$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json) Hash identifier: vz9H9ekV/tiCQNLWBVCXwHU/Mr0lJrUNUMSSOmKgLio= Subject key identifier: EE:49:3A:8D:25:92:BD:DA:67:AA:A2:FF:6E:1F:8B:5A:B0:12:E1:84 Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft Manifest number: 020B Signing time: Wed 13 May 2026 03:06:13 +0000 Manifest this update: Wed 13 May 2026 03:06:12 +0000 Manifest next update: Wed 20 May 2026 03:06:12 +0000 Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: lyyfEEjfYPz4URIXh3kv+JrqZ82NdNc/CFWcXMAo6VE=) 2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: EAtID2r50bcuRZVKtp+bEX8FvFjLB8tjThINGgwdwIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: May 13 03:06:12 2026 GMT Not After : May 20 03:06:12 2026 GMT Subject: CN=6a03eaa5-60ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:87:6f:b2:11:27:98:b7:85:81:55:1b:69: 85:8c:62:1d:58:b8:ab:5f:81:7e:a2:f0:0e:5e:4d: 06:82:83:28:12:ba:81:c6:c8:eb:3a:94:ca:db:f2: 05:ba:d1:8b:8e:a2:5e:7e:06:99:78:d7:a7:41:cf: 3f:b1:5f:84:f6:a7:fe:63:72:25:eb:7e:6f:71:06: 96:50:92:55:44:eb:5c:43:18:4c:c5:e5:a3:1b:1f: 8c:57:50:36:43:32:25:38:b9:58:ff:34:b6:d3:f0: 46:8b:5c:31:ec:a7:eb:dd:9b:72:41:52:c9:aa:0b: 86:9c:49:96:3b:56:94:5d:1a:15:ed:ad:70:80:7c: e0:56:7d:54:6d:6e:fa:63:7f:01:e1:db:dc:5b:d5: 98:3a:50:c6:da:6f:97:72:e1:04:8f:ea:85:be:08: 1b:40:ee:46:7a:ec:11:de:2c:b8:3c:fc:4f:57:49: af:a0:1b:66:25:92:8c:3e:44:6e:8d:75:a4:87:ad: 36:a3:49:34:47:f7:71:fe:6d:80:b1:29:b1:06:4b: d4:f9:18:c8:58:bb:6e:31:32:20:6c:6c:0a:f1:59: 3f:8f:9b:a2:bd:d4:d6:79:67:76:0e:ae:fd:c2:c3: fe:ac:f9:1f:e2:74:af:4a:ac:cf:7b:bd:96:dd:34: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:3A:8D:25:92:BD:DA:67:AA:A2:FF:6E:1F:8B:5A:B0:12:E1:84 X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b9:d4:ed:71:6e:09:f8:8f:e1:34:ab:ed:10:48:13:7d:eb: 63:14:97:ff:1a:ff:ec:5e:cb:bb:e2:70:98:9d:bc:73:fa:fd: db:15:d1:3c:8c:59:8e:70:64:7b:38:c3:29:fa:1b:80:47:0b: 9f:31:c2:eb:56:1c:6b:22:49:65:54:d5:20:64:b7:9c:d3:a8: fb:1c:cf:bb:d4:17:ad:63:cc:9f:e8:70:0a:0e:fc:56:f0:aa: 98:be:8a:cf:1b:82:37:d6:3b:27:9d:ca:d4:64:ef:e8:40:8a: 17:12:fb:fd:c5:61:85:1d:c4:6f:96:b1:47:43:d4:b5:5d:d2: 0f:ef:8b:c2:a5:df:1d:c6:b0:8f:b0:af:19:91:ac:e7:99:93: 42:e7:81:e5:e5:f2:22:2b:c5:f2:b0:b4:7b:84:69:91:60:89: 39:31:47:fc:46:c6:79:ef:7a:f0:6a:e2:a7:cf:2c:ff:68:9f: e2:d1:6c:09:73:ca:d6:a7:63:34:41:de:06:29:7a:e6:98:08: 45:9a:80:64:07:0a:88:08:9f:3c:c9:a5:e8:55:0a:2a:04:40: 75:fd:18:fb:98:d0:85:5b:80:d9:59:0b:d4:d6:2c:cf:32:86: 80:36:f2:63:09:24:a4:22:e2:5f:30:a0:ec:e4:2d:e0:47:fb: ec:c0:f2:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjYwNTEzMDMwNjEyWhcNMjYwNTIwMDMwNjEyWjAYMRYwFAYD VQQDEw02YTAzZWFhNS02MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KmHb7IRJ5i3hYFVG2mFjGIdWLirX4F+ovAOXk0GgoMoErqBxsjrOpTK2/IF utGLjqJefgaZeNenQc8/sV+E9qf+Y3Il635vcQaWUJJVROtcQxhMxeWjGx+MV1A2 QzIlOLlY/zS20/BGi1wx7Kfr3ZtyQVLJqguGnEmWO1aUXRoV7a1wgHzgVn1UbW76 Y38B4dvcW9WYOlDG2m+XcuEEj+qFvggbQO5GeuwR3iy4PPxPV0mvoBtmJZKMPkRu jXWkh602o0k0R/dx/m2AsSmxBkvU+RjIWLtuMTIgbGwK8Vk/j5uivdTWeWd2Dq79 wsP+rPkf4nSvSqzPe72W3TSoCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5JOo0l kr3aZ6qi/24fi1qwEuGEMB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U2Mi8yMUQ1Q0NERTM0MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhX STcxT1E1aHVpQTlxc1RoSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMLnU7XFuCfiP4TSr7RBIE33rYxSX/xr/7F7Lu+JwmJ28c/r92xXRPIxZjnBk ezjDKfobgEcLnzHC61YcayJJZVTVIGS3nNOo+xzPu9QXrWPMn+hwCg78VvCqmL6K zxuCN9Y7J53K1GTv6ECKFxL7/cVhhR3Eb5axR0PUtV3SD++LwqXfHcawj7CvGZGs 55mTQueB5eXyIivF8rC0e4RpkWCJOTFH/EbGee968Grip88s/2if4tFsCXPK1qdj NEHeBil65pgIRZqAZAcKiAifPMml6FUKKgRAdf0Y+5jQhVuA2VkL1NYszzKGgDby YwkkpCLiXzCg7OQt4Ef77MDyhA== -----END CERTIFICATE-----Generated at Wed May 13 05:41:54 2026 by rpki-client