$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json) Hash identifier: qm5tRNwCy3EiT6viihTFRPbhCn5tfObxu/rUe5lRbTM= Subject key identifier: 96:6B:BD:8B:60:4B:55:74:D0:38:EA:B9:C6:34:99:81:1D:7A:74:47 Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft Manifest number: 05E3 Signing time: Wed 22 Jul 2026 23:47:57 +0000 Manifest this update: Wed 22 Jul 2026 23:47:56 +0000 Manifest next update: Wed 29 Jul 2026 23:47:56 +0000 Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: 9RiDEkv6bwVyEsOUnFjwG9nU7gycGqXHijB9LR1Fm+M=) 2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: wN2IZ9Tp9dRoIakSTTLA1uLNoPM2YPK4OBU3DnTtTPk=) 3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: xIAIlJ7v8ECTIXnt1C8XuSoM0aGHLELefgFDc8efrDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: Jul 22 23:47:56 2026 GMT Not After : Jul 29 23:47:56 2026 GMT Subject: CN=6a6156ac-760c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:78:8b:0b:ef:bd:86:2e:f0:c6:18:a1:95: 33:a2:a0:5d:0e:ff:9b:63:4e:af:9a:1a:d4:28:a4: 30:5e:9e:cb:a4:a2:29:21:ba:cb:a3:aa:96:cb:91: 69:2b:53:b8:b2:6a:b9:68:2c:1b:b7:87:9e:71:cb: 8c:d0:d6:4f:4c:38:2e:60:d1:4f:2a:50:d9:83:01: 80:f5:ca:38:08:70:aa:ec:a2:16:d5:f6:da:62:a1: 19:eb:02:8f:ba:1f:84:06:cc:ba:64:17:a6:41:d9: 2d:3d:3f:10:10:10:bd:24:a4:7c:1c:7f:ee:45:52: dd:31:8a:60:1c:e4:0f:7d:41:05:22:2b:85:aa:3b: 17:04:59:03:11:c5:d1:a7:c3:54:53:96:79:5e:61: 7e:1b:b3:e2:d4:41:b5:71:bd:3b:7a:0f:29:5c:ab: 65:72:c1:7c:1b:f8:8a:99:ec:ea:86:7a:37:75:c5: 34:78:94:1c:a7:ef:4a:17:9d:55:a0:a8:96:b9:11: 9b:54:a0:39:18:78:9b:39:5b:41:f2:9e:b9:62:c6: d4:48:bd:a0:03:81:2e:f4:0c:ca:e8:d2:73:c3:dd: 4d:b1:f4:38:25:9f:69:ff:70:a3:74:13:df:1b:f7: 6f:c6:2b:db:f9:6c:e8:76:30:f7:00:c0:5f:e2:d2: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6B:BD:8B:60:4B:55:74:D0:38:EA:B9:C6:34:99:81:1D:7A:74:47 X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3d:76:67:2a:85:d6:3e:53:e5:1a:ab:61:ea:52:da:cd:55: f6:46:25:27:5f:99:82:49:38:b0:f3:fd:0b:bf:a9:cb:60:8a: e6:ab:94:20:fc:79:cc:60:15:7a:3a:83:79:fd:43:e0:cf:35: 8d:d3:c4:0a:a1:f9:36:f1:b4:e8:6d:47:95:01:f6:7e:d5:56: b8:1a:a9:56:fc:cd:43:1e:6f:3b:94:be:38:a5:b9:49:7a:b2: 17:b9:f7:d8:cd:c1:e6:a9:b6:4a:af:d3:41:1b:bf:e3:4b:a0: 51:ae:6c:83:3f:5c:5b:b5:61:94:ec:ca:4c:0b:d8:ee:f9:9b: 51:79:7f:33:3f:b4:6b:6b:12:04:96:3d:99:90:8c:91:e3:1a: 75:50:e7:8c:3c:ae:57:37:6b:bd:f3:4a:ab:61:7d:30:95:14: 66:b9:bf:d8:36:ac:24:83:34:48:8e:ef:81:6a:f4:42:7f:21: d7:c3:58:68:5d:28:38:ce:0a:c2:23:f5:f9:84:f2:30:c8:c6: 61:1d:8f:08:28:db:d2:31:b1:05:53:1b:c3:d2:6a:8d:27:c3: 9e:11:48:bb:2b:b9:10:b3:48:f8:a9:80:2b:92:7e:54:84:35: ca:6d:03:ae:15:84:fb:a6:97:ad:79:1a:0d:70:3e:48:77:ce: 97:25:1c:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjYwNzIyMjM0NzU2WhcNMjYwNzI5MjM0NzU2WjAYMRYwFAYD VQQDEw02YTYxNTZhYy03NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlJ4iwvvvYYu8MYYoZUzoqBdDv+bY06vmhrUKKQwXp7LpKIpIbrLo6qWy5Fp K1O4smq5aCwbt4eeccuM0NZPTDguYNFPKlDZgwGA9co4CHCq7KIW1fbaYqEZ6wKP uh+EBsy6ZBemQdktPT8QEBC9JKR8HH/uRVLdMYpgHOQPfUEFIiuFqjsXBFkDEcXR p8NUU5Z5XmF+G7Pi1EG1cb07eg8pXKtlcsF8G/iKmezqhno3dcU0eJQcp+9KF51V oKiWuRGbVKA5GHibOVtB8p65YsbUSL2gA4Eu9AzK6NJzw91NsfQ4JZ9p/3CjdBPf G/dvxivb+WzodjD3AMBf4tIKbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZrvYtg S1V00DjqucY0mYEdenRHMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJD12ZyqF1j5T5RqrYepS2s1V9kYlJ1+Zgkk4sPP9C7+py2CK5quUIPx5zGAV ejqDef1D4M81jdPECqH5NvG06G1HlQH2ftVWuBqpVvzNQx5vO5S+OKW5SXqyF7n3 2M3B5qm2Sq/TQRu/40ugUa5sgz9cW7VhlOzKTAvY7vmbUXl/Mz+0a2sSBJY9mZCM keMadVDnjDyuVzdrvfNKq2F9MJUUZrm/2DasJIM0SI7vgWr0Qn8h18NYaF0oOM4K wiP1+YTyMMjGYR2PCCjb0jGxBVMbw9JqjSfDnhFIuyu5ELNI+KmAK5J+VIQ1ym0D rhWE+6aXrXkaDXA+SHfOlyUcsw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:56 2026 by rpki-client