPDdQgunMfyBv/88u/EI2Ej FMJInjBNpUmDpUoKCWmbn2sPog== -----END CERTIFICATE-----Generated at Wed May 13 05:07:16 2026 by rpki-client