$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json) Hash identifier: LnBVa/3vQJg7QNa6zLbnueMMb9PcLT2tuZiY8cfFvpI= Subject key identifier: E5:A3:DF:29:9F:9E:26:6C:83:10:C2:75:49:68:A9:5E:07:A9:B5:BA Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft Manifest number: 0518 Signing time: Thu 23 Jul 2026 00:29:01 +0000 Manifest this update: Thu 23 Jul 2026 00:29:01 +0000 Manifest next update: Thu 30 Jul 2026 00:29:01 +0000 Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: oyK5ZVP+2GNWiSVS5fnmq4b4YC4n3ZlX+FrIdUZOQHA=) 2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: PglW3T12IKlMircnLLUZ33j6kRlzVW56A2kCHbmh2rY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Validity Not Before: Jul 23 00:29:01 2026 GMT Not After : Jul 30 00:29:01 2026 GMT Subject: CN=6a61604d-d7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:d6:e3:4a:ef:bf:35:dd:c2:71:b6:c8:ae: 75:a8:28:0b:af:17:b5:f7:01:1f:46:ed:a8:c1:24: 6f:03:d2:1b:d5:92:9c:f1:78:f5:32:a6:00:02:92: de:cd:cf:9d:20:38:9e:89:b3:04:88:e2:ed:06:84: 3a:61:3d:96:41:b9:f1:73:47:84:11:36:57:82:1c: 7d:1c:ba:11:23:2f:8d:05:2e:29:13:6c:61:14:5c: 13:63:b7:62:4a:56:b2:ad:7d:fa:3a:11:a4:f7:fe: 1b:ac:0b:c3:0a:a2:98:54:23:cd:02:c3:33:84:a6: 4f:8e:d3:77:50:41:65:46:38:70:85:f1:85:18:60: c3:52:89:51:5e:27:b2:db:41:65:9a:bf:92:71:32: 4d:64:d3:00:9c:4b:34:e9:d6:89:dd:3d:f0:b2:2e: e3:f0:68:43:69:a9:63:7f:cc:e1:0d:d8:69:05:04: 5b:c9:fe:9c:7a:50:31:57:34:59:81:67:8c:8f:de: 4c:aa:2c:f7:c7:fe:1a:36:82:2a:48:26:b6:0c:51: 42:4b:30:62:7d:af:5e:9c:24:ac:dc:fe:8c:3c:7b: 92:80:22:c7:fa:e0:48:6e:fc:27:fc:1c:d9:e2:05: 6e:c4:70:76:a4:9e:7c:b9:99:e1:86:90:68:10:f7: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A3:DF:29:9F:9E:26:6C:83:10:C2:75:49:68:A9:5E:07:A9:B5:BA X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:31:eb:f1:e4:73:a9:ee:73:54:c0:ed:12:a9:0d:da:ed:ae: 31:d9:34:10:c9:ac:48:1a:cb:e3:15:77:13:a1:5b:69:64:0a: b8:6a:50:b3:52:d1:43:05:ac:85:48:92:74:4c:51:51:e1:e8: ab:39:6c:5b:bc:a6:0b:29:93:80:dc:5c:8c:73:a4:64:27:53: e1:a4:f9:15:1b:82:49:b5:e1:aa:96:4d:68:3b:2a:9c:7e:c2: 43:37:0d:28:0f:00:28:b3:65:6f:99:db:9d:b9:17:53:ea:5e: 66:e7:cc:e1:45:98:d7:59:73:69:cd:d3:7f:0e:b8:4d:ba:8f: 26:10:94:d1:aa:1d:f7:fb:b9:3e:7f:d1:90:ab:f1:05:89:01: 69:c1:29:57:6f:d8:5c:e7:0a:19:e1:6b:7d:fa:86:26:65:e1: 8d:e0:39:ba:c1:7b:69:53:00:db:78:2f:ec:fd:8b:79:06:b3: 14:cb:b8:54:80:20:5c:37:88:d4:51:61:60:33:ef:e1:cd:4a: ca:cd:c4:1b:57:b1:d4:fc:0a:ea:a9:69:b4:da:f8:92:a0:81: 8e:7f:b5:43:37:ef:a0:a3:7b:e3:3e:d9:f5:9d:2b:d2:b1:90: 76:17:b9:10:fe:f9:91:7e:2a:e5:3f:2a:9f:61:3c:35:dd:4d: 9a:91:94:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjYwNzIzMDAyOTAxWhcNMjYwNzMwMDAyOTAxWjAYMRYwFAYD VQQDEw02YTYxNjA0ZC1kN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXnW40rvvzXdwnG2yK51qCgLrxe19wEfRu2owSRvA9Ib1ZKc8Xj1MqYAApLe zc+dIDieibMEiOLtBoQ6YT2WQbnxc0eEETZXghx9HLoRIy+NBS4pE2xhFFwTY7di SlayrX36OhGk9/4brAvDCqKYVCPNAsMzhKZPjtN3UEFlRjhwhfGFGGDDUolRXiey 20Flmr+ScTJNZNMAnEs06daJ3T3wsi7j8GhDaaljf8zhDdhpBQRbyf6celAxVzRZ gWeMj95Mqiz3x/4aNoIqSCa2DFFCSzBifa9enCSs3P6MPHuSgCLH+uBIbvwn/BzZ 4gVuxHB2pJ58uZnhhpBoEPf7KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWj3ymf niZsgxDCdUloqV4HqbW6MB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTkxQi83RDBDMzdEMDYwNDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25H NnpPR2VweklyTTFfczJUb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASDHr8eRzqe5zVMDtEqkN2u2uMdk0EMmsSBrL4xV3E6FbaWQKuGpQs1LRQwWs hUiSdExRUeHoqzlsW7ymCymTgNxcjHOkZCdT4aT5FRuCSbXhqpZNaDsqnH7CQzcN KA8AKLNlb5nbnbkXU+peZufM4UWY11lzac3Tfw64TbqPJhCU0aod9/u5Pn/RkKvx BYkBacEpV2/YXOcKGeFrffqGJmXhjeA5usF7aVMA23gv7P2LeQazFMu4VIAgXDeI 1FFhYDPv4c1Kys3EG1ex1PwK6qlptNr4kqCBjn+1QzfvoKN74z7Z9Z0r0rGQdhe5 EP75kX4q5T8qn2E8Nd1NmpGUiw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:37:51 2026 by rpki-client