$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: scu1utygy5vvTOy/gQc3K2Yp8NxhO6+yk4BymAaUyNQ= Subject key identifier: B3:18:E9:56:E3:3C:18:04:08:A6:B5:9D:C3:62:AC:A3:F3:F2:6F:4E Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 138E Signing time: Wed 22 Jul 2026 17:04:33 +0000 Manifest this update: Wed 22 Jul 2026 17:04:32 +0000 Manifest next update: Wed 29 Jul 2026 17:04:32 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: 6QAKWbfvCVAGgeKSrOxVe1vTIUjaiW6vqC/RVYCFfB0=) 2: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: k+p0xtu7l+Ym0EwSnutl9VlQ16P8ym/648o14VPC7t8=) 3: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: Y5k6Nh1K8NNS0hPh5WTEjL7DqnEuLThuhCaWRqICeaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5031 (0x13a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Jul 22 17:04:32 2026 GMT Not After : Jul 29 17:04:32 2026 GMT Subject: CN=6a60f821-67ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:9c:b5:e6:62:d6:ac:a0:90:e6:53:a5:42: 57:8c:a6:9a:81:c4:3f:59:1d:ee:f8:9a:a5:f7:77: af:08:15:c9:6c:65:af:43:2f:dd:ce:54:a5:5c:64: f4:bb:58:8f:e3:67:a2:ae:53:7d:65:0d:03:e7:2d: 57:46:90:3f:b7:6f:44:fb:6d:b9:b6:70:fb:dc:0f: b2:6a:86:49:cc:5b:30:c6:2d:6f:f4:d0:eb:22:89: 70:94:77:62:8b:70:42:5f:46:43:a8:ed:d3:31:84: ac:95:3c:ec:a9:38:52:2f:77:d3:8e:8d:8f:28:46: 36:75:25:54:1e:3f:10:27:68:96:b5:f9:80:6d:49: b5:4b:e0:45:ef:3b:0a:da:e0:3d:18:89:ab:b8:b7: 71:bf:b3:45:f7:89:b8:79:e3:27:70:5f:72:39:80: 0d:17:52:11:93:da:bf:34:8b:50:bd:2b:e9:b9:44: ff:4e:64:0e:a5:34:98:70:81:cc:79:ac:91:70:91: 32:4b:27:97:60:6d:d7:16:e4:8a:08:2a:cf:82:12: 02:82:89:7c:bd:09:c9:c9:b0:92:81:33:a1:75:91: 02:0f:11:a1:35:c1:fe:00:2d:d9:11:b9:f4:2a:fa: 5f:99:19:6e:a1:10:94:31:1f:6d:f7:5d:6a:85:b2: 8e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:18:E9:56:E3:3C:18:04:08:A6:B5:9D:C3:62:AC:A3:F3:F2:6F:4E X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:31:09:9b:f1:37:73:ba:e1:e5:9c:26:b3:d7:a2:cf:d1:17: b6:a3:b6:08:37:5c:5d:3b:7d:19:97:b2:ee:6d:d7:b1:42:4c: 7b:e1:93:81:84:a1:e7:dd:dd:95:fd:98:51:44:82:c8:a2:89: 7e:f2:61:d5:16:61:40:cb:e1:62:01:42:97:95:99:23:ab:79: 65:fa:66:f8:55:59:14:ad:ab:c5:40:b6:8f:32:b4:8c:da:82: 77:0b:e6:36:72:6f:f7:82:d4:5c:8c:69:58:f2:f0:16:22:44: fe:5a:98:43:e3:a1:85:fe:d6:4d:aa:7a:99:dc:bd:f4:ec:75: 88:9e:7f:99:ac:f3:36:0a:c0:3b:f2:f0:96:c8:8c:5a:3b:87: 41:ef:bb:77:d2:9b:5c:5e:5d:3c:48:1d:64:41:5e:3a:89:d9: 9d:df:73:83:46:4f:80:e2:cd:77:99:e0:28:93:b0:41:29:f4: af:4b:7b:65:af:50:4a:e1:4b:c7:72:15:52:6a:09:f9:53:40: 94:d8:0f:5c:c8:81:7e:27:0c:a3:f1:ae:74:1e:29:aa:9d:b7: 57:fa:18:36:70:96:92:02:3d:58:ee:b2:2d:ca:cb:12:d6:fe: b5:70:f9:74:68:8e:48:d9:e3:46:3f:31:36:89:b0:ed:ef:df: f4:35:17:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYwNzIyMTcwNDMyWhcNMjYwNzI5MTcwNDMyWjAYMRYwFAYD VQQDEw02YTYwZjgyMS02N2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoOcteZi1qygkOZTpUJXjKaagcQ/WR3u+Jql93evCBXJbGWvQy/dzlSlXGT0 u1iP42eirlN9ZQ0D5y1XRpA/t29E+225tnD73A+yaoZJzFswxi1v9NDrIolwlHdi i3BCX0ZDqO3TMYSslTzsqThSL3fTjo2PKEY2dSVUHj8QJ2iWtfmAbUm1S+BF7zsK 2uA9GImruLdxv7NF94m4eeMncF9yOYANF1IRk9q/NItQvSvpuUT/TmQOpTSYcIHM eayRcJEySyeXYG3XFuSKCCrPghICgol8vQnJybCSgTOhdZECDxGhNcH+AC3ZEbn0 KvpfmRluoRCUMR9t911qhbKOpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMY6Vbj PBgECKa1ncNirKPz8m9OMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUjEJm/E3c7rh5Zwms9eiz9EXtqO2CDdcXTt9GZey7m3XsUJMe+GTgYSh593d lf2YUUSCyKKJfvJh1RZhQMvhYgFCl5WZI6t5Zfpm+FVZFK2rxUC2jzK0jNqCdwvm NnJv94LUXIxpWPLwFiJE/lqYQ+Ohhf7WTap6mdy99Ox1iJ5/mazzNgrAO/LwlsiM WjuHQe+7d9KbXF5dPEgdZEFeOonZnd9zg0ZPgOLNd5ngKJOwQSn0r0t7Za9QSuFL x3IVUmoJ+VNAlNgPXMiBficMo/GudB4pqp23V/oYNnCWkgI9WO6yLcrLEtb+tXD5 dGiOSNnjRj8xNomw7e/f9DUXkA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:52 2026 by rpki-client