$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: JhDUTXSNPRt4SaS0UKQUreF4BU6XCUpVRjUWRaP0DFg= Subject key identifier: 4B:5C:C8:C4:7D:2E:97:82:D0:81:B8:E4:EB:39:A7:9C:36:60:55:5D Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 1981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 1976 Signing time: Wed 22 Jul 2026 16:30:23 +0000 Manifest this update: Wed 22 Jul 2026 16:30:22 +0000 Manifest next update: Wed 29 Jul 2026 16:30:22 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: j52HuW+D3rEWcKbRfAkd9NStplirGEaKS130XI2eBQM=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: jJwP90lV+q6WXhwVY0B4Efvs4u3oObXh+KWbb3d4U00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6529 (0x1981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Jul 22 16:30:22 2026 GMT Not After : Jul 29 16:30:22 2026 GMT Subject: CN=6a60f01f-3424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:41:a2:33:b7:cc:11:2c:aa:cf:89:e4:1e:7e: 15:43:d4:9f:d1:96:70:ce:eb:f2:76:3d:38:13:da: 7b:57:9f:b9:76:a5:ab:d6:9c:2f:23:2d:a3:01:42: 12:db:b1:d5:f2:6f:49:9e:45:33:59:39:98:b1:27: cd:b8:9a:62:87:72:1f:c8:84:df:89:42:34:8e:cd: 6a:65:c0:93:d8:ad:33:91:d2:95:d5:39:e0:b0:02: cd:14:02:cb:71:cc:a1:7a:4b:b2:8b:b7:ac:50:7a: 24:ef:25:ab:6c:cc:ec:3c:c9:a9:59:9c:24:81:92: 3c:23:d3:8a:d5:75:94:be:6d:ff:ab:f3:e4:a7:ee: a7:4a:05:c6:bc:4f:b1:46:80:68:44:ed:bc:57:d2: ad:dc:14:90:1c:9a:9c:f6:12:70:24:e1:0d:02:1d: c0:b2:f8:c7:be:56:59:2b:80:85:e0:cb:b7:04:fd: 9f:97:71:7e:01:ad:c2:10:ca:59:f6:f8:94:10:82: f2:f3:6b:a0:34:a2:5e:c5:8a:45:0b:07:0c:e8:97: bd:66:f1:33:ac:f9:be:cc:10:0b:33:ef:5f:ce:f7: 98:b4:c0:f0:96:0d:53:25:25:2a:b4:96:c0:02:06: 50:fa:a0:88:b7:af:b5:28:53:53:68:69:38:e8:00: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:C8:C4:7D:2E:97:82:D0:81:B8:E4:EB:39:A7:9C:36:60:55:5D X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6a:2e:d1:f0:d7:40:e9:2a:93:57:63:09:ac:e7:3f:c8:43: 97:09:62:d5:24:4a:1b:1b:6a:5e:0d:05:d4:f6:19:57:d0:3a: ca:d3:ab:13:23:95:0e:43:8d:ad:3a:1a:aa:09:9b:07:5f:26: 02:6c:80:e1:a7:32:5f:a9:c1:ca:e2:1d:69:55:54:71:ff:bd: 45:78:cb:13:5a:00:9b:13:c9:b8:be:18:07:fa:c9:eb:58:c6: 60:0b:97:0e:14:80:8f:bf:7b:94:d6:67:96:af:a6:71:ce:4c: c6:77:06:83:45:2d:2f:04:ce:a8:94:f9:b6:3e:40:c4:4e:13: 24:eb:53:39:19:2f:ea:2c:d3:cc:49:3b:27:1e:2e:c8:7b:cf: 1b:c6:f0:44:4a:42:8e:bd:c9:fa:9d:77:6a:81:3d:3d:af:d8: 9c:66:10:fc:a9:cd:76:91:b1:05:a2:d3:47:5b:1f:d8:8b:61: 5a:05:52:7b:0a:07:33:55:24:ad:33:d9:aa:b0:30:22:2f:14: e3:01:07:2a:d1:85:6c:fc:1b:ab:4e:b4:25:be:82:a9:35:49: b8:70:de:37:3c:19:2e:bf:e9:b1:a7:de:27:c9:99:37:d0:e8: 68:32:8d:26:49:67:6c:b0:1d:2a:c9:ac:08:bb:82:a6:46:ca: 4d:63:95:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjYwNzIyMTYzMDIyWhcNMjYwNzI5MTYzMDIyWjAYMRYwFAYD VQQDEw02YTYwZjAxZi0zNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgkGiM7fMESyqz4nkHn4VQ9Sf0ZZwzuvydj04E9p7V5+5dqWr1pwvIy2jAUIS 27HV8m9JnkUzWTmYsSfNuJpih3IfyITfiUI0js1qZcCT2K0zkdKV1TngsALNFALL ccyhekuyi7esUHok7yWrbMzsPMmpWZwkgZI8I9OK1XWUvm3/q/Pkp+6nSgXGvE+x RoBoRO28V9Kt3BSQHJqc9hJwJOENAh3AsvjHvlZZK4CF4Mu3BP2fl3F+Aa3CEMpZ 9viUEILy82ugNKJexYpFCwcM6Je9ZvEzrPm+zBALM+9fzveYtMDwlg1TJSUqtJbA AgZQ+qCIt6+1KFNTaGk46AC3hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtcyMR9 LpeC0IG45Os5p5w2YFVdMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ2ou0fDXQOkqk1djCaznP8hDlwli1SRKGxtqXg0F1PYZV9A6ytOrEyOVDkON rToaqgmbB18mAmyA4acyX6nByuIdaVVUcf+9RXjLE1oAmxPJuL4YB/rJ61jGYAuX DhSAj797lNZnlq+mcc5MxncGg0UtLwTOqJT5tj5AxE4TJOtTORkv6izTzEk7Jx4u yHvPG8bwREpCjr3J+p13aoE9Pa/YnGYQ/KnNdpGxBaLTR1sf2IthWgVSewoHM1Uk rTPZqrAwIi8U4wEHKtGFbPwbq060Jb6CqTVJuHDeNzwZLr/psafeJ8mZN9DoaDKN JklnbLAdKsmsCLuCpkbKTWOV8g== -----END CERTIFICATE-----Generated at Fri Jul 24 14:47:29 2026 by rpki-client