$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: Qt+va4lfY5DFsIThurW97cVjhRDCkWU/2xURIfaaflc= Subject key identifier: F6:3D:27:34:13:4D:03:0F:9C:F8:95:95:24:74:89:FA:EB:74:C2:16 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DB1 Signing time: Wed 22 Jul 2026 16:12:58 +0000 Manifest this update: Wed 22 Jul 2026 16:12:57 +0000 Manifest next update: Wed 29 Jul 2026 16:12:57 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: ZYy1z7eIFSRMdK6KMQZt6PPchk6S4VUra2k7L/K3JRc=) 2: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: FZUA9ujh5y+qedLhZYHjBMCqwCiia7dWK5HBk6r/R3A=) 3: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: OyJ386kUL4gGWlM9zenD8Or9GBx/nawzJcbJiadjXEs=) 4: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64=) 5: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=) 6: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: /vJS5mvYoaeQ7e5TPVVBx64c5yOqiYznmnqStY9GYWY=) 7: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: syfI5VBGCCOaxinq66/rQy0KiVO/nQZm82G8XJ0s/uQ=) 8: D1A879DA769011F18B30BBE765A30FBC.roa (hash: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=) 9: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=) 10: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: Ruxh9vs1IEEY8sUgeoqbiAjkOA3NIO1oE49c/aSiPyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7751 (0x1e47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Jul 22 16:12:57 2026 GMT Not After : Jul 29 16:12:57 2026 GMT Subject: CN=6a60ec0a-2852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:ef:b9:38:4f:af:a5:b0:69:ea:11:98:a3: 5f:dd:9b:d5:db:18:bd:51:f7:0b:c6:69:c2:8c:27: 82:74:23:9b:8c:19:a4:dc:ab:37:ca:7e:f9:62:b3: 74:9c:dd:c3:1b:e8:f9:de:b9:5e:f0:1f:6e:4c:5b: 78:cb:a5:fb:0f:79:31:7e:13:b0:62:3e:80:c2:14: 91:a7:ec:45:66:bb:f1:9a:89:e7:2b:7a:d0:fc:9a: ef:07:cb:cd:fc:f8:03:70:e1:6a:3f:2d:9a:5f:b4: 1e:9e:6a:7d:f9:5a:1d:c8:02:f9:95:54:70:ed:a9: 38:6b:c1:24:da:ca:04:07:db:d2:f2:01:ea:e4:86: c6:ef:fc:0d:95:17:4f:d6:b6:7e:75:18:4b:67:ab: 16:19:a4:d5:ec:1f:83:83:9d:df:bd:57:12:78:b5: d1:da:22:89:c7:f6:f5:2b:47:09:b9:4e:6f:d2:5d: 5e:93:0d:3f:0c:a9:3f:9a:81:01:ca:c4:80:6d:32: ed:e3:cb:20:fa:a0:72:5b:5c:33:4b:56:4d:e8:22: 01:3d:f6:6b:77:c5:c1:c1:69:af:e6:e6:7a:00:41: 57:71:b1:1a:53:66:e0:9b:d6:6e:b9:0d:4f:7a:80: dc:38:a3:04:7d:62:cb:8d:f9:52:d2:ee:ba:bc:95: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3D:27:34:13:4D:03:0F:9C:F8:95:95:24:74:89:FA:EB:74:C2:16 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:99:8f:ed:57:f3:ce:4a:82:f9:92:ba:6d:e9:12:42:9c:ab: 78:dc:29:87:07:58:a5:27:a2:4b:fc:3c:95:d0:af:a2:aa:b1: cb:95:8a:fb:9f:3a:c9:56:73:26:58:13:af:ff:80:f6:b4:e8: 62:63:3c:d9:4c:98:ad:81:b5:a7:0d:be:29:52:97:a6:c4:cc: c4:9d:8f:7f:42:12:bf:6a:49:dc:a6:31:95:62:cf:8b:00:77: cb:10:de:b2:0f:d4:05:dc:d7:ee:9b:3c:dc:ab:ac:de:ce:7d: 1e:dd:84:4e:d8:87:43:a9:09:6c:e7:bd:01:ee:3f:66:5d:60: a1:52:81:e4:69:79:93:0b:bb:f7:e2:f1:98:cb:e0:fb:3d:b9: a0:a6:ff:ee:6d:93:8a:54:d5:9e:8e:18:3d:24:7c:f2:58:cf: fc:ab:62:25:20:64:3a:05:6d:c1:b8:7d:73:da:a9:d1:b9:2d: ba:8e:21:b8:c4:de:1c:e4:a7:1c:d4:0c:32:0a:96:5d:1a:d1: 1e:b7:84:b7:f3:9a:6b:34:69:6f:98:dd:07:98:18:4f:d7:0f: e5:e4:ea:dd:c5:c9:ff:fe:c4:21:97:36:e5:bf:fc:76:8e:1d: ba:34:89:6e:85:88:b0:5c:73:2f:e9:11:bc:10:25:c3:9a:97: 13:b4:d7:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwNzIyMTYxMjU3WhcNMjYwNzI5MTYxMjU3WjAYMRYwFAYD VQQDEw02YTYwZWMwYS0yODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1trvuThPr6WwaeoRmKNf3ZvV2xi9UfcLxmnCjCeCdCObjBmk3Ks3yn75YrN0 nN3DG+j53rle8B9uTFt4y6X7D3kxfhOwYj6AwhSRp+xFZrvxmonnK3rQ/JrvB8vN /PgDcOFqPy2aX7Qenmp9+VodyAL5lVRw7ak4a8Ek2soEB9vS8gHq5IbG7/wNlRdP 1rZ+dRhLZ6sWGaTV7B+Dg53fvVcSeLXR2iKJx/b1K0cJuU5v0l1ekw0/DKk/moEB ysSAbTLt48sg+qByW1wzS1ZN6CIBPfZrd8XBwWmv5uZ6AEFXcbEaU2bgm9ZuuQ1P eoDcOKMEfWLLjflS0u66vJWZ0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPY9JzQT TQMPnPiVlSR0ifrrdMIWMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5mP7VfzzkqC+ZK6bekSQpyreNwphwdYpSeiS/w8ldCvoqqxy5WK+586yVZz JlgTr/+A9rToYmM82UyYrYG1pw2+KVKXpsTMxJ2Pf0ISv2pJ3KYxlWLPiwB3yxDe sg/UBdzX7ps83Kus3s59Ht2ETtiHQ6kJbOe9Ae4/Zl1goVKB5Gl5kwu79+LxmMvg +z25oKb/7m2TilTVno4YPSR88ljP/KtiJSBkOgVtwbh9c9qp0bktuo4huMTeHOSn HNQMMgqWXRrRHreEt/OaazRpb5jdB5gYT9cP5eTq3cXJ//7EIZc25b/8do4dujSJ boWIsFxzL+kRvBAlw5qXE7TXew== -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:54 2026 by rpki-client