$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json) Hash identifier: KgbMqlKmTWZEkUVnBbf7g7whFF7/kcqrM2J4ntZFq/c= Subject key identifier: 17:B8:20:54:EC:15:39:11:B5:C9:92:98:14:13:FF:FB:7B:5D:A4:57 Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft Manifest number: 52 Signing time: Thu 23 Jul 2026 10:16:30 +0000 Manifest this update: Thu 23 Jul 2026 10:16:30 +0000 Manifest next update: Thu 30 Jul 2026 10:16:30 +0000 Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: jWnCvlvNCDgtFhneTZuIwUfkXZNZqwl0BNb31fXY13I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Validity Not Before: Jul 23 10:16:30 2026 GMT Not After : Jul 30 10:16:30 2026 GMT Subject: CN=6a61e9fe-216a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:96:da:e1:1c:2e:09:cd:c5:a3:f9:f8:32: ac:03:f0:19:33:89:d9:fb:ad:28:b6:78:4f:48:f5: fc:cb:b9:d5:98:85:5f:ac:8e:99:e2:56:ea:46:d1: e7:63:31:bb:a5:ab:8c:f6:74:8a:79:d9:10:2e:54: 1e:bd:45:65:4d:08:61:7b:0e:9f:40:16:12:2a:77: c7:3f:72:e3:15:3e:c5:d7:14:95:13:0b:9e:d2:66: b6:93:e7:dc:76:c6:89:ec:26:33:1c:ac:8a:10:8a: f5:74:a8:6c:5e:a1:c6:c5:17:f8:f0:d8:8a:e1:ad: 31:c4:ab:8b:e9:54:c4:8e:fe:e0:aa:2a:ee:03:bd: f8:09:75:0d:65:e9:63:41:d8:35:13:1f:3b:e8:15: e0:8e:e2:01:da:d8:3e:21:b4:74:61:46:6b:6c:99: 67:28:92:f7:7c:1f:17:a4:58:b7:cd:84:43:f9:26: 78:dc:87:51:28:86:9e:22:06:1f:32:1f:51:8b:04: 2f:62:e9:4b:d0:bb:fe:f6:6d:f6:49:42:20:03:4e: 61:7b:b3:72:5a:d3:0d:3d:1c:f2:28:2f:2f:50:4a: a3:e2:e7:91:09:0a:a1:cb:c4:8b:59:21:0f:76:c3: 81:ae:bc:69:cc:7e:19:6b:82:61:d0:a5:ab:40:cd: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:20:54:EC:15:39:11:B5:C9:92:98:14:13:FF:FB:7B:5D:A4:57 X509v3 Authority Key Identifier: keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:96:c4:34:1f:91:21:d5:86:5f:08:db:9f:8d:78:16:be:9e: d8:11:ad:58:94:69:00:cb:28:ee:94:46:ce:16:c3:5a:76:d6: eb:68:a1:cc:ab:9a:bd:fd:80:ab:90:ce:99:fe:a7:5f:63:e0: 9a:72:4b:b3:5e:6d:2e:b6:9b:58:45:df:15:da:0c:b8:f1:d5: ca:82:0d:96:3e:55:f2:c4:b1:f0:85:b0:b3:5d:ae:35:5a:4d: 1f:94:44:37:36:11:01:02:d5:53:18:b5:f8:c6:90:b3:15:8f: 73:a9:54:ba:16:ae:fe:5f:ad:62:7c:65:b5:61:81:67:2b:03: bb:b6:e5:f3:80:d3:68:e0:71:8a:72:9f:cd:9b:21:f3:86:df: 2e:23:95:66:4b:1d:be:cc:e9:75:4a:73:02:67:0a:ab:91:d7: 83:f1:b1:98:05:3b:0b:67:f7:26:64:e5:dd:b7:9e:31:21:a2: e0:84:f0:2e:54:ed:06:6f:33:db:93:46:63:41:22:2d:71:27: d3:85:93:3b:75:c3:67:4e:d8:71:9e:7d:fb:a8:73:63:e6:04: 4b:86:c4:f4:ff:03:79:9c:d5:b1:0c:e0:16:66:47:17:62:64: 34:91:1d:4c:07:85:2c:53:61:4f:d9:9c:64:ac:b8:99:c0:22: de:b5:88:1d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG QzQ1MjI2MzAeFw0yNjA3MjMxMDE2MzBaFw0yNjA3MzAxMDE2MzBaMBgxFjAUBgNV BAMTDTZhNjFlOWZlLTIxNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs4pba4RwuCc3Fo/n4MqwD8Bkzidn7rSi2eE9I9fzLudWYhV+sjpniVupG0edj Mbulq4z2dIp52RAuVB69RWVNCGF7Dp9AFhIqd8c/cuMVPsXXFJUTC57SZraT59x2 xonsJjMcrIoQivV0qGxeocbFF/jw2IrhrTHEq4vpVMSO/uCqKu4DvfgJdQ1l6WNB 2DUTHzvoFeCO4gHa2D4htHRhRmtsmWcokvd8HxekWLfNhEP5Jnjch1Eohp4iBh8y H1GLBC9i6UvQu/72bfZJQiADTmF7s3Ja0w09HPIoLy9QSqPi55EJCqHLxItZIQ92 w4GuvGnMfhlrgmHQpatAzQpvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF7ggVOwV ORG1yZKYFBP/+3tdpFcwHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAflsQ0H5Eh1YZfCNufjXgWvp7YEa1YlGkAyyjulEbOFsNadtbraKHMq5q9/YCr kM6Z/qdfY+CackuzXm0utptYRd8V2gy48dXKgg2WPlXyxLHwhbCzXa41Wk0flEQ3 NhEBAtVTGLX4xpCzFY9zqVS6Fq7+X61ifGW1YYFnKwO7tuXzgNNo4HGKcp/NmyHz ht8uI5VmSx2+zOl1SnMCZwqrkdeD8bGYBTsLZ/cmZOXdt54xIaLghPAuVO0GbzPb k0ZjQSItcSfThZM7dcNnTthxnn37qHNj5gRLhsT0/wN5nNWxDOAWZkcXYmQ0kR1M B4UsU2FP2ZxkrLiZwCLetYgd -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:50 2026 by rpki-client