$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft (raw, json) Hash identifier: aHzienDUb1WmFqhXjhR/Lq3h+9MVQeWwtW86+Y310Og= Subject key identifier: 14:81:50:95:83:0D:74:BE:2B:89:D8:F5:70:62:1B:16:EE:CB:C6:6F Authority key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 Certificate issuer: /CN=A9195BA9/serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft Manifest number: 0A94 Signing time: Wed 22 Jul 2026 19:55:58 +0000 Manifest this update: Wed 22 Jul 2026 19:55:58 +0000 Manifest next update: Wed 29 Jul 2026 19:55:58 +0000 Files and hashes: 1: IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl (hash: m9Aq3IEBSm0RQtFCVNx/k0P3vUhiTv0+VXwvOtYz6t8=) 2: 54DD69FA839011EAB5B82263C4F9AE02.roa (hash: KvrhkQvnKnpFTYVGWnMJN98DGB3DYDNMGELyZhZWRGk=) 3: 543CDDF0839011EAB5B82263C4F9AE02.roa (hash: LPpHOK81C3pNsWyGa2Q2W3gfstRuGd26hh2KRKuaOPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Validity Not Before: Jul 22 19:55:58 2026 GMT Not After : Jul 29 19:55:58 2026 GMT Subject: CN=6a61204e-3419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:b1:63:67:b4:96:a7:f3:11:99:67:92:d5: 83:bb:df:54:fc:eb:4a:d5:ec:fb:6b:b4:07:00:4b: 47:3b:b5:c1:00:e5:a0:46:46:87:2c:0f:12:29:fd: 49:40:dc:18:f2:75:a5:ef:c2:dc:d6:85:f7:df:0d: ca:82:bb:76:b5:a5:e2:db:44:bd:ef:59:46:70:d7: ff:3c:e4:f3:27:e9:af:d4:9a:ff:c2:80:6a:1d:50: 0a:58:f7:08:59:e5:31:3a:9d:2f:2f:a3:f1:d8:02: bb:eb:6a:5f:c3:d0:81:51:61:ff:4c:56:c0:b6:e7: 5a:1c:52:f1:60:23:ea:19:bb:14:01:49:f1:89:53: 5e:7e:6c:d9:42:8d:92:23:73:14:b5:1d:d8:3b:4a: 6c:11:22:e4:41:df:1c:ef:55:6e:91:1a:5e:10:8a: 4e:4e:cc:07:86:91:83:b8:32:64:62:65:24:ae:08: cd:48:5b:f1:8b:43:e6:f9:fc:48:01:cb:87:7e:a9: 12:54:2b:2b:8e:35:af:b8:be:cd:9a:84:d5:c3:3b: f2:14:b5:4d:53:e9:0d:fa:5b:01:a0:56:19:69:5f: c6:b4:71:93:c0:bf:26:84:ad:4e:0d:2f:59:e3:7d: 71:f0:e1:2e:1b:94:76:7f:e5:b9:14:d0:30:9e:44: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:81:50:95:83:0D:74:BE:2B:89:D8:F5:70:62:1B:16:EE:CB:C6:6F X509v3 Authority Key Identifier: keyid:22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:21:82:10:7c:16:b7:e0:89:0c:9c:74:b9:0d:16:b1:dd:b7: 28:13:c8:f6:97:6b:6d:f1:6e:e2:2a:d0:53:61:60:f6:7f:d2: 5b:97:fb:1c:22:85:b7:6b:39:9c:0b:7e:bf:d4:24:cc:e2:13: f4:2c:0d:62:15:47:32:8c:c5:f8:e6:ee:b5:6b:39:5e:32:54: 0b:4f:e3:d0:f3:04:7d:7f:99:9d:78:05:26:44:82:f5:e8:0c: 90:47:eb:07:22:4c:70:9c:3e:f5:29:0d:67:07:80:3f:8d:8c: d3:0c:ca:e3:f2:d1:50:53:6c:f9:bd:4a:52:70:25:77:8e:17: e0:84:5a:9f:34:f7:62:68:09:96:7f:1d:82:aa:7d:d8:0a:89: 7c:2d:39:24:46:db:ba:e7:4e:66:2a:cd:f1:56:ab:8f:69:d0: 28:d0:8a:ac:23:4a:23:e2:1a:6e:af:03:58:18:73:f5:41:22: 2a:7a:3d:c7:6e:ed:e6:1a:62:0a:34:39:12:31:58:9d:d5:a1: 91:ef:ed:75:76:30:a2:d0:ef:e9:4a:de:ba:be:1e:23:d4:25: 96:ef:58:ec:6a:b8:29:87:56:71:62:c5:8b:d9:36:b4:2c:3c: 6e:11:38:17:c2:a3:3e:e4:2a:66:fe:4b:c7:5d:e8:14:9e:7d: 48:3d:d2:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKDIyNDVBRDkxNTQzQUREQUQ3ODEyM0RENDE1RDY1OUJC NTJENUZCNjIwHhcNMjYwNzIyMTk1NTU4WhcNMjYwNzI5MTk1NTU4WjAYMRYwFAYD VQQDEw02YTYxMjA0ZS0zNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfqxY2e0lqfzEZlnktWDu99U/OtK1ez7a7QHAEtHO7XBAOWgRkaHLA8SKf1J QNwY8nWl78Lc1oX33w3Kgrt2taXi20S971lGcNf/POTzJ+mv1Jr/woBqHVAKWPcI WeUxOp0vL6Px2AK762pfw9CBUWH/TFbAtudaHFLxYCPqGbsUAUnxiVNefmzZQo2S I3MUtR3YO0psESLkQd8c71VukRpeEIpOTswHhpGDuDJkYmUkrgjNSFvxi0Pm+fxI AcuHfqkSVCsrjjWvuL7NmoTVwzvyFLVNU+kN+lsBoFYZaV/GtHGTwL8mhK1ODS9Z 431x8OEuG5R2f+W5FNAwnkSJKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSBUJWD DXS+K4nY9XBiGxbuy8ZvMB8GA1UdIwQYMBaAFCJFrZFUOt2teBI91BXWWbtS1fti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9EODkxNDc4Qzgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNhMTRFajNVRmRaWnUxTFYt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrV3RrVlE2M2ExNEVqM1VGZFpadTFMVi0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9EODkxNDc4QzgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNh MTRFajNVRmRaWnUxTFYtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPiGCEHwWt+CJDJx0uQ0Wsd23KBPI9pdrbfFu4irQU2Fg9n/SW5f7HCKFt2s5 nAt+v9QkzOIT9CwNYhVHMozF+ObutWs5XjJUC0/j0PMEfX+ZnXgFJkSC9egMkEfr ByJMcJw+9SkNZweAP42M0wzK4/LRUFNs+b1KUnAld44X4IRanzT3YmgJln8dgqp9 2AqJfC05JEbbuudOZirN8Varj2nQKNCKrCNKI+Iabq8DWBhz9UEiKno9x27t5hpi CjQ5EjFYndWhke/tdXYwotDv6Ureur4eI9Qllu9Y7Gq4KYdWcWLFi9k2tCw8bhE4 F8KjPuQqZv5Lx13oFJ59SD3SaQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:27:18 2026 by rpki-client