$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft File: IRoCHoq99NvyBwgibMgyj9JBMd8.mft (raw, json) Hash identifier: Av5c6iSeUyXOjl1gyeXSQ7KsUCIkTC2Usb5fnVkwjfM= Subject key identifier: D9:53:4E:30:B0:B6:48:85:36:5A:FF:6E:89:95:96:49:C2:A6:78:5E Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft Manifest number: 014B Signing time: Thu 23 Jul 2026 06:57:27 +0000 Manifest this update: Thu 23 Jul 2026 06:57:26 +0000 Manifest next update: Thu 30 Jul 2026 06:57:26 +0000 Files and hashes: 1: IRoCHoq99NvyBwgibMgyj9JBMd8.crl (hash: L6CcbmKvUMI4wZLnNeGIACgIbXvJ22vPtjXSAlGwc38=) 2: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (hash: F5fxp0etukBOn3CKrqqukvD42srMqVoYQvkoxd9V4Hk=) 3: 00926CA2D41F11F092947183C4F9AE02.roa (hash: wqkUfeM+QKVS8qmAEVsiC5c7QZ1bu80LeTA1QCGTnpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Validity Not Before: Jul 23 06:57:26 2026 GMT Not After : Jul 30 06:57:26 2026 GMT Subject: CN=6a61bb57-93db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:af:e1:a8:1c:31:79:0e:fe:4a:a7:64:fe: 20:34:2b:f5:59:a8:23:89:ff:d5:5f:59:f3:81:8c: b3:e8:6a:7b:12:bf:fd:dc:41:ae:9b:47:e0:6c:c2: f5:fe:83:c8:ce:3a:e3:45:2f:8d:ea:b7:0a:65:cf: 7e:0f:35:01:b2:43:df:1c:d2:e7:c8:0a:d8:49:3d: fc:4f:f8:aa:91:24:5d:38:48:73:21:e6:2c:e8:87: 57:34:52:3f:46:57:98:cc:96:1f:98:7a:73:01:df: f7:54:fd:f0:c2:52:49:f6:a9:5d:51:63:d6:bf:4d: 06:52:d9:7b:03:d5:03:b2:02:24:25:06:a1:a7:d1: dd:fb:46:55:85:67:8d:6c:e8:ad:7c:b6:e0:68:4c: 0d:9e:4c:03:97:77:5c:97:98:e4:04:04:4c:2a:2f: d3:d6:76:80:28:17:71:b9:37:75:5c:99:bc:b0:ce: b7:62:94:a4:9e:d7:bd:78:ca:21:1f:8e:ee:89:43: d5:bf:53:8e:9a:31:a9:49:eb:f1:c3:01:2f:2f:f9: 77:0f:a5:00:72:75:02:74:d5:6b:80:b6:6b:be:d0: 9d:9c:b5:b5:3e:ab:02:9a:c7:47:f9:53:6f:46:6f: 3c:83:f3:3c:62:55:0e:f4:13:63:7f:38:53:75:ed: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:53:4E:30:B0:B6:48:85:36:5A:FF:6E:89:95:96:49:C2:A6:78:5E X509v3 Authority Key Identifier: keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fe:1e:a8:25:66:a5:38:15:7a:17:f2:d4:11:b5:99:59:b7: b7:eb:c7:6f:f2:86:18:0e:c0:b1:e8:c7:5b:ad:d9:02:05:a8: af:87:95:1a:42:d6:33:ee:76:61:34:dd:28:69:5c:96:da:ec: c2:fa:ec:00:a4:e9:79:3f:92:2d:10:bc:1b:0a:b9:cf:80:62: ca:40:ff:8c:b0:ce:ad:17:20:c5:34:99:16:b6:1b:72:87:cd: 01:cb:4b:10:c3:92:76:c5:2a:06:d7:f5:f4:5b:97:75:54:f9: 7d:c4:2d:59:2c:32:26:cd:ce:cd:9f:e7:5e:84:b9:29:6e:a4: 40:26:7e:52:a9:7a:13:14:16:d5:be:2a:09:e4:f2:12:92:66: dd:a8:e7:df:3c:1a:4e:7e:c0:6b:01:9d:0c:9a:e4:69:c8:69: ac:15:d1:3f:c3:ed:fc:03:a9:aa:7c:01:fa:8e:f0:f6:c0:1a: cd:c8:a6:71:a5:e0:71:b9:3c:39:05:72:57:4d:c1:72:12:35: 9a:73:a3:6f:e3:4a:8c:2c:6c:27:35:12:d4:20:77:41:18:13: 11:c3:69:6a:83:59:71:cb:37:ad:e0:9f:6a:22:1c:fb:b3:21: bb:14:a3:4d:5c:16:bb:7c:06:bc:d4:d6:de:41:d4:43:2d:e4: 2e:f5:23:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG RDI0MTMxREYwHhcNMjYwNzIzMDY1NzI2WhcNMjYwNzMwMDY1NzI2WjAYMRYwFAYD VQQDEw02YTYxYmI1Ny05M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe2v4agcMXkO/kqnZP4gNCv1Wagjif/VX1nzgYyz6Gp7Er/93EGum0fgbML1 /oPIzjrjRS+N6rcKZc9+DzUBskPfHNLnyArYST38T/iqkSRdOEhzIeYs6IdXNFI/ RleYzJYfmHpzAd/3VP3wwlJJ9qldUWPWv00GUtl7A9UDsgIkJQahp9Hd+0ZVhWeN bOitfLbgaEwNnkwDl3dcl5jkBARMKi/T1naAKBdxuTd1XJm8sM63YpSknte9eMoh H47uiUPVv1OOmjGpSevxwwEvL/l3D6UAcnUCdNVrgLZrvtCdnLW1PqsCmsdH+VNv Rm88g/M8YlUO9BNjfzhTde3wFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlTTjCw tkiFNlr/bomVlknCpnheMB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FMTYzODkxMDlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlO dnlCd2dpYk1neWo5SkJNZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFv4eqCVmpTgVehfy1BG1mVm3t+vHb/KGGA7AsejHW63ZAgWor4eVGkLWM+52 YTTdKGlcltrswvrsAKTpeT+SLRC8Gwq5z4BiykD/jLDOrRcgxTSZFrYbcofNActL EMOSdsUqBtf19FuXdVT5fcQtWSwyJs3OzZ/nXoS5KW6kQCZ+Uql6ExQW1b4qCeTy EpJm3ajn3zwaTn7AawGdDJrkachprBXRP8Pt/AOpqnwB+o7w9sAazcimcaXgcbk8 OQVyV03BchI1mnOjb+NKjCxsJzUS1CB3QRgTEcNpaoNZccs3reCfaiIc+7MhuxSj TVwWu3wGvNTW3kHUQy3kLvUj0A== -----END CERTIFICATE-----Generated at Fri Jul 24 17:13:09 2026 by rpki-client