$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json) Hash identifier: GvXPE2HGJYz6uF+vrrWNEuzF439Xeb6WysliZ+MPJMs= Subject key identifier: 81:51:21:04:87:AE:0C:07:A4:A7:D7:F9:62:E7:58:67:49:8B:7F:83 Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Certificate serial: 103E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft Manifest number: 1001 Signing time: Wed 22 Jul 2026 17:39:28 +0000 Manifest this update: Wed 22 Jul 2026 17:39:28 +0000 Manifest next update: Wed 29 Jul 2026 17:39:28 +0000 Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: Mx+28Hm5MoirRDsxE9m+AVSHLU4vBG92eILTmUrcV30=) 2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: thWs/wjgTce2OH8uRbqin2U/9yRfT0t37bg0yz1umNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4158 (0x103e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Validity Not Before: Jul 22 17:39:28 2026 GMT Not After : Jul 29 17:39:28 2026 GMT Subject: CN=6a610050-b0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:4e:bd:c0:e6:90:4b:e1:69:46:1b:75:41: a2:e7:65:0d:fa:6e:d4:31:48:65:68:d5:48:b4:c9: aa:aa:5b:08:65:09:79:1c:f1:d7:fd:27:b9:fc:5e: 4b:be:41:9b:58:74:58:0b:3a:e0:e4:64:80:02:31: 89:ef:8b:02:76:67:36:74:f7:2e:14:7a:2b:68:9f: e2:d4:a6:51:ca:32:b2:e1:f6:f4:11:bf:37:9d:83: 5f:f8:4c:dd:eb:fa:cf:00:07:04:35:e7:db:2c:07: 3b:e1:79:c9:3d:ad:87:33:4b:d1:d0:2b:cf:19:67: df:6d:d7:43:70:3f:33:8a:a6:99:aa:a9:d1:fd:a0: 5c:60:75:1c:c5:73:64:f3:17:6f:13:38:c3:8a:76: 5a:c8:2a:e1:a0:a1:d7:ba:59:2c:b3:d8:91:2b:17: 30:09:e1:8a:a0:c0:83:32:92:3d:6f:51:1b:a7:7a: 30:99:35:98:51:87:0c:47:0b:ed:75:f6:75:4d:e6: 7e:84:96:55:74:d4:25:a6:5c:fa:a5:e9:fc:da:48: 65:d4:70:52:3e:ab:9a:34:fd:d0:c7:21:ce:46:0a: ca:da:2b:b4:cf:08:e8:ec:e1:30:80:a6:67:28:7b: e3:1e:49:ba:f2:e8:8c:fc:d4:2a:38:08:6c:9c:10: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:21:04:87:AE:0C:07:A4:A7:D7:F9:62:E7:58:67:49:8B:7F:83 X509v3 Authority Key Identifier: keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b6:1c:c3:1a:49:5a:f4:28:84:2c:97:41:d6:c9:2e:32:c9: 08:00:c9:53:24:d4:2c:e9:e6:b0:a6:60:2c:a9:f4:67:5f:a8: 7b:9f:8d:75:0c:f1:58:86:09:28:8a:17:ce:c7:ed:5f:5f:bb: 9f:61:fe:8b:88:54:f4:8e:e1:40:71:f3:32:14:a7:cf:90:6e: 1b:df:da:57:04:c8:d1:38:cc:bd:3f:75:90:57:c0:6b:10:27: 63:fd:b9:44:2b:ee:b5:db:30:5b:08:b4:db:46:7f:a5:73:0c: a0:0e:e2:59:c2:a5:7c:fa:83:f4:71:dc:ca:15:91:a2:29:b8: 41:95:02:b9:61:85:8c:0b:46:9f:d7:19:f6:2c:6e:73:ac:b1: 45:40:d2:b3:db:26:e5:5e:6e:22:45:75:ee:f8:c5:0a:0e:e8: 1d:c2:f6:6f:5b:31:f5:8b:3f:c5:18:06:4b:fd:78:b1:dc:ff: 64:af:f0:f5:5f:70:37:cf:a8:59:a9:93:be:05:2d:be:68:07: a8:fc:c8:30:b2:8b:7e:79:ba:4b:1d:db:1e:15:b8:be:f0:70: d8:0f:0b:da:c9:72:19:7e:5a:ad:e6:79:b8:2d:ff:a1:4b:d7: 8f:c0:5b:43:45:57:64:41:fa:94:f8:2a:a9:c3:28:ff:a4:52: 75:bd:e1:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICED4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND MUNDMUY1QTIwHhcNMjYwNzIyMTczOTI4WhcNMjYwNzI5MTczOTI4WjAYMRYwFAYD VQQDEw02YTYxMDA1MC1iMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UROvcDmkEvhaUYbdUGi52UN+m7UMUhlaNVItMmqqlsIZQl5HPHX/Se5/F5L vkGbWHRYCzrg5GSAAjGJ74sCdmc2dPcuFHoraJ/i1KZRyjKy4fb0Eb83nYNf+Ezd 6/rPAAcENefbLAc74XnJPa2HM0vR0CvPGWffbddDcD8ziqaZqqnR/aBcYHUcxXNk 8xdvEzjDinZayCrhoKHXulkss9iRKxcwCeGKoMCDMpI9b1Ebp3owmTWYUYcMRwvt dfZ1TeZ+hJZVdNQlplz6pen82khl1HBSPquaNP3QxyHORgrK2iu0zwjo7OEwgKZn KHvjHkm68uiM/NQqOAhsnBAtlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFRIQSH rgwHpKfX+WLnWGdJi3+DMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5 YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUQwRi83NEJFMzhENjgwQ0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1O YnB0UlpkbGxKR3pCekI5YUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKrYcwxpJWvQohCyXQdbJLjLJCADJUyTULOnmsKZgLKn0Z1+oe5+NdQzxWIYJ KIoXzsftX1+7n2H+i4hU9I7hQHHzMhSnz5BuG9/aVwTI0TjMvT91kFfAaxAnY/25 RCvutdswWwi020Z/pXMMoA7iWcKlfPqD9HHcyhWRoim4QZUCuWGFjAtGn9cZ9ixu c6yxRUDSs9sm5V5uIkV17vjFCg7oHcL2b1sx9Ys/xRgGS/14sdz/ZK/w9V9wN8+o WamTvgUtvmgHqPzIMLKLfnm6Sx3bHhW4vvBw2A8L2slyGX5areZ5uC3/oUvXj8Bb Q0VXZEH6lPgqqcMo/6RSdb3hGA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:40:35 2026 by rpki-client