$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft File: iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json) Hash identifier: RBP+uwL8qqAcRupHBnQp5YPC+mi/AMJSrsL6gEBUM8Q= Subject key identifier: B4:35:E1:7C:FF:DE:02:75:36:C7:66:A8:E0:AE:59:ED:46:FD:CB:1B Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD Certificate issuer: /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft Manifest number: 44 Signing time: Mon 11 May 2026 08:38:52 +0000 Manifest this update: Mon 11 May 2026 08:38:51 +0000 Manifest next update: Mon 18 May 2026 08:38:51 +0000 Files and hashes: 1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: rA2rEg5qN/mwwmrs7qCCPZYBrccHntw4OcZmXnmFxFs=) 2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Validity Not Before: May 11 08:38:51 2026 GMT Not After : May 18 08:38:51 2026 GMT Subject: CN=6a01959c-1370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:33:59:66:f8:7e:d6:f2:81:f4:74:25:48: ec:00:9f:4a:49:65:ff:84:eb:b9:d3:b3:b0:81:14: f1:9e:7b:c4:0b:76:e1:78:dc:da:4f:80:4e:fb:8d: 7e:90:ea:82:f1:5c:55:87:5e:f0:30:8a:ae:88:6a: 18:61:a4:e4:8a:d3:b7:52:c6:d7:40:e7:8f:25:4a: cb:81:06:e8:dc:bc:6f:e5:c6:bb:c8:10:0f:eb:5b: 0d:ca:21:5a:77:59:ba:45:74:1e:21:05:55:bc:75: 40:c1:b9:8a:55:eb:bb:67:57:b9:b4:95:3f:0a:ab: 65:09:1f:76:83:b1:a4:a1:4f:89:62:c1:b9:09:56: e6:ac:6c:e2:38:9c:61:ac:dc:67:25:c4:f9:7d:83: 0e:96:65:63:7f:d8:ca:38:f9:24:15:7b:c7:59:28: 8a:37:47:3e:c6:19:a0:93:4e:cd:54:52:4d:1a:fb: fd:91:b2:c4:ac:f7:96:ec:49:51:db:40:b4:0a:29: 57:a9:24:94:0e:ea:e5:c0:3e:b4:f0:a7:7a:68:9c: 2a:6d:07:90:dd:ca:e2:7a:ac:7e:e6:ad:c4:c3:cd: 08:f4:5f:99:f6:86:c6:8e:8b:6a:0a:30:1c:4f:4c: 9a:28:38:6f:63:8e:72:20:07:db:fa:bc:76:1f:9e: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:E1:7C:FF:DE:02:75:36:C7:66:A8:E0:AE:59:ED:46:FD:CB:1B X509v3 Authority Key Identifier: keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d6:78:85:07:62:ce:83:e2:ea:5b:10:85:0c:b5:98:04:c0: 27:82:da:e0:3c:48:5a:de:b4:20:57:27:d5:f6:bf:6f:07:0e: 4b:d2:26:cf:c9:d5:61:75:1d:db:40:4c:4a:d1:c3:ac:ce:c2: d3:e2:1f:6a:e6:b3:ce:53:2f:e7:d9:7c:93:a3:f0:f4:8c:db: a6:fa:b0:b5:ba:85:1c:c0:aa:3b:12:7b:c6:03:c0:9b:67:85: b7:13:36:aa:e5:d6:84:07:7e:de:b4:02:12:74:8b:4d:24:e2: 2d:e3:5c:19:13:c5:f4:22:19:8b:82:e1:2e:3c:34:ff:00:c0: e6:8a:0d:50:0f:df:07:94:14:dd:39:3d:bd:3d:80:27:47:a9: 9c:9b:46:21:c9:f4:b1:c1:1d:2b:81:55:81:d1:9c:43:bb:82: 7b:f0:37:ea:0b:66:88:63:a2:7e:06:25:97:35:a0:3d:c3:e0: 1b:a3:1c:45:ba:62:46:07:a7:d3:d8:3e:9f:5c:16:cd:de:d3: af:bb:39:b5:58:e4:b3:11:7e:48:c5:0b:e6:95:d7:b5:12:96: 7e:08:28:5e:08:e2:a7:f3:fc:a0:6d:b3:37:b2:c7:15:c6:0b: a7:d1:69:76:62:bf:70:75:58:bc:97:07:d1:f4:a1:de:90:e5: 09:c8:05:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoODkwMjY4RkQyNUM3NzlFMzZGQkI4NzJGNjAxM0YzMDQx NUZGQTJERDAeFw0yNjA1MTEwODM4NTFaFw0yNjA1MTgwODM4NTFaMBgxFjAUBgNV BAMTDTZhMDE5NTljLTEzNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC64TNZZvh+1vKB9HQlSOwAn0pJZf+E67nTs7CBFPGee8QLduF43NpPgE77jX6Q 6oLxXFWHXvAwiq6IahhhpOSK07dSxtdA548lSsuBBujcvG/lxrvIEA/rWw3KIVp3 WbpFdB4hBVW8dUDBuYpV67tnV7m0lT8Kq2UJH3aDsaShT4liwbkJVuasbOI4nGGs 3GclxPl9gw6WZWN/2Mo4+SQVe8dZKIo3Rz7GGaCTTs1UUk0a+/2RssSs95bsSVHb QLQKKVepJJQO6uXAPrTwp3ponCptB5DdyuJ6rH7mrcTDzQj0X5n2hsaOi2oKMBxP TJooOG9jjnIgB9v6vHYfnt2TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtDXhfP/e AnU2x2ao4K5Z7Ub9yxswHwYDVR0jBBgwFoAUiQJo/SXHeeNvu4cvYBPzBBX/ot0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzVFQTM0NjJBRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVOdnU0Y3ZZQlB6QkJYX290 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVFKb19TWEhlZU52dTRjdllCUHpCQlhfb3QwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzVFQTM0NjJBRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVO dnU0Y3ZZQlB6QkJYX290MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+1niFB2LOg+LqWxCFDLWYBMAngtrgPEha3rQgVyfV9r9vBw5L0ibPydVhdR3b QExK0cOszsLT4h9q5rPOUy/n2XyTo/D0jNum+rC1uoUcwKo7EnvGA8CbZ4W3Ezaq 5daEB37etAISdItNJOIt41wZE8X0IhmLguEuPDT/AMDmig1QD98HlBTdOT29PYAn R6mcm0YhyfSxwR0rgVWB0ZxDu4J78DfqC2aIY6J+BiWXNaA9w+AboxxFumJGB6fT 2D6fXBbN3tOvuzm1WOSzEX5IxQvmlde1EpZ+CCheCOKn8/ygbbM3sscVxgun0Wl2 Yr9wdVi8lwfR9KHekOUJyAV6 -----END CERTIFICATE-----Generated at Wed May 13 10:55:23 2026 by rpki-client