$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: jEieJl9ePnym1ro/Cfqifk6qqVGQP9LImLdKtjJcU7Q= Subject key identifier: 04:C9:0E:BE:F7:4B:BC:69:93:FC:A1:C4:38:BC:6D:05:B5:DE:B1:5A Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 0587 Signing time: Thu 23 Jul 2026 00:03:23 +0000 Manifest this update: Thu 23 Jul 2026 00:03:23 +0000 Manifest next update: Thu 30 Jul 2026 00:03:23 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: e+gscZd1b9JJITtFshEu4qJBwAUle///lqvUhwhENLI=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) 3: B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (hash: wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=) 4: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Jul 23 00:03:23 2026 GMT Not After : Jul 30 00:03:23 2026 GMT Subject: CN=6a615a4b-d819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:21:93:7a:bb:ba:e5:fa:c5:a6:21:e7:eb: 20:d1:5f:5d:ba:30:1b:ee:50:dc:ef:c8:b7:99:89: 01:35:96:31:4d:ef:de:5b:62:ce:10:68:aa:64:c5: 81:d0:f3:1f:3d:e5:86:f7:04:73:6f:29:2d:a1:1b: f4:29:3d:09:ed:4d:56:25:7c:57:19:bf:76:ed:af: 61:46:44:91:4c:63:98:a6:87:ed:e9:40:3d:f5:f5: 00:28:ec:b0:f2:35:2c:36:f7:1c:d8:bd:c0:7f:6b: bc:f0:d3:11:8e:10:5e:29:67:d0:87:0a:a9:69:0d: a5:9f:4b:38:8a:4d:61:79:42:4b:03:df:e4:4d:cd: 43:31:19:1e:cc:9a:87:67:e6:36:94:14:36:26:1b: 4c:c7:48:c6:3d:38:d2:e1:37:37:3b:58:f7:45:c1: cf:4c:75:d3:bc:7a:b0:f2:77:27:f9:f8:7c:6b:b3: e0:2a:8f:75:01:05:cd:d4:78:df:f7:29:25:67:77: dc:23:ab:50:53:37:3b:e3:6d:76:fa:21:50:4e:aa: 92:43:50:98:9b:3d:46:de:42:5e:4d:10:e6:2c:12: 61:aa:d4:ad:b0:c6:ad:f5:50:8f:09:f4:a0:e1:45: 26:62:ab:61:da:44:ba:d6:9f:d3:71:38:39:24:ea: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:0E:BE:F7:4B:BC:69:93:FC:A1:C4:38:BC:6D:05:B5:DE:B1:5A X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ca:d6:87:d8:99:02:e2:f2:6a:74:63:d4:11:2a:4d:5c:bb: f7:12:c1:25:95:fc:97:1c:cf:60:02:59:5a:48:bd:f3:3e:0a: 47:08:91:98:02:47:44:92:9a:81:8a:df:8f:ed:19:26:02:2b: 72:c5:5b:ab:50:24:04:a3:19:f5:77:b8:1a:2d:b9:66:6d:c1: 4b:39:fe:76:43:cf:e9:43:c2:84:36:e9:13:ca:5c:10:69:a2: 0e:53:2c:01:e5:29:e7:33:d0:70:89:88:f2:8c:1e:cc:c2:e9: 28:e4:cf:0e:e4:c3:55:b0:c0:c7:9d:c0:43:bc:53:24:31:b1: 15:1b:dc:5f:7e:f7:ba:af:76:3e:9f:19:72:2a:b3:80:2b:5a: 41:63:08:51:f1:a7:fb:09:02:29:dc:6e:4e:47:74:16:cf:2c: ba:db:c3:03:c6:05:81:0b:8e:5c:92:38:9a:c8:7c:dc:4d:a2: 87:2b:1e:7f:e5:13:09:50:da:c7:a5:89:fd:25:42:ff:ce:3b: 91:80:1a:86:b6:4a:bb:a1:45:99:53:7f:2b:10:1c:2d:78:58: 43:ad:78:91:f4:15:40:c9:d1:0f:f9:70:08:4c:55:30:74:3a: 52:aa:e4:ec:13:3a:59:23:4b:a4:76:6a:5c:e1:cd:63:b4:1a: a5:b3:40:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwNzIzMDAwMzIzWhcNMjYwNzMwMDAwMzIzWjAYMRYwFAYD VQQDEw02YTYxNWE0Yi1kODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BIhk3q7uuX6xaYh5+sg0V9dujAb7lDc78i3mYkBNZYxTe/eW2LOEGiqZMWB 0PMfPeWG9wRzbyktoRv0KT0J7U1WJXxXGb927a9hRkSRTGOYpoft6UA99fUAKOyw 8jUsNvcc2L3Af2u88NMRjhBeKWfQhwqpaQ2ln0s4ik1heUJLA9/kTc1DMRkezJqH Z+Y2lBQ2JhtMx0jGPTjS4Tc3O1j3RcHPTHXTvHqw8ncn+fh8a7PgKo91AQXN1Hjf 9yklZ3fcI6tQUzc74212+iFQTqqSQ1CYmz1G3kJeTRDmLBJhqtStsMat9VCPCfSg 4UUmYqth2kS61p/TcTg5JOqzjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATJDr73 S7xpk/yhxDi8bQW13rFaMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGsrWh9iZAuLyanRj1BEqTVy79xLBJZX8lxzPYAJZWki98z4KRwiRmAJHRJKa gYrfj+0ZJgIrcsVbq1AkBKMZ9Xe4Gi25Zm3BSzn+dkPP6UPChDbpE8pcEGmiDlMs AeUp5zPQcImI8owezMLpKOTPDuTDVbDAx53AQ7xTJDGxFRvcX373uq92Pp8Zciqz gCtaQWMIUfGn+wkCKdxuTkd0Fs8sutvDA8YFgQuOXJI4msh83E2ihysef+UTCVDa x6WJ/SVC/847kYAahrZKu6FFmVN/KxAcLXhYQ614kfQVQMnRD/lwCExVMHQ6Uqrk 7BM6WSNLpHZqXOHNY7QapbNA8w== -----END CERTIFICATE-----Generated at Fri Jul 24 13:41:38 2026 by rpki-client