$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: PHOU6jOoG7NWhzD06UymHmHaVzYq+wi0zobY1wlytA0= Subject key identifier: 05:7C:F3:B7:00:3C:A2:57:B5:26:1B:7A:25:B1:7F:05:79:0B:3F:A0 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 0563 Signing time: Tue 12 May 2026 23:29:37 +0000 Manifest this update: Tue 12 May 2026 23:29:37 +0000 Manifest next update: Tue 19 May 2026 23:29:37 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: BWW2RXHuNYXlTwKznavge64Wwe5iFkjotNiwkicIglU=) 2: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=) 3: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: May 12 23:29:37 2026 GMT Not After : May 19 23:29:37 2026 GMT Subject: CN=6a03b7e1-9939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:19:a5:3a:db:9b:d2:99:e4:7b:9b:5b:7c: f4:7d:6f:ab:7e:3b:1f:13:2f:52:fe:4d:90:b6:d4: 8a:6f:d3:c3:31:03:29:4c:3d:e2:7b:bc:6d:05:ec: 15:a6:6a:bc:10:26:d3:3c:85:12:af:51:6e:d0:e3: 44:53:49:3d:e1:37:0c:0b:66:d9:d9:ff:b8:72:3c: 5a:75:5a:7f:00:7d:dd:20:76:3d:47:e3:c5:a1:ab: 20:b1:7f:3f:5f:3b:43:d7:1a:08:90:49:d7:80:2b: cc:fb:2a:e8:1a:03:25:1d:d1:df:d6:f5:d1:8f:2a: d7:96:47:7e:5f:32:f0:5e:f8:ea:96:eb:a7:8f:9d: df:e0:86:94:3f:70:89:67:86:2d:bb:b3:cb:f9:5f: 34:f0:71:83:7c:56:9c:3b:88:ee:7d:44:17:5b:b3: 15:0c:89:af:f8:f3:3e:ed:22:20:51:31:c1:7e:73: 80:2f:bb:f2:75:a2:df:d4:7f:67:d6:1a:ca:26:33: cb:a6:9b:fc:a7:54:4f:3b:ac:cd:21:a1:14:8e:b9: e7:97:46:ef:48:45:e6:e4:9f:e2:57:bc:a5:ba:76: 25:88:bc:5f:61:97:0d:c5:7a:58:f8:6e:e5:12:65: ba:0a:0f:c7:70:ac:09:54:d5:e4:43:0f:ea:71:94: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7C:F3:B7:00:3C:A2:57:B5:26:1B:7A:25:B1:7F:05:79:0B:3F:A0 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:a9:a1:f9:8a:e4:f8:41:63:ca:37:4b:5d:a4:b9:1f:f2: bf:79:46:ac:52:1a:44:66:9f:00:97:48:04:1f:84:0a:ad:56: d6:40:69:fa:3d:c2:c6:66:d6:dd:20:b7:bd:e7:b3:a7:f3:bb: a9:fd:63:de:07:14:df:bd:74:b0:1e:d2:95:ab:fd:17:28:0a: 67:94:21:a4:3e:d5:18:15:73:45:39:77:80:89:6d:01:7d:43: e1:7f:f8:b0:84:85:67:c1:e8:c7:0f:02:68:bd:a3:d4:75:5f: 8d:8e:28:6a:1f:81:8d:7e:b6:c7:fe:d4:58:54:39:7a:8d:48: b4:bd:6c:58:16:fc:f0:48:d6:86:0d:d6:a5:f3:3a:02:fe:6f: 4a:e5:70:56:d4:55:36:82:29:19:4b:38:38:cf:09:21:ce:32: 7b:64:a3:93:10:50:53:a6:0a:d5:c4:1a:f9:83:90:8f:4d:41: 8d:0c:fe:bb:34:67:4e:12:6e:f8:da:7e:5d:0b:2c:fd:c4:58: 8c:b8:88:3f:db:72:b1:a4:49:08:24:47:40:24:0d:83:25:ca: 52:82:7b:74:a3:e8:ca:08:2d:9c:65:b4:a5:e8:6f:a6:15:66: 8f:2c:1b:19:bb:95:7b:2c:96:0b:ff:ce:f4:39:69:70:ee:c2: 3b:13:df:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjYwNTEyMjMyOTM3WhcNMjYwNTE5MjMyOTM3WjAYMRYwFAYD VQQDEw02YTAzYjdlMS05OTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRMZpTrbm9KZ5HubW3z0fW+rfjsfEy9S/k2QttSKb9PDMQMpTD3ie7xtBewV pmq8ECbTPIUSr1Fu0ONEU0k94TcMC2bZ2f+4cjxadVp/AH3dIHY9R+PFoasgsX8/ XztD1xoIkEnXgCvM+yroGgMlHdHf1vXRjyrXlkd+XzLwXvjqluunj53f4IaUP3CJ Z4Ytu7PL+V808HGDfFacO4jufUQXW7MVDImv+PM+7SIgUTHBfnOAL7vydaLf1H9n 1hrKJjPLppv8p1RPO6zNIaEUjrnnl0bvSEXm5J/iV7ylunYliLxfYZcNxXpY+G7l EmW6Cg/HcKwJVNXkQw/qcZQB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAV887cA PKJXtSYbeiWxfwV5Cz+gMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhtSpofmK5PhBY8o3S12kuR/yv3lGrFIaRGafAJdIBB+ECq1W1kBp+j3CxmbW 3SC3veezp/O7qf1j3gcU3710sB7Slav9FygKZ5QhpD7VGBVzRTl3gIltAX1D4X/4 sISFZ8Hoxw8CaL2j1HVfjY4oah+BjX62x/7UWFQ5eo1ItL1sWBb88EjWhg3WpfM6 Av5vSuVwVtRVNoIpGUs4OM8JIc4ye2SjkxBQU6YK1cQa+YOQj01BjQz+uzRnThJu +Np+XQss/cRYjLiIP9tysaRJCCRHQCQNgyXKUoJ7dKPoyggtnGW0pehvphVmjywb GbuVeyyWC//O9DlpcO7COxPfzg== -----END CERTIFICATE-----Generated at Wed May 13 07:51:16 2026 by rpki-client