$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: WzLhzNVjHpxS2ldv417Nb98CFpVoGPnFwS7a/yvN00s= Subject key identifier: F1:29:CA:F7:D2:24:AA:79:48:51:5E:12:97:F0:C4:83:A9:06:3E:F0 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0B98 Signing time: Wed 22 Jul 2026 19:25:54 +0000 Manifest this update: Wed 22 Jul 2026 19:25:54 +0000 Manifest next update: Wed 29 Jul 2026 19:25:54 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: wpJy67Z471pGBxKYZSZ5jVjKSr4EaGVTS0ge/v5hgnE=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: ShVKBDsZHucxua11jITqEB/zC8bAit+Mc5m8VG1vvj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2980 (0xba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Jul 22 19:25:54 2026 GMT Not After : Jul 29 19:25:54 2026 GMT Subject: CN=6a611942-cad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:6e:f5:15:ac:f3:95:3e:35:53:53:6d:99: 5e:82:ad:bc:71:62:45:c3:e4:d1:be:53:32:ed:9d: b0:33:3d:f9:db:f8:c7:94:c0:aa:cc:f6:b1:76:75: 40:b8:0a:8f:dd:49:5a:0c:c9:f2:8a:f6:87:b3:ad: 56:eb:f5:ee:ed:96:57:23:ae:bb:19:f3:88:b2:f5: d2:17:1e:c9:47:d2:a1:de:b9:39:57:5b:de:3e:2a: fe:a1:a3:1c:83:ee:4c:03:13:ad:e9:7d:11:b6:b6: 55:f4:b6:14:08:bb:e0:ce:bb:fb:1e:78:bf:1a:f5: e9:3d:f4:86:0c:17:f9:6a:d9:d0:18:16:69:7c:b6: 99:bb:bc:2c:7b:c7:b4:07:76:e2:e1:4b:b5:60:b5: 05:bc:3e:31:cd:49:ab:d7:8f:bc:93:87:a6:b1:9a: a3:80:21:c4:f0:55:2b:b6:3c:25:78:5e:87:38:cc: 60:24:04:40:60:81:9e:96:47:90:ac:62:59:a2:5b: 3e:0a:4d:82:ec:75:f4:35:57:9c:34:8f:54:cd:c4: 90:34:8a:22:21:5f:f2:25:af:ca:d3:22:83:49:8b: 83:c3:78:13:17:8f:ab:ec:c8:5f:61:7a:10:d7:ac: db:e3:ca:c1:41:9e:92:24:4c:16:f7:92:98:63:a6: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:29:CA:F7:D2:24:AA:79:48:51:5E:12:97:F0:C4:83:A9:06:3E:F0 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d6:64:e5:dd:ea:49:4e:a5:91:dc:6b:b3:3e:55:22:78:a2: 07:41:86:86:85:c4:07:79:6b:02:94:d0:8a:0f:46:08:f4:75: 0f:f2:9c:6c:42:18:11:3d:23:0c:f8:a7:63:0b:71:16:82:43: 00:85:be:07:f9:be:23:c5:1e:72:94:67:de:5f:b9:9d:6b:c8: 60:58:93:ef:eb:71:3b:41:8b:14:3f:83:77:01:74:8d:06:c8: 03:b7:77:c2:6c:60:f6:f3:ce:81:3b:15:0a:42:5d:36:c9:7d: 87:1b:82:6c:57:ed:38:27:9b:be:0c:bb:1f:dd:3c:34:69:f8: d9:58:40:cb:b7:54:5e:d6:b1:26:f4:9e:88:ad:f4:82:5d:7f: e8:9e:92:f1:3f:01:32:bb:fb:62:64:75:36:50:ae:72:32:6f: 44:08:b8:62:c0:93:c3:a6:d4:87:26:36:a6:e3:15:f6:78:f4: 84:ed:2c:32:0d:9a:1e:1f:3f:7e:e5:18:d9:ce:4f:32:88:c9: f7:84:3b:44:75:6a:79:35:51:9f:09:c1:f4:26:b3:ca:9e:f1: 06:55:11:da:c1:37:bf:87:1a:f7:88:c4:66:b5:be:57:df:48: 1b:e7:41:35:d2:ea:0c:61:76:70:fd:5a:05:d5:de:62:1b:f2: 84:d2:60:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjYwNzIyMTkyNTU0WhcNMjYwNzI5MTkyNTU0WjAYMRYwFAYD VQQDEw02YTYxMTk0Mi1jYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVJu9RWs85U+NVNTbZlegq28cWJFw+TRvlMy7Z2wMz352/jHlMCqzPaxdnVA uAqP3UlaDMnyivaHs61W6/Xu7ZZXI667GfOIsvXSFx7JR9Kh3rk5V1vePir+oaMc g+5MAxOt6X0RtrZV9LYUCLvgzrv7Hni/GvXpPfSGDBf5atnQGBZpfLaZu7wse8e0 B3bi4Uu1YLUFvD4xzUmr14+8k4emsZqjgCHE8FUrtjwleF6HOMxgJARAYIGelkeQ rGJZols+Ck2C7HX0NVecNI9UzcSQNIoiIV/yJa/K0yKDSYuDw3gTF4+r7MhfYXoQ 16zb48rBQZ6SJEwW95KYY6ZdNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEpyvfS JKp5SFFeEpfwxIOpBj7wMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMdZk5d3qSU6lkdxrsz5VIniiB0GGhoXEB3lrApTQig9GCPR1D/KcbEIYET0j DPinYwtxFoJDAIW+B/m+I8UecpRn3l+5nWvIYFiT7+txO0GLFD+DdwF0jQbIA7d3 wmxg9vPOgTsVCkJdNsl9hxuCbFftOCebvgy7H908NGn42VhAy7dUXtaxJvSeiK30 gl1/6J6S8T8BMrv7YmR1NlCucjJvRAi4YsCTw6bUhyY2puMV9nj0hO0sMg2aHh8/ fuUY2c5PMojJ94Q7RHVqeTVRnwnB9Cazyp7xBlUR2sE3v4ca94jEZrW+V99IG+dB NdLqDGF2cP1aBdXeYhvyhNJgkQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:58:35 2026 by rpki-client