$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: 2yxmMxg4UazMkqDqqmFNtbT5kWAWet2rwk7XLbJIyBc= Subject key identifier: E4:86:53:39:02:E9:7A:1F:88:71:F0:C6:E5:85:33:98:81:28:C6:FC Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: B2 Signing time: Thu 23 Jul 2026 08:57:03 +0000 Manifest this update: Thu 23 Jul 2026 08:57:03 +0000 Manifest next update: Thu 30 Jul 2026 08:57:03 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: kT9A9DZRXxAOnZFkQChYdwLhrQejYbfCnmqSXXRSXvo=) 2: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: iP831x/fULSZ/fmDwuHrWqBHoTP+BYRChB7pWllsa7M=) 3: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: Y8LpukABBo/pP9eZZ75cumiepSudrb+yKJGkwACmG7Q=) 4: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: 16ronhpfPjZ1J9jMJniqcKd5ZSFxc1jnc1AmD+Jt630=) 5: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: DLNHUZHuS4L6pQW1+bd0pYlrjjNIUCRkspT0sawq79s=) 6: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: VBUUs43zdemApgQuUI5G2FA+aYtudXOF6LXHVAgrRhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Jul 23 08:57:03 2026 GMT Not After : Jul 30 08:57:03 2026 GMT Subject: CN=6a61d75f-c410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:11:37:1f:74:8a:98:ec:bd:83:d2:3c:48: 02:c9:f6:76:e2:9f:82:f6:48:70:87:74:dd:da:50: be:ea:a5:9d:87:0a:7d:82:b2:3e:85:f8:ec:89:91: 17:db:c5:a2:f2:d5:96:9d:30:4f:75:e1:21:99:66: 7d:da:66:cc:92:f9:44:db:d5:62:ab:a8:e6:b6:a9: 5d:68:b0:61:db:35:90:33:02:14:68:39:be:ae:da: 20:f3:0e:dc:66:6f:a4:2d:9d:4b:00:a9:e6:55:8b: 5c:5b:87:5c:ae:70:e4:8d:c4:41:14:ac:74:31:e1: 0f:6f:f5:26:b6:a7:20:4d:d9:f6:c7:96:7a:c5:64: 60:ba:66:37:95:34:6d:e6:0a:99:32:25:fe:75:22: 7a:b4:5a:05:e2:f4:cf:e9:a5:89:24:ad:68:b6:99: 90:a9:ce:c9:6b:82:18:83:d9:08:12:bf:84:82:f5: c1:45:09:99:f7:02:93:88:ac:a7:d6:c1:34:bc:b4: 71:af:d0:72:fd:bb:e3:e4:67:d7:26:f5:a4:03:9a: c5:e6:a0:e1:89:5a:9e:7d:c6:e8:cd:b7:e6:e7:bf: 7b:c0:dc:d4:f1:69:2c:39:1f:f7:b7:2d:d6:f0:44: 0e:39:6b:18:cc:fd:e0:3c:ac:f1:c9:38:80:76:fe: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:86:53:39:02:E9:7A:1F:88:71:F0:C6:E5:85:33:98:81:28:C6:FC X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:6e:6e:f2:fc:b0:40:ed:ae:8f:e4:dc:a9:d5:e5:5b:d3: 3b:d2:c6:36:ad:44:be:a0:45:3c:93:84:3e:37:55:ef:d8:7e: 4b:11:2f:ce:fc:8e:c9:51:d2:de:a8:86:79:84:db:61:5d:07: a8:b1:b4:3c:ec:7e:02:be:43:20:d0:d2:db:fc:c0:f0:b9:19: 40:fd:33:78:5c:7e:b5:38:7a:f8:ed:d9:e1:f7:84:51:3c:14: cc:dc:96:15:d5:7e:8f:40:07:4a:16:c9:9d:7f:2e:f3:f3:48: 6e:93:b0:9d:4e:07:0f:6e:11:10:f1:14:4b:7f:20:9d:d9:16: bd:96:fd:99:a5:aa:2c:bf:8b:a4:c0:66:e5:7a:c6:8b:70:41: 92:a5:78:f3:b9:05:70:87:d1:32:02:bd:7b:69:48:6d:d7:09: 42:26:cf:be:aa:0f:9c:e9:d5:d1:f3:ba:69:15:ce:0f:cc:08: db:e7:63:75:ff:07:25:98:75:24:05:ef:80:06:dc:39:2c:79: 3a:97:61:14:a4:57:e5:7e:92:3b:6b:ec:1a:a4:09:eb:23:fa: 75:8f:a5:f4:f8:80:38:e0:dc:cc:cc:2f:55:4c:31:38:a5:43: b8:75:f8:1a:96:a5:27:9c:be:47:76:e2:d4:27:ef:b7:a2:3f: 69:bc:d9:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwNzIzMDg1NzAzWhcNMjYwNzMwMDg1NzAzWjAYMRYwFAYD VQQDEw02YTYxZDc1Zi1jNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwMRNx90ipjsvYPSPEgCyfZ24p+C9khwh3Td2lC+6qWdhwp9grI+hfjsiZEX 28Wi8tWWnTBPdeEhmWZ92mbMkvlE29Viq6jmtqldaLBh2zWQMwIUaDm+rtog8w7c Zm+kLZ1LAKnmVYtcW4dcrnDkjcRBFKx0MeEPb/UmtqcgTdn2x5Z6xWRgumY3lTRt 5gqZMiX+dSJ6tFoF4vTP6aWJJK1otpmQqc7Ja4IYg9kIEr+EgvXBRQmZ9wKTiKyn 1sE0vLRxr9By/bvj5GfXJvWkA5rF5qDhiVqefcbozbfm5797wNzU8WksOR/3ty3W 8EQOOWsYzP3gPKzxyTiAdv77XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSGUzkC 6XofiHHwxuWFM5iBKMb8MB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeZZubvL8sEDtro/k3KnV5VvTO9LGNq1EvqBFPJOEPjdV79h+SxEvzvyOyVHS 3qiGeYTbYV0HqLG0POx+Ar5DINDS2/zA8LkZQP0zeFx+tTh6+O3Z4feEUTwUzNyW FdV+j0AHShbJnX8u8/NIbpOwnU4HD24REPEUS38gndkWvZb9maWqLL+LpMBm5XrG i3BBkqV487kFcIfRMgK9e2lIbdcJQibPvqoPnOnV0fO6aRXOD8wI2+djdf8HJZh1 JAXvgAbcOSx5OpdhFKRX5X6SO2vsGqQJ6yP6dY+l9PiAOODczMwvVUwxOKVDuHX4 GpalJ5y+R3bi1Cfvt6I/abzZhw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:17:49 2026 by rpki-client