$ rpki-client -vvf rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft File: i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft (raw, json) Hash identifier: n5HGTVSb2gj0yBtn0QtMSI3EcBsB30ePbqMCnJJ2A8U= Subject key identifier: 12:0C:9E:B8:80:63:18:39:82:8C:A5:65:E6:CA:25:59:77:F1:B0:D8 Authority key identifier: 8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF Certificate issuer: /CN=A9148434/serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft Manifest number: 17 Signing time: Thu 23 Jul 2026 11:05:37 +0000 Manifest this update: Thu 23 Jul 2026 11:05:37 +0000 Manifest next update: Thu 30 Jul 2026 11:05:37 +0000 Files and hashes: 1: i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl (hash: JZBDNJU9K+Ou7M8VfiW2kaZY23CKaZ/Rl5+yHnc4K6I=) 2: C94BF19E662911F1B3091723A147A888.roa (hash: HtOAVYCqkE3fGkuw5gCvQcRd0jozLG+SV+vxhR2Bdhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148434, serialNumber=8B87F910DE28C3ED43B70AC8C855437E94A514DF Validity Not Before: Jul 23 11:05:37 2026 GMT Not After : Jul 30 11:05:37 2026 GMT Subject: CN=6a61f581-11f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:da:81:79:72:63:52:2e:1b:c2:4b:25:ef: fc:56:93:40:3c:5b:4c:47:dd:a3:35:fc:e2:5a:fb: a3:e1:f8:ba:b8:09:18:10:80:71:68:8c:15:c7:2f: cb:04:94:f0:7d:31:7f:be:ac:7b:3a:dc:ee:ee:b3: d0:20:7d:ee:76:ee:9f:6c:ea:39:18:2f:ac:b5:96: 67:65:cb:a1:d8:c1:ec:87:38:40:b7:87:b6:4f:34: 42:c1:af:11:ac:49:b3:5f:ca:f5:53:71:36:28:f3: 91:c2:f5:ca:d6:97:18:35:a5:93:d2:6d:88:10:3b: 4f:6e:c5:42:89:a7:19:6d:24:58:11:22:f3:fb:5e: 75:1f:7e:78:6d:ed:41:1b:12:6c:5b:90:27:16:7b: 5e:f1:45:0a:c5:21:6c:c2:d4:f5:f2:53:71:79:10: c8:a7:30:86:be:01:6e:0f:30:75:57:35:a7:6d:41: ab:27:65:7e:4d:68:cc:db:36:41:22:c0:2c:4a:d0: 72:63:55:7c:e9:f3:3e:b7:35:8e:4d:7a:fb:59:01: 79:05:ad:cc:16:ad:eb:6d:d4:05:b6:3d:ef:03:ad: c8:66:61:37:53:c6:15:d8:ff:0c:21:7f:c1:76:5e: 1d:c4:a3:45:db:a7:e9:16:e7:4d:9f:72:02:8d:64: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:9E:B8:80:63:18:39:82:8C:A5:65:E6:CA:25:59:77:F1:B0:D8 X509v3 Authority Key Identifier: keyid:8B:87:F9:10:DE:28:C3:ED:43:B7:0A:C8:C8:55:43:7E:94:A5:14:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4f5EN4ow-1DtwrIyFVDfpSlFN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148434/D4A296E2662411F183922A2D9E47A888/i4f5EN4ow-1DtwrIyFVDfpSlFN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4d:f3:a3:cf:40:5e:d0:2f:7b:57:53:e7:75:38:e7:12:b5: