$ rpki-client -vvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft File: IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft (raw, json) Hash identifier: 6IWDODfcv4iWx2g+4qD23lbk7oafCSZw83KQhj62RqQ= Subject key identifier: 24:5D:51:C0:4C:15:3C:0A:3A:D4:C0:C6:2F:50:1B:B1:B4:A3:15:24 Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D Certificate issuer: /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft Manifest number: 04D5 Signing time: Thu 23 Jul 2026 00:38:08 +0000 Manifest this update: Thu 23 Jul 2026 00:38:07 +0000 Manifest next update: Thu 30 Jul 2026 00:38:07 +0000 Files and hashes: 1: IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl (hash: KgyUiYN0dGxbZtv74lM3hBC6MaHc74yUJlWKpQrUBw8=) 2: E986DDEC979911ECB3B7CE39C4F9AE02.roa (hash: BfgbyrDUSPaDFbvmIvU+wE2M70H25WXoCbwhEXrv7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152DE4, serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Validity Not Before: Jul 23 00:38:07 2026 GMT Not After : Jul 30 00:38:07 2026 GMT Subject: CN=6a616270-c037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:e4:37:05:e5:7e:3c:16:4d:28:b2:8c:54: d0:7f:7e:8c:9b:c6:5f:ae:e4:de:e0:74:05:28:fe: c5:11:e7:cd:f7:43:67:fd:99:20:37:f5:7e:9c:63: 97:40:c2:88:c9:3a:fc:aa:b5:b9:3f:e0:c7:0a:5d: 95:c5:fe:f8:73:1f:52:42:cb:76:54:c8:31:d9:8c: 99:d9:5b:35:84:2a:bd:d2:4c:2e:c4:2f:33:ff:9a: 46:c3:d5:9e:71:fb:a6:a5:94:24:a8:0e:55:1a:9f: 08:db:08:d5:53:5b:f1:0f:cd:c0:ed:de:93:12:e7: ed:60:78:e7:37:b4:d0:ed:59:c3:8e:f3:a1:7b:c5: 5e:00:77:a6:4a:b0:95:1a:b3:a4:bf:19:68:6f:ee: 9a:1d:8f:ae:f3:1b:35:17:d2:33:58:22:f2:23:e6: eb:68:ec:93:b2:2f:cc:52:4c:12:b8:06:85:b9:8c: af:83:c3:37:65:59:5f:5a:94:a4:f4:65:70:3a:88: 1d:37:e2:b1:6c:aa:cb:1d:6b:4e:1d:6a:bf:5c:b5: f1:03:af:bc:26:2a:72:a1:38:b6:e5:87:dc:97:27: 09:ab:98:62:71:c4:31:12:82:83:88:37:31:0c:f8: 70:05:bc:c8:1e:8f:ae:d9:e5:d7:44:69:2a:d3:08: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5D:51:C0:4C:15:3C:0A:3A:D4:C0:C6:2F:50:1B:B1:B4:A3:15:24 X509v3 Authority Key Identifier: keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:dd:22:b5:0a:18:22:77:d9:da:f6:a9:3c:e9:72:a5:7c:f4: d6:21:72:18:b8:86:eb:81:3d:4f:77:95:8d:73:50:8e:ca:13: 76:fd:f7:57:24:21:24:3b:56:fa:90:97:6a:5b:fd:9f:11:70: 64:3e:f1:0f:39:9a:2a:25:d9:66:0a:a8:ad:fe:8f:d7:28:aa: c0:c6:68:53:10:0b:aa:aa:d9:df:1e:52:2a:cc:6e:30:cd:86: b8:cb:96:0d:77:74:f4:04:21:62:8a:ed:76:b4:85:f4:61:4c: 53:7e:84:75:0b:58:39:30:96:ed:2d:a8:72:95:ab:09:53:7c: d7:64:d8:cf:44:ce:13:20:de:75:36:e1:13:1f:12:2d:d0:5b: 38:af:3f:0e:c9:dd:f5:16:f9:c4:a3:51:75:02:fc:00:b5:1c: 5c:08:e5:51:2d:69:5c:10:4b:96:c9:8c:bd:8f:d1:11:a2:7f: b7:dd:1d:16:64:73:27:58:39:bb:ba:aa:9c:e2:65:61:03:97: ee:23:db:94:5a:53:d0:c7:1d:f6:10:9b:d3:10:29:a6:9b:60: d1:00:9e:1f:ec:d9:20:0b:40:80:55:48:cd:62:94:df:fe:49: 7b:bc:80:5f:31:f9:b8:4f:23:a9:22:71:ce:1b:51:5e:c6:b6: 9d:53:6f:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJERTQxMTAvBgNVBAUTKDIxN0MzRDhCRUQwQjQwQzBGQjA4OEI1OUVFNkU2NUFF NkM2NjFGMEQwHhcNMjYwNzIzMDAzODA3WhcNMjYwNzMwMDAzODA3WjAYMRYwFAYD VQQDEw02YTYxNjI3MC1jMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvrkNwXlfjwWTSiyjFTQf36Mm8ZfruTe4HQFKP7FEefN90Nn/ZkgN/V+nGOX QMKIyTr8qrW5P+DHCl2Vxf74cx9SQst2VMgx2YyZ2Vs1hCq90kwuxC8z/5pGw9We cfumpZQkqA5VGp8I2wjVU1vxD83A7d6TEuftYHjnN7TQ7VnDjvOhe8VeAHemSrCV GrOkvxlob+6aHY+u8xs1F9IzWCLyI+braOyTsi/MUkwSuAaFuYyvg8M3ZVlfWpSk 9GVwOogdN+KxbKrLHWtOHWq/XLXxA6+8JipyoTi25YfclycJq5hiccQxEoKDiDcx DPhwBbzIHo+u2eXXRGkq0wi9pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRdUcBM FTwKOtTAxi9QG7G0oxUkMB8GA1UdIwQYMBaAFCF8PYvtC0DA+wiLWe5uZa5sZh8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkRFNC80Q0NDQzMzMjc5 MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFNRDdDSXRaN201bHJteG1I dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYdzlpLTBMUU1EN0NJdFo3bTVscm14bUh3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkRFNC80Q0NDQzMzMjc5MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFN RDdDSXRaN201bHJteG1IdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiN0itQoYInfZ2vapPOlypXz01iFyGLiG64E9T3eVjXNQjsoTdv33VyQhJDtW +pCXalv9nxFwZD7xDzmaKiXZZgqorf6P1yiqwMZoUxALqqrZ3x5SKsxuMM2GuMuW DXd09AQhYortdrSF9GFMU36EdQtYOTCW7S2ocpWrCVN812TYz0TOEyDedTbhEx8S LdBbOK8/Dsnd9Rb5xKNRdQL8ALUcXAjlUS1pXBBLlsmMvY/REaJ/t90dFmRzJ1g5 u7qqnOJlYQOX7iPblFpT0Mcd9hCb0xAppptg0QCeH+zZIAtAgFVIzWKU3/5Je7yA XzH5uE8jqSJxzhtRXsa2nVNvIw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:46 2026 by rpki-client