$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: ngwAprSL4r3FE21qEtPrQyZirxtuHqMgpVBwNwwDp5I= Subject key identifier: BC:00:4F:36:03:0A:9A:5B:C7:6D:57:51:5B:84:73:BC:01:98:28:94 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 1982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 1977 Signing time: Fri 24 Jul 2026 16:32:55 +0000 Manifest this update: Fri 24 Jul 2026 16:32:55 +0000 Manifest next update: Fri 31 Jul 2026 16:32:55 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: 0y4uvzOiTcjm2L0A/MrWHTi1zR6Rhmuo+DXc7aK30Pc=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: jJwP90lV+q6WXhwVY0B4Efvs4u3oObXh+KWbb3d4U00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 16:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6530 (0x1982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Jul 24 16:32:55 2026 GMT Not After : Jul 31 16:32:55 2026 GMT Subject: CN=6a6393b7-f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:2a:ab:01:08:7a:e5:46:74:b0:0e:52:e6: ba:a9:0d:0e:7f:58:1b:96:3d:b3:b6:15:ce:6f:a0: 1a:d2:86:0f:72:a8:9d:1d:64:49:61:ae:e9:ea:0b: 85:4f:aa:46:1b:26:5d:5c:84:d1:90:99:b3:2a:8d: 37:77:70:75:3b:6f:2c:a3:f4:ca:6c:1b:1c:38:e7: 01:bc:df:07:5f:b1:c5:bf:4b:86:7b:48:28:00:12: 27:b7:9c:29:b1:83:42:b7:2c:0f:bd:20:02:0e:4e: 1c:e0:f5:8c:23:cd:9c:c6:66:2e:1e:e3:b0:0e:79: 89:da:f4:cd:96:c1:16:d8:a4:20:65:e2:7b:f8:55: 00:49:d5:59:2b:98:6c:a3:bb:01:3b:c7:30:b4:f9: 9f:39:61:b3:71:e0:24:1c:af:30:e6:9d:91:ad:1f: d6:16:42:44:4a:2a:58:e5:c0:9f:9c:dc:61:ec:e1: 41:c2:22:3a:8b:13:b7:d3:db:bb:38:9d:f7:17:7e: f9:4c:7a:59:ad:13:48:f1:62:19:8d:64:e1:d8:ce: ac:77:e8:be:67:03:31:21:9d:fd:00:6d:3e:13:21: 61:4b:ab:22:c0:99:66:cc:27:dc:8f:e7:b7:4a:26: 73:f6:dd:d5:e8:62:5b:3f:05:bf:bb:64:5e:3e:5e: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:4F:36:03:0A:9A:5B:C7:6D:57:51:5B:84:73:BC:01:98:28:94 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7c:04:4b:97:a7:de:c7:58:d5:02:00:eb:63:52:36:f1:af: 6d:74:52:27:37:76:0f:d6:bd:1e:dd:9e:5b:64:bc:c3:26:66: 88:0e:8c:24:f3:21:95:6c:79:66:a2:11:17:c1:dc:8f:3f:6f: 7d:d8:87:d6:14:fd:97:f1:9e:13:bb:d1:a9:79:ab:84:cf:f4: 80:a3:23:ae:f3:39:d9:d8:2e:33:22:65:04:ff:7b:eb:11:14: 12:b5:37:e2:3c:6b:ee:d1:32:c7:33:a2:d1:62:bd:9c:33:ee: ab:a5:82:21:5c:5e:27:db:2a:b1:49:8e:c7:94:5e:0d:f0:84: 06:49:97:04:42:9b:f9:8d:ce:0a:23:45:e5:da:9d:ee:e5:81: 70:8c:3e:11:df:78:e0:da:3a:26:1c:f7:2e:2f:fb:13:e3:8c: e2:48:f0:10:e8:6b:98:66:29:f3:8a:a8:42:7b:76:89:a0:d6: 8d:cb:10:b6:1f:8c:0b:29:4e:c3:42:6c:a6:c0:f9:51:95:ea: 25:c7:24:98:23:00:22:44:52:62:0e:37:e6:54:b3:9d:01:8f: bf:03:58:c1:79:3b:51:c8:78:26:0a:d0:10:fc:d5:13:e5:7f: f3:79:df:1c:d6:2c:89:3b:2d:de:7a:9f:26:44:82:5a:2b:5c: 4a:1f:b9:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjYwNzI0MTYzMjU1WhcNMjYwNzMxMTYzMjU1WjAYMRYwFAYD VQQDEw02YTYzOTNiNy1mMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8YqqwEIeuVGdLAOUua6qQ0Of1gblj2zthXOb6Aa0oYPcqidHWRJYa7p6guF T6pGGyZdXITRkJmzKo03d3B1O28so/TKbBscOOcBvN8HX7HFv0uGe0goABInt5wp sYNCtywPvSACDk4c4PWMI82cxmYuHuOwDnmJ2vTNlsEW2KQgZeJ7+FUASdVZK5hs o7sBO8cwtPmfOWGzceAkHK8w5p2RrR/WFkJESipY5cCfnNxh7OFBwiI6ixO309u7 OJ33F375THpZrRNI8WIZjWTh2M6sd+i+ZwMxIZ39AG0+EyFhS6siwJlmzCfcj+e3 SiZz9t3V6GJbPwW/u2RePl7HgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwATzYD Cppbx21XUVuEc7wBmCiUMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOnwES5en3sdY1QIA62NSNvGvbXRSJzd2D9a9Ht2eW2S8wyZmiA6MJPMhlWx5 ZqIRF8Hcjz9vfdiH1hT9l/GeE7vRqXmrhM/0gKMjrvM52dguMyJlBP976xEUErU3 4jxr7tEyxzOi0WK9nDPuq6WCIVxeJ9sqsUmOx5ReDfCEBkmXBEKb+Y3OCiNF5dqd 7uWBcIw+Ed944No6Jhz3Li/7E+OM4kjwEOhrmGYp84qoQnt2iaDWjcsQth+MCylO w0JspsD5UZXqJcckmCMAIkRSYg435lSznQGPvwNYwXk7Uch4JgrQEPzVE+V/83nf HNYsiTst3nqfJkSCWitcSh+5xw== -----END CERTIFICATE-----Generated at Sat Jul 25 00:27:34 2026 by rpki-client