$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: LPwxChdZwvBpzyge2eNfGg4o0GOa3QsOESiWJgJZueg= Subject key identifier: 44:DA:2C:6C:C2:57:89:76:62:8C:82:98:20:DD:D4:59:59:10:C4:D9 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 010B Signing time: Tue 12 May 2026 17:35:00 +0000 Manifest this update: Tue 12 May 2026 17:34:59 +0000 Manifest next update: Tue 19 May 2026 17:34:59 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: gXuh/vyB4BN9jBddnu8u9oO1UxYbZijbYjj63UcHqAg=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: May 12 17:34:59 2026 GMT Not After : May 19 17:34:59 2026 GMT Subject: CN=6a0364c4-9374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:90:9c:e4:31:9d:d0:2c:c2:75:c9:75:41: d4:a7:68:e5:c3:15:90:bc:90:4e:ea:ed:49:7e:2a: 70:d7:29:53:2b:99:aa:a6:29:33:5b:7d:d1:e1:f7: f9:30:95:6a:c8:81:83:e2:7e:f1:0d:2c:8c:77:ab: ed:3e:c4:2b:62:57:89:57:fb:6e:27:7b:20:9a:d7: c0:d9:04:18:6d:82:42:2d:ce:82:20:14:ec:b4:2a: 46:3f:cb:23:2d:d1:00:71:45:c2:64:23:26:8a:ba: bc:d7:69:b1:31:61:13:a6:42:b8:c0:56:3c:93:18: ee:62:8b:ea:91:5d:6b:ae:46:b4:3d:29:f6:bb:58: c4:5f:75:e4:4b:93:93:a2:7c:7f:b1:0f:98:2e:f6: 25:76:de:3e:cd:24:77:ca:fe:8f:54:45:b4:f7:cf: 04:8a:bf:65:90:84:31:3b:5a:ad:db:3f:d2:19:2b: 63:56:73:aa:37:ae:27:c1:e3:d6:ed:d3:ac:fa:3a: 85:e6:3c:d9:dc:eb:e8:67:27:f1:5c:5d:03:a6:3f: 70:b3:b8:63:54:57:c1:6f:e7:0a:75:54:b2:9f:e0: 22:1b:2c:0c:fc:b9:29:2e:a9:0a:9a:62:6d:34:db: 01:af:ac:97:04:44:6d:da:d1:6d:21:a7:6e:87:a8: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:2C:6C:C2:57:89:76:62:8C:82:98:20:DD:D4:59:59:10:C4:D9 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b3:86:5f:b3:95:c5:91:44:48:32:41:eb:ab:23:61:08:2e: bc:c4:d1:6b:c6:41:cd:52:a4:40:1a:d0:bd:45:8a:b1:f8:6a: 88:fa:01:13:3e:ba:61:9d:44:51:2d:96:ef:20:96:21:a2:24: 54:fc:20:84:3b:bd:a6:ac:d3:78:cf:4a:cc:78:f3:18:43:9c: 5d:5e:cb:f0:17:95:12:7d:70:8c:a6:d6:18:7c:4b:c8:d0:43: df:79:89:6d:8f:3c:59:c7:bb:3f:af:ef:1c:52:a7:98:53:10: ad:c7:98:01:f1:99:94:a6:7d:b1:e7:a8:1f:6f:38:33:f7:e8: e7:0a:11:c5:77:c5:d9:4b:f7:6c:06:f9:d1:a5:1b:41:55:3b: ed:56:fd:5a:e1:ca:bd:3c:6b:ab:af:81:90:c8:ca:e0:49:e8: d3:44:da:87:e6:5d:13:7a:85:f4:e4:8f:0a:3e:a3:27:c5:e8: b3:7e:1d:98:88:d7:d3:3d:d5:4e:c3:90:0c:47:8f:65:22:18: fb:52:dd:b6:20:ed:d7:12:48:a6:66:e3:c1:fa:0b:c6:93:7a: 5f:2b:8d:8d:d5:3d:f5:99:78:85:31:bd:d3:ff:3b:1f:83:b5: e5:f0:b6:1e:af:7c:66:bf:db:50:45:51:cd:bd:cd:1e:e1:b8: f9:8e:69:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYwNTEyMTczNDU5WhcNMjYwNTE5MTczNDU5WjAYMRYwFAYD VQQDEw02YTAzNjRjNC05Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoreQnOQxndAswnXJdUHUp2jlwxWQvJBO6u1Jfipw1ylTK5mqpikzW33R4ff5 MJVqyIGD4n7xDSyMd6vtPsQrYleJV/tuJ3sgmtfA2QQYbYJCLc6CIBTstCpGP8sj LdEAcUXCZCMmirq812mxMWETpkK4wFY8kxjuYovqkV1rrka0PSn2u1jEX3XkS5OT onx/sQ+YLvYldt4+zSR3yv6PVEW0988Eir9lkIQxO1qt2z/SGStjVnOqN64nwePW 7dOs+jqF5jzZ3OvoZyfxXF0Dpj9ws7hjVFfBb+cKdVSyn+AiGywM/LkpLqkKmmJt NNsBr6yXBERt2tFtIaduh6iZEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETaLGzC V4l2YoyCmCDd1FlZEMTZMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAELOGX7OVxZFESDJB66sjYQguvMTRa8ZBzVKkQBrQvUWKsfhqiPoBEz66YZ1E US2W7yCWIaIkVPwghDu9pqzTeM9KzHjzGEOcXV7L8BeVEn1wjKbWGHxLyNBD33mJ bY88Wce7P6/vHFKnmFMQrceYAfGZlKZ9seeoH284M/fo5woRxXfF2Uv3bAb50aUb QVU77Vb9WuHKvTxrq6+BkMjK4Eno00Tah+ZdE3qF9OSPCj6jJ8Xos34dmIjX0z3V TsOQDEePZSIY+1LdtiDt1xJIpmbjwfoLxpN6XyuNjdU99Zl4hTG90/87H4O15fC2 Hq98Zr/bUEVRzb3NHuG4+Y5pxw== -----END CERTIFICATE-----Generated at Wed May 13 08:01:24 2026 by rpki-client