$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: rHWVD4IfmVS+2UuLUvE1nGWg7v7qkZiffD4hG+5Yrx4= Subject key identifier: 5E:8F:F7:BE:6D:BA:CE:21:8F:2C:5E:6F:BE:0F:59:B2:69:91:40:A8 Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 145E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 1420 Signing time: Wed 22 Jul 2026 17:02:49 +0000 Manifest this update: Wed 22 Jul 2026 17:02:48 +0000 Manifest next update: Wed 29 Jul 2026 17:02:48 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: btNdLPvs/mT8NhlRK+IjTx1sX4o6axue4fTHXqd/8W4=) 2: zSE0GmBxc2vuy2NqhgpEC2PZSVM.asa (hash: S0SNtYzstV/TE3XHy8x7+BvtycgWeW73p6rfD0JzYgg=) 3: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=) 4: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=) 5: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=) 6: qyLwIBj-Wx6AmSM1hxcj9vJ-hvc.asa (hash: 5ab75aSGsxcPedNr8xBXYZisce1dTfJNawoGkCK2fWU=) 7: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5214 (0x145e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Jul 22 17:02:48 2026 GMT Not After : Jul 29 17:02:48 2026 GMT Subject: CN=6a60f7b9-8d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:ea:01:fb:b9:d3:5f:b3:a5:11:2b:78:88: b6:0f:33:a4:26:27:e9:ab:53:06:66:74:98:d6:04: 43:87:1e:e4:65:11:ff:c2:2d:2e:55:2d:7b:75:66: 82:da:39:5a:e8:66:ee:ae:a0:3a:cf:7a:bb:cd:f1: b8:61:7d:1b:60:94:e8:ad:d6:27:ff:b2:21:15:3a: 9a:3f:fe:7f:41:87:63:89:5a:46:93:1b:e8:bf:0f: e8:c2:6e:b3:f9:58:a3:34:1f:53:05:9b:ae:57:bc: 2d:7f:b3:2b:83:cf:c3:25:0f:c2:4b:cf:c6:69:65: 55:32:24:2f:31:e6:d4:35:7a:9c:59:77:96:cf:e5: 45:b5:4d:df:aa:8d:13:a2:8e:91:3c:4b:12:6e:3c: d9:ec:a5:40:58:0e:ff:63:3b:00:b4:e4:81:a5:da: 9c:63:8d:cb:db:5b:7c:3b:1a:9d:39:db:b9:3d:bf: 26:29:3b:8b:4b:2a:f6:e4:ae:20:8f:ce:0a:25:f3: db:e4:fd:a4:a1:90:b0:51:42:aa:f6:b0:4d:52:55: 26:3c:8a:9a:ea:7e:b8:df:0e:9e:c2:a9:dd:d1:79: 31:e7:5d:02:cf:d8:1b:a6:c8:b3:e4:7d:78:27:16: 52:a0:11:ff:c8:00:48:cf:cb:47:77:dd:94:ef:ca: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:F7:BE:6D:BA:CE:21:8F:2C:5E:6F:BE:0F:59:B2:69:91:40:A8 X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cb:96:d0:cd:8b:3a:a7:44:cc:e6:a1:cb:64:87:43:33:fc: d8:b3:42:e9:e2:c0:c6:6c:32:fb:45:ec:30:71:81:9d:8f:59: 48:4f:59:3b:19:25:90:b4:f0:9a:7b:e6:81:35:1e:46:03:43: 3a:5d:d3:52:64:f2:d3:f2:58:c9:5e:8c:0d:ef:0c:4b:02:c6: 5a:1b:0e:94:a1:b9:e5:15:d2:62:a1:ff:35:28:f4:2a:ed:ef: 29:9d:1c:ed:00:d8:69:20:35:da:36:a5:88:1b:75:d9:39:d1: 45:d3:23:e3:4e:68:35:64:5e:cc:34:d5:eb:d5:88:9d:d1:13: e1:f6:00:14:84:ad:d7:88:b7:89:a2:50:56:73:85:73:37:6d: df:af:46:19:6d:a4:c4:d8:8a:f3:46:ad:e0:6c:40:40:2c:f0: 33:5f:b4:a3:72:40:3a:d3:be:eb:8c:5e:1f:73:75:e3:db:96: 75:44:5f:ff:51:39:56:38:49:08:44:02:f8:6b:ef:1a:3c:42: b5:00:f9:cf:10:66:8d:58:b4:1d:e5:ec:be:ba:0d:3f:ff:6a: 25:0d:4b:6c:01:92:9f:2e:1f:b4:26:9f:b7:6c:7b:86:fd:93: e0:32:c4:ed:b6:a3:55:83:64:fb:0a:65:a7:85:e6:86:b7:6f: 2d:c5:3e:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjYwNzIyMTcwMjQ4WhcNMjYwNzI5MTcwMjQ4WjAYMRYwFAYD VQQDEw02YTYwZjdiOS04ZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6/qAfu501+zpREreIi2DzOkJifpq1MGZnSY1gRDhx7kZRH/wi0uVS17dWaC 2jla6GburqA6z3q7zfG4YX0bYJTordYn/7IhFTqaP/5/QYdjiVpGkxvovw/owm6z +VijNB9TBZuuV7wtf7Mrg8/DJQ/CS8/GaWVVMiQvMebUNXqcWXeWz+VFtU3fqo0T oo6RPEsSbjzZ7KVAWA7/YzsAtOSBpdqcY43L21t8OxqdOdu5Pb8mKTuLSyr25K4g j84KJfPb5P2koZCwUUKq9rBNUlUmPIqa6n643w6ewqnd0Xkx510Cz9gbpsiz5H14 JxZSoBH/yABIz8tHd92U78rTNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6P975t us4hjyxeb74PWbJpkUCoMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhsuW0M2LOqdEzOahy2SHQzP82LNC6eLAxmwy+0XsMHGBnY9ZSE9ZOxklkLTw mnvmgTUeRgNDOl3TUmTy0/JYyV6MDe8MSwLGWhsOlKG55RXSYqH/NSj0Ku3vKZ0c 7QDYaSA12jaliBt12TnRRdMj405oNWRezDTV69WIndET4fYAFISt14i3iaJQVnOF czdt369GGW2kxNiK80at4GxAQCzwM1+0o3JAOtO+64xeH3N149uWdURf/1E5VjhJ CEQC+GvvGjxCtQD5zxBmjVi0HeXsvroNP/9qJQ1LbAGSny4ftCaft2x7hv2T4DLE 7bajVYNk+wplp4XmhrdvLcU+Cg== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:58 2026 by rpki-client