$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft File: CIE_b-4hrwS022CvNj9a-H-JonU.mft (raw, json) Hash identifier: haO6tWBWgAJSJS7C35/tipddlmv2JoN070BAqBT2OtA= Subject key identifier: 96:E9:7A:2C:8B:79:9B:7D:18:FD:AB:EF:DB:47:E9:F5:BB:6C:E1:41 Authority key identifier: 08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75 Certificate issuer: /CN=A91629F2/serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft Manifest number: 27 Signing time: Thu 23 Jul 2026 10:53:01 +0000 Manifest this update: Thu 23 Jul 2026 10:53:01 +0000 Manifest next update: Thu 30 Jul 2026 10:53:01 +0000 Files and hashes: 1: CIE_b-4hrwS022CvNj9a-H-JonU.crl (hash: ndcl8cMKW+pJyJHGlMQr784GHg/jF9e1hR3KwxSOVb8=) 2: 9577FE7C4C0B11F1996C5785A4833773.roa (hash: 0qEz6js7PBUojcJH/VQOhbzx5OAA1vw3c9ZuGNzrDdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629F2, serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275 Validity Not Before: Jul 23 10:53:01 2026 GMT Not After : Jul 30 10:53:01 2026 GMT Subject: CN=6a61f28d-9435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:ac:1a:17:4a:e4:40:80:bd:2a:14:0f:e8: d5:89:d0:a7:a4:1a:fb:fb:42:6c:de:bf:f4:f1:8a: 10:ad:7a:ff:5a:37:bb:2e:9b:d4:9e:12:fd:60:1a: 97:5f:d6:74:37:11:b3:e1:62:23:e0:ab:7a:fa:b2: 8f:b1:9e:eb:02:7c:eb:de:82:22:78:a1:09:2c:a1: 46:82:fe:8c:e6:40:04:c0:9f:46:6d:9d:24:55:09: b6:54:21:85:73:5a:88:ff:c8:0c:96:62:c5:73:33: 4c:e6:b6:94:57:3f:87:e5:76:28:59:80:27:82:e6: 3c:29:55:f8:bc:5d:cc:83:a7:a1:97:a2:3e:4b:bf: 62:5f:d6:f0:a5:0a:95:16:19:11:0c:72:43:66:8d: 35:52:08:fe:af:2b:bb:d7:1f:af:79:4c:03:69:c9: cd:cb:b1:b4:2a:fb:cf:ef:02:5b:41:3c:32:29:b3: 6b:e5:64:c0:15:80:52:1e:a6:de:a1:01:f5:1f:8a: 5a:1f:ff:c2:a0:25:77:7c:ef:02:ff:f4:fd:a8:5e: 4e:76:75:c2:ac:db:5f:aa:a8:9f:76:dd:d5:03:90: b2:3a:ac:2e:6a:91:eb:7d:b5:fc:54:1c:22:3b:9c: a3:fa:77:69:b3:53:43:38:09:a3:60:f2:f4:a2:2e: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E9:7A:2C:8B:79:9B:7D:18:FD:AB:EF:DB:47:E9:F5:BB:6C:E1:41 X509v3 Authority Key Identifier: keyid:08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ed:1a:8d:fb:cc:ed:c5:94:29:cb:c7:b0:cc:9a:d2:79:aa: bf:a9:74:91:c9:44:69:9a:d3:a8:e1:d1:bf:64:61:2e:21:5b: 4d:0c:ce:2a:7c:a8:a7:d0:50:76:89:d6:f4:cc:92:46:3f:4a: dd:05:94:ba:2c:25:da:9a:c3:12:c3:9c:45:f0:c3:95:14:2f: c6:ee:6f:08:94:a7:13:26:a5:3e:9f:6f:77:81:35:58:7f:cb: a1:9d:81:62:5a:aa:b9:92:d2:5e:0a:f4:d9:d6:d4:c6:8c:ab: a3:3a:68:1b:2d:76:0e:8c:9f:ab:94:aa:ad:bb:9e:76:c2:41: a3:81:77:91:58:dd:b2:b3:22:f4:d1:9e:2b:f8:9b:43:f5:85: a8:3e:11:eb:0b:0e:5d:4b:78:37:09:cd:7c:be:c8:cc:32:e1: 9a:ff:02:88:ca:76:2e:fb:1e:83:ee:fe:9b:f2:8b:75:c9:10: c9:29:13:ce:f9:34:e7:04:34:bc:62:60:5e:09:3f:bf:6d:c7: 38:06:8b:30:6c:b2:5a:a5:06:8f:b0:10:c7:e9:72:4c:de:48: 03:46:b9:b8:1d:21:22:c9:da:a4:28:25:23:f3:eb:b1:d6:c8: 3e:aa:73:fb:cc:fa:05:fd:99:7a:fa:e1:53:59:53:02:49:f0: 1a:ac:ec:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlGMjExMC8GA1UEBRMoMDg4MTNGNkZFRTIxQUYwNEI0REI2MEFGMzYzRjVBRjg3 Rjg5QTI3NTAeFw0yNjA3MjMxMDUzMDFaFw0yNjA3MzAxMDUzMDFaMBgxFjAUBgNV BAMTDTZhNjFmMjhkLTk0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC76qwaF0rkQIC9KhQP6NWJ0KekGvv7Qmzev/TxihCtev9aN7sum9SeEv1gGpdf 1nQ3EbPhYiPgq3r6so+xnusCfOvegiJ4oQksoUaC/ozmQATAn0ZtnSRVCbZUIYVz Woj/yAyWYsVzM0zmtpRXP4fldihZgCeC5jwpVfi8XcyDp6GXoj5Lv2Jf1vClCpUW GREMckNmjTVSCP6vK7vXH695TANpyc3LsbQq+8/vAltBPDIps2vlZMAVgFIept6h AfUfilof/8KgJXd87wL/9P2oXk52dcKs21+qqJ923dUDkLI6rC5qket9tfxUHCI7 nKP6d2mzU0M4CaNg8vSiLrMbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlul6LIt5 m30Y/avv20fp9bts4UEwHwYDVR0jBBgwFoAUCIE/b+4hrwS022CvNj9a+H+JonUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0VCN0Y5QURFNEMw NDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndTMDIyQ3ZOajlhLUgtSm9u VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0lFX2ItNGhyd1MwMjJDdk5qOWEtSC1Kb25VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUYyL0VCN0Y5QURFNEMwNDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndT MDIyQ3ZOajlhLUgtSm9uVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZ7RqN+8ztxZQpy8ewzJrSeaq/qXSRyURpmtOo4dG/ZGEuIVtNDM4qfKin0FB2 idb0zJJGP0rdBZS6LCXamsMSw5xF8MOVFC/G7m8IlKcTJqU+n293gTVYf8uhnYFi Wqq5ktJeCvTZ1tTGjKujOmgbLXYOjJ+rlKqtu552wkGjgXeRWN2ysyL00Z4r+JtD 9YWoPhHrCw5dS3g3Cc18vsjMMuGa/wKIynYu+x6D7v6b8ot1yRDJKRPO+TTnBDS8 YmBeCT+/bcc4BoswbLJapQaPsBDH6XJM3kgDRrm4HSEiydqkKCUj8+ux1sg+qnP7 zPoF/Zl6+uFTWVMCSfAarOzj -----END CERTIFICATE-----Generated at Fri Jul 24 19:47:19 2026 by rpki-client