$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: QvGlCjbSyYMsMDw00YMMPLcx9CDi8eTnlehyI/4QQ5o= Subject key identifier: AF:69:3C:A7:00:F3:29:C4:1F:10:3B:19:3E:E9:5E:B1:7A:14:1E:CB Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 89 Signing time: Mon 11 May 2026 07:45:33 +0000 Manifest this update: Mon 11 May 2026 07:45:32 +0000 Manifest next update: Mon 18 May 2026 07:45:32 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: R9WTDX82/gHQUkFTdGhBttY10goL8tZEREtrmNz61yw=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: May 11 07:45:32 2026 GMT Not After : May 18 07:45:32 2026 GMT Subject: CN=6a01891d-b2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:17:0e:52:e7:9b:34:4c:4f:c5:98:5b:3c: a2:ae:af:c6:68:39:97:43:4c:76:fe:0c:e1:5c:69: 32:b6:04:be:a9:22:40:a5:c2:8b:99:66:26:50:a4: 04:11:06:7a:41:35:c1:2b:e9:b7:2c:ca:c4:12:d8: 47:8c:10:ce:cd:43:f6:71:b6:f5:e0:4c:c7:06:bf: b4:6b:ae:2d:c3:3d:85:4a:06:31:9d:99:6b:b6:5a: cb:02:58:87:8c:a7:91:6a:56:da:19:68:a4:5e:e9: a5:4e:21:a6:37:64:2c:05:80:bd:32:f9:4b:8d:ee: 34:8c:ab:97:5e:2c:9f:dc:5b:ab:ff:96:f9:ae:56: 9c:de:98:63:69:64:8f:5a:87:de:4c:ec:25:e2:1e: 3a:f4:83:5e:b9:bc:2e:ef:85:e9:f8:fb:e7:12:0b: 48:f6:9e:5c:ee:2c:fb:34:b1:e5:04:bb:13:8e:73: 95:a2:98:0c:00:f0:7a:e7:9f:82:9f:5b:f7:34:02: 29:ec:b9:61:73:9d:5f:46:46:1a:c5:66:b0:c8:05: 57:be:fa:83:e2:3a:ee:82:c5:e0:e1:4d:93:0e:14: 33:8d:9b:79:fc:bf:24:8b:37:68:c0:42:b1:1d:da: 00:8a:1d:a6:38:0e:5f:90:eb:04:24:3d:1b:cf:21: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:69:3C:A7:00:F3:29:C4:1F:10:3B:19:3E:E9:5E:B1:7A:14:1E:CB X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d7:b4:6a:58:95:60:78:15:09:0b:06:f1:97:90:7c:a1:86: b8:ea:cc:bf:ee:ca:00:25:ef:56:e8:24:ff:c8:08:ef:2a:55: 77:2c:96:f4:da:57:c0:38:ae:c0:69:1e:e5:b8:d0:75:d9:aa: 2f:3f:6a:aa:f6:c8:d2:6c:70:72:d6:dc:c3:79:3b:f6:de:c8: cb:de:03:b1:39:bf:ee:0f:3b:84:60:5a:b4:73:cb:8b:db:bf: 70:8c:7c:8d:65:0c:32:1b:e3:ab:d2:40:1d:d8:a9:3c:ec:f0: 65:fd:11:be:d9:9d:63:7d:a5:f7:9d:a9:a9:b1:48:09:ec:d0: 16:7d:19:8c:98:24:13:8b:d8:64:ef:b8:ed:d6:8b:4c:ab:21: 84:c3:23:43:02:d9:3c:61:ea:3a:7b:1b:25:63:af:70:21:2b: c2:8a:1b:b7:bf:ee:5b:37:8c:07:36:1c:f4:3e:2a:89:0a:c1: 2a:0f:22:a4:f9:d2:1f:74:5b:bb:01:ae:6e:f7:43:1f:b6:73: e3:05:27:fc:71:7d:3d:fd:cb:ac:d0:f7:a2:de:70:e2:6a:13: 12:ee:f8:e0:7a:00:af:a1:95:f8:b3:b8:fe:9b:68:9e:d0:c3: df:46:c4:e7:db:22:2b:1a:60:79:73:6f:98:64:93:48:f4:90: da:69:7a:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxODUxMTAvBgNVBAUTKDg5Nzg0RDZEOTM4QjA1Q0MzQjdCNjY2RTVFN0FFRTky MjNERTRENzAwHhcNMjYwNTExMDc0NTMyWhcNMjYwNTE4MDc0NTMyWjAYMRYwFAYD VQQDEw02YTAxODkxZC1iMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlagXDlLnmzRMT8WYWzyirq/GaDmXQ0x2/gzhXGkytgS+qSJApcKLmWYmUKQE EQZ6QTXBK+m3LMrEEthHjBDOzUP2cbb14EzHBr+0a64twz2FSgYxnZlrtlrLAliH jKeRalbaGWikXumlTiGmN2QsBYC9MvlLje40jKuXXiyf3Fur/5b5rlac3phjaWSP WofeTOwl4h469INeubwu74Xp+PvnEgtI9p5c7iz7NLHlBLsTjnOVopgMAPB655+C n1v3NAIp7Llhc51fRkYaxWawyAVXvvqD4jrugsXg4U2TDhQzjZt5/L8kizdowEKx HdoAih2mOA5fkOsEJD0bzyF5YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9pPKcA 8ynEHxA7GT7pXrF6FB7LMB8GA1UdIwQYMBaAFIl4TW2TiwXMO3tmbl567pIj3k1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODE4NS84NTAxMTUzMjg0 QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9pWGhOYlpPTEJjdzdlMlp1WG5ydWtpUGVU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE4NS84NTAxMTUzMjg0QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9pWGhOYlpPTEJj dzdlMlp1WG5ydWtpUGVUWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHNe0aliVYHgVCQsG8ZeQfKGGuOrMv+7KACXvVugk/8gI7ypVdyyW9NpXwDiu wGke5bjQddmqLz9qqvbI0mxwctbcw3k79t7Iy94DsTm/7g87hGBatHPLi9u/cIx8 jWUMMhvjq9JAHdipPOzwZf0RvtmdY32l952pqbFICezQFn0ZjJgkE4vYZO+47daL TKshhMMjQwLZPGHqOnsbJWOvcCErwoobt7/uWzeMBzYc9D4qiQrBKg8ipPnSH3Rb uwGubvdDH7Zz4wUn/HF9Pf3LrND3ot5w4moTEu744HoAr6GV+LO4/ptontDD30bE 59siKxpgeXNvmGSTSPSQ2ml65A== -----END CERTIFICATE-----Generated at Wed May 13 07:25:39 2026 by rpki-client