df:a1:4f:61:5c:79:3f:1f:29:bc:eb:e2:1f:19:bf:fb:a7:71: ab:24:70:3c:8e:af:64:ab:c9:e0:6c:0d:e8:cd:34:4d:24:18: b2:16:6d:71:16:f0:7c:6a:84:64:55:48:3a:b4:66:24:eb:b7: f4:71:d0:cf:e4:0e:d5:52:6b:9c:e7:f0:98:45:03:40:14:11: 55:98:bc:c3:1d:1e:9a:f8:5d:7e:35:a6:37:7c:f6:57:c5:07: 06:b2:f5:a9:fb:b6:2d:62:0d:18:09:57:80:38:b8:9c:49:cf: a7:8a:92:8c:51:a9:b1:16:f0:25:6a:c2:bd:17:2c:03:00:8e: f6:0c:bf:0b:54:85:ff:c9:2d:c3:e0:4e:02:24:45:7e:f3:f3: cb:40:e9:93:35:5d:0b:28:68:3f:08:b0:86:81:8e:ce:87:44: fe:5b:fa:02:22:aa:ab:dc:35:25:7d:96:00:4f:bd:b4:55:aa: 58:29:aa:94:25:88:c8:db:a6:36:e6:e2:9f:04:12:9d:ef:f9: 77:a2:b8:b9:a0:ba:90:76:c9:5a:cd:a7:40:5d:f1:27:4f:21: 36:8a:0c:71:24:6d:d1:29:15:c1:35:22:8a:11:c3:a8:99:87: 7c:ea:1f:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODQzNDExMC8GA1UEBRMoOEI4N0Y5MTBERTI4QzNFRDQzQjcwQUM4Qzg1NTQzN0U5 NEE1MTRERjAeFw0yNjA3MjMxMTA1MzdaFw0yNjA3MzAxMTA1MzdaMBgxFjAUBgNV BAMTDTZhNjFmNTgxLTExZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy99qBeXJjUi4bwksl7/xWk0A8W0xH3aM1/OJa+6Ph+Lq4CRgQgHFojBXHL8sE lPB9MX++rHs63O7us9Agfe527p9s6jkYL6y1lmdly6HYweyHOEC3h7ZPNELBrxGs SbNfyvVTcTYo85HC9crWlxg1pZPSbYgQO09uxUKJpxltJFgRIvP7XnUffnht7UEb EmxbkCcWe17xRQrFIWzC1PXyU3F5EMinMIa+AW4PMHVXNadtQasnZX5NaMzbNkEi wCxK0HJjVXzp8z63NY5NevtZAXkFrcwWrett1AW2Pe8DrchmYTdTxhXY/wwhf8F2 Xh3Eo0Xbp+kW502fcgKNZDC7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEgyeuIBj GDmCjKVl5solWXfxsNgwHwYDVR0jBBgwFoAUi4f5EN4ow+1DtwrIyFVDfpSlFN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NDM0L0Q0QTI5NkUyNjYy NDExRjE4MzkyMkEyRDlFNDdBODg4L2k0ZjVFTjRvdy0xRHR3ckl5RlZEZnBTbEZO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaTRmNUVONG93LTFEdHdySXlGVkRmcFNsRk44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 NDM0L0Q0QTI5NkUyNjYyNDExRjE4MzkyMkEyRDlFNDdBODg4L2k0ZjVFTjRvdy0x RHR3ckl5RlZEZnBTbEZOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaTfOjz0Be0C97V1PndTjnErXfoU9hXHk/Hym86+IfGb/7p3GrJHA8jq9kq8ng bA3ozTRNJBiyFm1xFvB8aoRkVUg6tGYk67f0cdDP5A7VUmuc5/CYRQNAFBFVmLzD HR6a+F1+NaY3fPZXxQcGsvWp+7YtYg0YCVeAOLicSc+nipKMUamxFvAlasK9FywD AI72DL8LVIX/yS3D4E4CJEV+8/PLQOmTNV0LKGg/CLCGgY7Oh0T+W/oCIqqr3DUl fZYAT720VapYKaqUJYjI26Y25uKfBBKd7/l3ori5oLqQdslazadAXfEnTyE2igxx JG3RKRXBNSKKEcOomYd86h+L -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:20 2026 by rpki-client