$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft File: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft (raw, json) Hash identifier: E36kEH3hypFpaqcj1IPtKsFAfJxqq6wQbC8aVcj2nBk= Subject key identifier: CE:2D:79:1C:40:B5:CD:73:8E:5E:E7:19:F6:CB:C2:9F:D8:7F:65:CA Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E Certificate issuer: /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft Manifest number: 2CC5 Signing time: Tue 12 May 2026 15:55:16 +0000 Manifest this update: Tue 12 May 2026 15:55:16 +0000 Manifest next update: Tue 19 May 2026 15:55:16 +0000 Files and hashes: 1: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl (hash: 9ixVOOAtMeshX4q6bNF4aaaI3TPw+1pqqzBzdouhXAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=8AA8786526852346839372631DFB09984BC3005E Validity Not Before: May 12 15:55:16 2026 GMT Not After : May 19 15:55:16 2026 GMT Subject: CN=6a034d64-2552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:6d:47:64:76:8e:f9:5f:17:df:7f:e4:2f: f5:1f:dc:ed:d7:6c:e1:c5:ae:73:2f:08:7d:88:81: e6:e4:1b:00:20:0a:4d:a4:37:30:d1:c9:c3:bf:6b: 44:29:62:71:0a:18:96:a5:81:88:91:71:7c:6b:73: 3b:00:45:c7:59:17:05:fe:89:c0:18:a3:c3:0b:e3: 8a:ff:51:21:55:1e:52:f4:30:6c:2c:79:1b:01:5e: c7:e6:89:92:d2:29:1c:c4:d9:26:25:5d:e7:46:82: 59:72:6d:e9:56:e2:c4:10:65:f5:3b:4d:29:0b:10: 5f:2e:aa:f8:79:30:22:1b:a2:30:89:f7:a1:00:ae: 05:4e:83:a5:86:2a:0e:11:2b:b9:46:20:74:11:d6: 64:4f:61:f8:49:4b:a5:2b:79:1e:26:cb:84:46:0e: 38:4a:99:29:6e:c8:58:d9:86:f1:c6:96:e5:22:37: c7:7e:0a:04:4c:5e:fb:05:01:9d:e1:12:2e:42:e1: ee:70:82:64:ac:82:0f:e9:07:40:30:6d:3a:c2:28: 10:f6:69:30:e7:c7:b8:79:e1:40:c1:01:76:c1:0b: 65:7d:4e:00:27:3b:92:5d:16:87:f8:40:6f:bd:08: da:70:f8:3e:a5:6d:10:b9:9c:b6:c1:43:97:97:63: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2D:79:1C:40:B5:CD:73:8E:5E:E7:19:F6:CB:C2:9F:D8:7F:65:CA X509v3 Authority Key Identifier: keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:48:60:54:09:c7:bc:d0:e1:1d:54:d2:5d:55:f9:62:b0:83: a9:49:74:a1:b7:c7:78:48:fe:10:c0:37:08:1c:be:12:00:bc: e9:a8:59:66:c7:84:c3:3b:1c:8e:61:93:af:30:5f:2d:fe:95: 71:f2:63:2e:3d:45:20:fa:bd:85:80:f3:7d:58:f6:26:af:66: ba:c5:35:e5:d0:86:fb:3f:a4:10:85:33:4c:25:74:cc:1e:25: 4d:84:33:3a:78:0f:cb:6f:11:11:b6:0a:65:15:33:1a:6e:90: 4f:58:80:83:4e:42:64:42:bb:71:a4:34:52:7f:7d:e2:bd:27: 5b:62:a4:41:dd:19:4e:88:3f:22:65:b5:2f:bf:d0:96:34:a8: 67:d8:20:08:35:e3:bb:03:42:bf:64:b8:c1:1d:7e:6f:ea:34: 1d:82:c2:4d:64:01:a8:7d:db:4c:97:53:f4:62:62:52:bb:c9: 7b:8c:e8:90:3b:eb:82:fa:d6:dd:5d:fa:88:c2:0c:c8:b0:ab: 3e:f2:94:1a:6d:90:c4:b5:c4:fc:8d:3b:b1:5e:1e:73:2a:a6: 99:93:43:fe:b9:1c:0a:95:30:b0:70:12:c4:12:f3:b1:f3:57: 32:60:cf:ed:f6:cc:b6:42:95:18:cd:ab:50:ea:53:25:65:6e: d2:25:79:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDhBQTg3ODY1MjY4NTIzNDY4MzkzNzI2MzFERkIwOTk4 NEJDMzAwNUUwHhcNMjYwNTEyMTU1NTE2WhcNMjYwNTE5MTU1NTE2WjAYMRYwFAYD VQQDEw02YTAzNGQ2NC0yNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUBtR2R2jvlfF99/5C/1H9zt12zhxa5zLwh9iIHm5BsAIApNpDcw0cnDv2tE KWJxChiWpYGIkXF8a3M7AEXHWRcF/onAGKPDC+OK/1EhVR5S9DBsLHkbAV7H5omS 0ikcxNkmJV3nRoJZcm3pVuLEEGX1O00pCxBfLqr4eTAiG6IwifehAK4FToOlhioO ESu5RiB0EdZkT2H4SUulK3keJsuERg44SpkpbshY2YbxxpblIjfHfgoETF77BQGd 4RIuQuHucIJkrIIP6QdAMG06wigQ9mkw58e4eeFAwQF2wQtlfU4AJzuSXRaH+EBv vQjacPg+pW0QuZy2wUOXl2OTSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4teRxA tc1zjl7nGfbLwp/Yf2XKMB8GA1UdIwQYMBaAFIqoeGUmhSNGg5NyYx37CZhLwwBe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9pcWg0WlNhRkkwYURrM0pqSGZzSm1FdkRB RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lxaDRaU2FGSTBhRGszSmpIZnNKbUV2REFGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9pcWg0WlNhRkkw YURrM0pqSGZzSm1FdkRBRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtkhgVAnHvNDhHVTSXVX5YrCDqUl0obfHeEj+EMA3CBy+EgC86ahZZseEwzsc jmGTrzBfLf6VcfJjLj1FIPq9hYDzfVj2Jq9musU15dCG+z+kEIUzTCV0zB4lTYQz OngPy28REbYKZRUzGm6QT1iAg05CZEK7caQ0Un994r0nW2KkQd0ZTog/ImW1L7/Q ljSoZ9ggCDXjuwNCv2S4wR1+b+o0HYLCTWQBqH3bTJdT9GJiUrvJe4zokDvrgvrW 3V36iMIMyLCrPvKUGm2QxLXE/I07sV4ecyqmmZND/rkcCpUwsHASxBLzsfNXMmDP 7fbMtkKVGM2rUOpTJWVu0iV5wg== -----END CERTIFICATE-----Generated at Wed May 13 10:27:22 2026 by rpki-client