$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: uLGBMMDFYfZyZElnn2b/XppManbOK+dclCCOWrnQXwk= Subject key identifier: C1:F2:04:DD:5B:37:BC:3E:07:9D:4F:D3:CE:84:D6:A2:40:88:66:A7 Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 01E5 Signing time: Thu 23 Jul 2026 04:59:19 +0000 Manifest this update: Thu 23 Jul 2026 04:59:18 +0000 Manifest next update: Thu 30 Jul 2026 04:59:18 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: gHqM9YRoPNKiHbB/QcCxLg7jCabcd/orfugEHvf2ofY=) 2: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) 3: 69EBCB546BAE11F196CCF4747547A888.roa (hash: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E=) 4: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Jul 23 04:59:18 2026 GMT Not After : Jul 30 04:59:18 2026 GMT Subject: CN=6a619fa7-dca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:b8:97:0b:1b:83:af:f1:a5:8c:40:1d:0c: 27:04:ac:2f:88:cf:9c:dc:f3:bf:e0:94:51:2b:d1: f0:64:6a:e0:f7:13:99:c2:5c:65:da:67:eb:a4:06: 79:75:f0:7c:6a:70:16:e4:c8:39:dc:84:cb:f4:51: 19:ad:c5:df:85:74:b6:41:dc:b5:6c:b2:b6:e2:b5: 62:3b:80:36:95:20:f1:dc:b3:2d:fa:aa:e7:e8:c5: 2e:02:a3:0d:8c:fd:44:ee:76:fa:6d:54:08:e3:b8: 6e:88:39:a0:24:a8:b9:5d:25:ed:22:b1:d0:b6:4d: 53:10:19:5d:e7:c4:41:67:7d:0d:9f:0d:02:85:ce: 6c:dd:79:13:e3:9f:a1:1d:ee:66:5f:3d:14:84:db: ae:c6:b7:9c:fd:e2:55:1b:11:6a:6f:70:72:16:46: d6:21:b3:8a:bc:e8:01:45:3f:48:fa:25:e9:f2:c0: fa:23:45:ab:83:e3:10:5d:18:f1:17:d0:8a:7d:44: 7a:ac:6a:1b:05:b9:7d:0e:94:9a:05:7e:d8:6a:5c: 15:b2:c0:66:d5:41:0f:23:7a:de:2f:2e:d5:54:7e: d2:20:45:81:3b:08:3e:6b:00:5a:31:88:9f:12:94: 98:d6:4d:d8:60:2d:01:b0:fd:9a:99:2e:1c:98:5c: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:04:DD:5B:37:BC:3E:07:9D:4F:D3:CE:84:D6:A2:40:88:66:A7 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:7d:34:86:0d:62:3d:f5:74:46:c1:75:d8:54:e1:91:c0: 80:9a:36:df:71:ab:63:6d:04:4b:e6:58:45:b1:cb:8b:1d:46: ed:f3:4a:fb:52:6d:11:20:65:fa:39:5a:fb:2e:cd:a3:5b:dc: 33:4a:82:25:0c:f9:c8:53:25:61:b1:34:de:5c:d3:53:c0:a7: c2:bd:e5:cd:04:36:0d:ba:63:26:43:c1:d2:44:38:7d:09:b9: 49:04:7f:39:21:b7:4c:cb:03:ac:7f:a4:d2:28:ef:e3:7b:02: 4d:b3:a4:25:f8:be:ed:29:b5:ec:91:46:e4:b5:49:e8:f9:c9: cc:49:d9:a4:d2:d8:c2:2e:39:61:4c:37:74:d5:e4:f0:88:1f: 5e:89:80:61:40:41:a6:6c:ce:c5:d4:48:2a:c7:bb:70:6c:b7: 28:0e:52:53:bb:23:f5:94:f8:31:c9:23:6c:0f:8e:9f:6a:8d: 84:ce:c2:79:39:a4:71:32:1b:1f:8a:8f:24:28:81:ff:32:e4: 96:03:c5:66:13:01:0b:c9:79:da:54:9b:ae:11:31:b5:39:07: fa:9d:ed:13:6e:b7:11:45:a0:82:f2:c4:de:61:a4:85:03:28: 0e:35:2f:ca:01:06:41:69:57:f4:9f:63:df:f2:5f:3a:70:94: 78:8c:22:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwNzIzMDQ1OTE4WhcNMjYwNzMwMDQ1OTE4WjAYMRYwFAYD VQQDEw02YTYxOWZhNy1kY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHC4lwsbg6/xpYxAHQwnBKwviM+c3PO/4JRRK9HwZGrg9xOZwlxl2mfrpAZ5 dfB8anAW5Mg53ITL9FEZrcXfhXS2Qdy1bLK24rViO4A2lSDx3LMt+qrn6MUuAqMN jP1E7nb6bVQI47huiDmgJKi5XSXtIrHQtk1TEBld58RBZ30Nnw0Chc5s3XkT45+h He5mXz0UhNuuxrec/eJVGxFqb3ByFkbWIbOKvOgBRT9I+iXp8sD6I0Wrg+MQXRjx F9CKfUR6rGobBbl9DpSaBX7YalwVssBm1UEPI3reLy7VVH7SIEWBOwg+awBaMYif EpSY1k3YYC0BsP2amS4cmFyPVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHyBN1b N7w+B51P086E1qJAiGanMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQV9NIYNYj31dEbBddhU4ZHAgJo233GrY20ES+ZYRbHLix1G7fNK+1JtESBl +jla+y7No1vcM0qCJQz5yFMlYbE03lzTU8Cnwr3lzQQ2DbpjJkPB0kQ4fQm5SQR/ OSG3TMsDrH+k0ijv43sCTbOkJfi+7Sm17JFG5LVJ6PnJzEnZpNLYwi45YUw3dNXk 8IgfXomAYUBBpmzOxdRIKse7cGy3KA5SU7sj9ZT4MckjbA+On2qNhM7CeTmkcTIb H4qPJCiB/zLklgPFZhMBC8l52lSbrhExtTkH+p3tE263EUWggvLE3mGkhQMoDjUv ygEGQWlX9J9j3/JfOnCUeIwirg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:31:30 2026 by rpki-client