$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json) Hash identifier: F3T+TV7MbRK/JOEDVffcChrYt/rndUURa9ManRKgn1I= Subject key identifier: DA:A5:43:2B:43:B3:00:48:5F:3B:E6:A9:91:F1:EC:21:9E:3D:22:1E Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft Manifest number: 0758 Signing time: Wed 22 Jul 2026 22:33:36 +0000 Manifest this update: Wed 22 Jul 2026 22:33:36 +0000 Manifest next update: Wed 29 Jul 2026 22:33:36 +0000 Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: Bx80EsM4VUEP9/Q+ydEZ52MnaqZ53BMjf/u3+EwtHA4=) 2: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=) 3: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=) 4: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=) 5: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=) 6: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=) 7: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=) 8: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=) 9: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=) 10: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=) 11: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=) 12: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Jul 22 22:33:36 2026 GMT Not After : Jul 29 22:33:36 2026 GMT Subject: CN=6a614540-5b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e0:fc:7d:48:d5:8f:49:36:44:ef:b6:d9:62: 1c:f1:38:bb:46:a7:a3:5a:31:95:15:c7:fc:e0:03: 59:7e:aa:12:b6:d7:7d:7c:eb:05:0c:fc:72:e3:49: 33:16:2a:00:fb:58:b8:a1:20:54:69:2d:a2:07:56: 3e:9c:71:5c:65:57:bc:cf:db:2f:2f:a7:74:df:46: 7a:f2:4b:73:e3:3b:91:17:35:6a:70:ca:c8:8a:71: 1d:40:28:c9:6e:30:01:7f:1e:eb:2d:75:2f:b0:84: 59:ac:79:2c:0e:0d:c4:4f:74:7d:f4:a6:bd:32:d8: f3:e8:a9:d5:b1:a9:62:98:8a:a5:4f:90:24:15:ac: 7c:f3:00:a6:4a:77:b9:85:14:f9:f8:fe:b6:b8:aa: fb:26:92:25:e6:31:c4:30:09:e9:dd:2c:bd:95:be: 52:2c:9e:02:15:3e:ff:ff:6f:39:7a:f0:6d:a6:1c: 69:0f:92:f8:4f:16:47:c4:71:b2:3c:bc:2c:35:a8: 95:0a:1b:86:a7:d2:d7:88:b2:f8:d7:ab:50:70:c0: 8f:60:31:49:17:c1:d1:bc:c5:5f:cc:7f:bf:9c:0e: 4f:6a:05:bb:e7:ef:fc:43:46:19:2c:6e:dd:f9:10: bb:39:48:f2:ab:f6:a4:bc:25:33:9a:2f:96:70:30: 5b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A5:43:2B:43:B3:00:48:5F:3B:E6:A9:91:F1:EC:21:9E:3D:22:1E X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:9b:4d:1c:1b:63:2f:f1:19:5c:e9:8c:8c:69:28:ff:bd:2f: 74:63:a4:11:c4:de:3e:91:63:59:8b:6a:df:55:ba:dc:2b:7e: e1:cf:62:06:b5:10:ed:07:77:2d:24:6d:d8:af:17:ca:46:8f: 88:37:20:ef:99:17:9f:95:da:f8:04:30:69:57:4d:71:68:0d: 81:24:14:70:46:e8:c9:dd:f1:78:99:49:41:4d:d1:a3:f0:3f: e8:a9:a2:d2:6a:cd:b3:b8:d0:2f:dc:95:ae:90:f6:40:0a:8e: 35:f4:af:61:d0:bc:29:00:13:3f:64:b3:f0:5a:8d:ec:bd:3c: 62:96:0b:61:27:d7:36:5f:40:df:a1:76:fe:ea:6b:5c:3e:2f: bb:46:88:1d:7e:90:fc:40:a0:77:d0:07:55:10:5f:c7:38:83: 1a:dd:15:8d:af:cf:10:f2:14:cb:72:9d:ac:c8:09:5b:fe:02: 6a:f6:4a:2f:fb:4f:67:38:e2:9a:2d:c5:b9:62:97:31:b4:1c: 71:32:ab:81:b7:d6:c2:f7:ab:a4:1d:c9:8e:8a:05:25:8d:5b: ef:79:f9:f2:23:78:6e:85:39:1d:c4:6d:94:da:d5:c2:6a:48: 3f:13:32:a3:f3:3a:99:eb:2b:fd:b4:35:69:b9:08:b0:57:31: ac:ad:09:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYwNzIyMjIzMzM2WhcNMjYwNzI5MjIzMzM2WjAYMRYwFAYD VQQDEw02YTYxNDU0MC01Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+D8fUjVj0k2RO+22WIc8Ti7RqejWjGVFcf84ANZfqoSttd9fOsFDPxy40kz FioA+1i4oSBUaS2iB1Y+nHFcZVe8z9svL6d030Z68ktz4zuRFzVqcMrIinEdQCjJ bjABfx7rLXUvsIRZrHksDg3ET3R99Ka9Mtjz6KnVsalimIqlT5AkFax88wCmSne5 hRT5+P62uKr7JpIl5jHEMAnp3Sy9lb5SLJ4CFT7//285evBtphxpD5L4TxZHxHGy PLwsNaiVChuGp9LXiLL416tQcMCPYDFJF8HRvMVfzH+/nA5PagW75+/8Q0YZLG7d +RC7OUjyq/akvCUzmi+WcDBbmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqlQytD swBIXzvmqZHx7CGePSIeMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3 Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwptNHBtjL/EZXOmMjGko/70vdGOkEcTePpFjWYtq31W63Ct+4c9iBrUQ7Qd3 LSRt2K8XykaPiDcg75kXn5Xa+AQwaVdNcWgNgSQUcEboyd3xeJlJQU3Ro/A/6Kmi 0mrNs7jQL9yVrpD2QAqONfSvYdC8KQATP2Sz8FqN7L08YpYLYSfXNl9A36F2/upr XD4vu0aIHX6Q/ECgd9AHVRBfxziDGt0Vja/PEPIUy3KdrMgJW/4CavZKL/tPZzji mi3FuWKXMbQccTKrgbfWwverpB3JjooFJY1b73n58iN4boU5HcRtlNrVwmpIPxMy o/M6mesr/bQ1abkIsFcxrK0JTA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:41:46 2026 by rpki-client