$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: lHdBDKRIkX0Lu/xGXAtds1yuxRaJHaxqa/HIX/vr8+g= Subject key identifier: 20:04:C0:F4:EA:16:4D:4C:1C:6D:74:EA:AD:3C:A8:0E:BE:83:94:EC Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 0497 Signing time: Thu 23 Jul 2026 00:51:01 +0000 Manifest this update: Thu 23 Jul 2026 00:51:00 +0000 Manifest next update: Thu 30 Jul 2026 00:51:00 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: D0IhzGQzJ+N+vNns/d49NVVge+iOc34UTj/EXErURP8=) 2: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) 3: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Jul 23 00:51:00 2026 GMT Not After : Jul 30 00:51:00 2026 GMT Subject: CN=6a616575-4e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:ad:dd:d2:50:e1:8e:97:fd:a3:dc:16:37: 03:df:ba:39:48:3b:90:c5:7e:99:57:34:54:4d:1b: 4b:f4:cb:5e:ac:aa:34:08:bc:ae:71:7b:81:f0:a5: e6:c6:4d:a5:49:0e:d7:a0:2d:88:27:d6:00:6a:25: a4:26:e9:f2:cc:88:4e:99:ef:90:b8:85:8a:e4:49: 22:03:d6:8e:fb:88:b1:34:18:e7:6a:af:04:f1:41: cb:b2:4a:4e:5e:50:62:2b:de:cc:82:6a:ce:73:a9: 58:09:dc:77:38:ec:58:7f:90:15:3b:b0:94:99:98: 5f:39:47:3d:2c:dc:f5:ab:ce:d5:30:93:a9:36:08: ca:64:2c:ef:c8:63:08:9b:fe:8a:12:4f:1e:d3:b2: 2d:9c:14:c1:d3:a1:b3:34:3b:a7:fc:6e:16:1c:5f: 11:8c:fd:94:2d:23:93:d9:4f:a2:07:8a:4a:5c:c0: 34:e3:6f:22:f0:ea:cb:d4:81:fd:a5:82:3d:e0:8b: c9:d1:0f:65:6e:7f:8b:46:e3:83:c0:1f:13:e8:11: 4c:63:2e:e5:5d:bd:99:91:af:14:06:2f:7d:23:d9: b7:42:21:15:9d:e2:9d:6b:1c:e4:b7:60:fd:95:a6: 89:cb:e6:bd:2c:85:2b:e9:27:3b:3a:92:41:a6:1d: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:04:C0:F4:EA:16:4D:4C:1C:6D:74:EA:AD:3C:A8:0E:BE:83:94:EC X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b5:39:0f:27:5b:31:9e:fc:da:db:8b:45:d5:8e:f3:86:3a: e3:71:24:1a:24:5e:e7:23:7e:9e:22:57:cf:8c:e5:c5:75:25: 31:d4:07:ec:2f:ed:53:e6:1a:f3:63:67:29:0a:61:86:d5:5c: 6e:a7:8a:28:3e:95:d3:88:dd:c7:61:a8:cb:fe:f5:fd:ab:b1: 13:bf:ca:55:23:9f:46:bd:6c:62:7a:59:9f:cc:ae:1c:fb:f0: 54:2b:67:8a:01:b0:32:a6:15:1e:10:49:f6:b4:e3:36:f9:ca: 43:50:98:5d:08:8f:0c:d4:57:a3:9e:3c:ed:7e:c4:57:9c:6c: 8f:65:da:9b:9c:4e:5a:8d:7f:30:96:2b:c8:cc:a0:dd:6b:fc: fb:13:fd:1f:25:7b:06:fe:3d:44:0e:0f:aa:7f:8e:07:9c:d3: d0:cd:0b:4b:2e:47:7d:d7:ac:fb:98:88:19:e3:aa:17:c9:30: b9:ab:ac:86:b9:21:88:55:3c:f6:f5:0f:26:b2:b2:4e:bb:50: 5e:ec:a2:83:fd:e2:12:c3:55:88:0a:e0:aa:29:d7:04:d7:33: 00:86:59:6a:9f:9b:30:98:9d:c2:c9:b8:b8:1d:75:09:d5:d1: 09:88:51:39:59:e6:c3:65:9a:92:1c:db:d6:71:d9:3c:ba:c5: 8b:10:14:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYwNzIzMDA1MTAwWhcNMjYwNzMwMDA1MTAwWjAYMRYwFAYD VQQDEw02YTYxNjU3NS00ZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1Ct3dJQ4Y6X/aPcFjcD37o5SDuQxX6ZVzRUTRtL9MterKo0CLyucXuB8KXm xk2lSQ7XoC2IJ9YAaiWkJunyzIhOme+QuIWK5EkiA9aO+4ixNBjnaq8E8UHLskpO XlBiK97MgmrOc6lYCdx3OOxYf5AVO7CUmZhfOUc9LNz1q87VMJOpNgjKZCzvyGMI m/6KEk8e07ItnBTB06GzNDun/G4WHF8RjP2ULSOT2U+iB4pKXMA0428i8OrL1IH9 pYI94IvJ0Q9lbn+LRuODwB8T6BFMYy7lXb2Zka8UBi99I9m3QiEVneKdaxzkt2D9 laaJy+a9LIUr6Sc7OpJBph3RNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAEwPTq Fk1MHG106q08qA6+g5TsMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhbU5DydbMZ782tuLRdWO84Y643EkGiRe5yN+niJXz4zlxXUlMdQH7C/tU+Ya 82NnKQphhtVcbqeKKD6V04jdx2Goy/71/auxE7/KVSOfRr1sYnpZn8yuHPvwVCtn igGwMqYVHhBJ9rTjNvnKQ1CYXQiPDNRXo5487X7EV5xsj2Xam5xOWo1/MJYryMyg 3Wv8+xP9HyV7Bv49RA4Pqn+OB5zT0M0LSy5Hfdes+5iIGeOqF8kwuaushrkhiFU8 9vUPJrKyTrtQXuyig/3iEsNViArgqinXBNczAIZZap+bMJidwsm4uB11CdXRCYhR OVnmw2Wakhzb1nHZPLrFixAUiQ== -----END CERTIFICATE-----Generated at Fri Jul 24 07:02:41 2026 by rpki-client