$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: ypNoLzYeZ4hl6IGYI1ZkGHPZi3c1fCzO4rHWz3Fg1Lk= Subject key identifier: 17:B2:71:EE:98:9C:22:9F:21:1D:5A:FD:1E:2E:29:30:C1:BF:F5:2A Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1737 Signing time: Wed 22 Jul 2026 16:42:56 +0000 Manifest this update: Wed 22 Jul 2026 16:42:55 +0000 Manifest next update: Wed 29 Jul 2026 16:42:55 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: 6WWpsdzEKXFad1dUaxrh7I6+vb/gGgw1jGsV31E0RBU=) 2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=) 3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=) 4: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5972 (0x1754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Jul 22 16:42:55 2026 GMT Not After : Jul 29 16:42:55 2026 GMT Subject: CN=6a60f310-524a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:09:81:75:4a:6b:71:31:c5:61:b1:1e:e7: e4:55:ac:32:57:cd:bf:27:79:b8:c4:07:61:e8:d2: a2:25:3c:c9:9b:72:e1:8b:19:35:92:7a:9c:5a:4c: d4:13:13:4c:5e:28:84:ef:3f:ca:c4:d9:16:f6:24: c6:ec:7b:5b:00:f6:b7:e8:f0:9e:72:07:ba:16:58: 53:ad:86:14:fe:b0:bf:b2:2e:3a:63:cf:97:6f:f7: 16:46:c1:5b:7f:90:5c:f5:41:58:b0:cc:06:62:be: 43:b4:1c:ec:2e:7c:af:31:6d:78:1a:9b:7e:fe:bc: 6b:ff:7f:97:62:40:4e:ee:05:d9:0c:cc:38:cd:88: 3a:e9:1f:00:26:3e:26:c8:3d:35:8c:cd:04:f3:bc: cc:23:4b:2a:a8:44:9d:12:5c:16:f8:6e:46:53:35: c4:d0:db:06:b2:d1:0d:07:f6:53:23:71:7d:95:a1: eb:27:a5:e8:fa:be:c0:68:ba:66:61:90:0e:de:0b: bb:97:b9:6e:e2:31:29:e3:98:00:92:cf:b8:d1:9a: 34:a9:70:19:55:b2:2b:c5:bd:02:e8:b0:e2:54:8d: 91:9d:5a:cb:b6:6e:04:f9:9c:cc:c4:15:49:82:49: 7b:cf:d3:d5:f8:30:aa:ea:76:5d:f6:89:de:28:16: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:71:EE:98:9C:22:9F:21:1D:5A:FD:1E:2E:29:30:C1:BF:F5:2A X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:19:cd:32:00:b5:8d:7c:ac:b1:33:49:0e:95:dd:7b:e1:88: f2:c1:86:7c:45:c5:19:7d:88:60:e6:40:b0:7b:25:df:6a:ae: 37:74:9f:a3:99:1b:77:93:1e:92:05:81:dc:18:f6:04:61:1f: a0:ff:1f:55:4d:93:7f:a5:8c:74:ad:dd:02:0e:3b:51:9e:c1: 88:de:5a:3e:05:69:49:6c:63:30:73:55:e5:59:2b:e4:95:a6: a0:43:d6:70:08:53:d4:78:50:53:79:4e:53:0b:c2:ee:c6:71: 18:61:c8:6a:e9:5e:28:d9:92:16:57:cb:4c:27:ba:82:da:31: d3:fb:82:fa:50:f2:7b:a4:93:2e:5e:0d:93:87:af:e7:fa:11: d6:cd:b2:ca:eb:cd:f4:da:9f:4e:c9:c6:34:3c:26:27:02:77: 2c:06:6e:11:a4:08:f3:1d:fe:25:45:a9:bb:f0:b4:55:7b:d2: e3:e1:ed:5e:5e:78:1f:94:cb:f9:76:66:a0:7a:bd:d3:0e:30: ea:9a:08:61:f9:30:3f:33:39:50:6b:11:b7:fc:42:61:bc:3f: cc:f4:89:bb:29:49:c4:bb:c9:f0:37:12:ad:91:fb:b4:b6:cf: 9d:74:1c:b1:8f:22:85:44:09:6b:64:9a:c9:36:b1:be:f5:5d: 41:f6:b7:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwNzIyMTY0MjU1WhcNMjYwNzI5MTY0MjU1WjAYMRYwFAYD VQQDEw02YTYwZjMxMC01MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3oJgXVKa3ExxWGxHufkVawyV82/J3m4xAdh6NKiJTzJm3Lhixk1knqcWkzU ExNMXiiE7z/KxNkW9iTG7HtbAPa36PCecge6FlhTrYYU/rC/si46Y8+Xb/cWRsFb f5Bc9UFYsMwGYr5DtBzsLnyvMW14Gpt+/rxr/3+XYkBO7gXZDMw4zYg66R8AJj4m yD01jM0E87zMI0sqqESdElwW+G5GUzXE0NsGstENB/ZTI3F9laHrJ6Xo+r7AaLpm YZAO3gu7l7lu4jEp45gAks+40Zo0qXAZVbIrxb0C6LDiVI2RnVrLtm4E+ZzMxBVJ gkl7z9PV+DCq6nZd9oneKBYg+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeyce6Y nCKfIR1a/R4uKTDBv/UqMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhBnNMgC1jXyssTNJDpXde+GI8sGGfEXFGX2IYOZAsHsl32quN3Sfo5kbd5Me kgWB3Bj2BGEfoP8fVU2Tf6WMdK3dAg47UZ7BiN5aPgVpSWxjMHNV5Vkr5JWmoEPW cAhT1HhQU3lOUwvC7sZxGGHIauleKNmSFlfLTCe6gtox0/uC+lDye6STLl4Nk4ev 5/oR1s2yyuvN9NqfTsnGNDwmJwJ3LAZuEaQI8x3+JUWpu/C0VXvS4+HtXl54H5TL +XZmoHq90w4w6poIYfkwPzM5UGsRt/xCYbw/zPSJuylJxLvJ8DcSrZH7tLbPnXQc sY8ihUQJa2SayTaxvvVdQfa3iw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:37:03 2026 by rpki-client