$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft File: iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json) Hash identifier: 9YFYw8aYuqgq1uCQO/8NQ14cZcpZn05Qv66qNZZfI5A= Subject key identifier: A7:90:02:E8:9A:50:7D:6A:03:63:25:40:AA:9B:4D:DE:B6:C3:82:9F Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft Manifest number: 7F Signing time: Thu 23 Jul 2026 09:38:18 +0000 Manifest this update: Thu 23 Jul 2026 09:38:17 +0000 Manifest next update: Thu 30 Jul 2026 09:38:17 +0000 Files and hashes: 1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: TFqIQMIAjEKfbq8E+B7SyH4sjVmB3E/ngpuQ8x9g3Sg=) 2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Jul 23 09:38:17 2026 GMT Not After : Jul 30 09:38:17 2026 GMT Subject: CN=6a61e10a-02f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:dd:72:d4:9b:45:05:fe:04:44:82:38:bf: 86:63:ef:48:4e:8e:45:68:f3:28:42:9f:27:dd:b7: a0:ff:0b:d3:2e:91:9f:35:c4:a9:38:f7:83:56:0f: ef:ef:89:a7:d9:68:6e:d2:ac:af:87:81:40:8a:45: 94:a9:79:ad:b4:ae:ee:8d:d4:c6:8e:17:29:cd:83: 57:ab:91:d3:2e:88:ba:8b:a9:a2:30:0d:4b:7b:89: b9:00:01:21:b0:24:01:f6:8c:84:e4:a6:42:f6:5b: f4:73:ae:65:f4:4e:39:12:2a:2f:bb:e9:65:70:dc: 6f:9d:73:85:91:a7:eb:6b:b9:a5:09:82:a2:95:4b: d3:cd:7b:aa:60:98:61:c3:3d:c6:73:cc:8b:cc:1c: 9f:ed:5a:f4:f4:66:8f:bb:72:6e:7c:ec:c8:e5:e2: 27:d7:ed:b0:a9:3d:f7:85:ce:52:0f:22:d5:36:aa: b5:f8:a3:4f:77:91:19:8a:3c:de:71:19:c1:19:0b: 23:61:38:eb:4a:99:01:68:68:29:2e:30:f1:0e:bf: e2:d8:a3:6d:15:dd:de:46:b4:20:3f:ee:35:e9:41: 9d:d3:55:0a:a8:56:9e:fa:0d:5b:6a:97:30:c4:2d: e1:8f:c3:0f:b5:92:26:83:e2:a5:44:5f:e0:5d:b5: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:90:02:E8:9A:50:7D:6A:03:63:25:40:AA:9B:4D:DE:B6:C3:82:9F X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ba:c2:23:43:ca:db:bc:68:b5:83:b7:1c:01:c6:1e:3b:e7: 5c:53:c1:e7:af:fb:50:35:6f:97:41:c6:3a:28:b6:23:5f:e5: ef:04:46:c2:d1:c4:3a:31:44:b2:cb:00:79:d6:1c:b0:76:0c: 5f:4e:76:8e:33:1f:33:6e:f6:b2:45:8e:f5:44:ff:3b:e6:94: 62:61:81:13:45:69:83:3a:3d:64:76:6d:46:dc:89:c1:b6:99: f4:ed:80:8b:bd:f5:9f:d2:b1:94:da:47:06:26:42:7c:95:04: 80:e8:38:ae:c9:97:95:01:97:77:92:38:4a:25:1e:38:88:f9: c8:6f:59:ab:3b:f2:84:bd:48:47:65:bf:6c:ca:68:7f:26:c2: 6c:39:5f:83:2f:d0:fe:da:9a:67:e1:c9:72:92:60:8d:37:9a: ce:59:e7:6a:df:a3:dc:d7:c1:a0:a8:56:d2:ed:3c:8b:63:6f: ae:a2:bc:7e:83:9c:0e:da:5c:9a:c0:0a:71:be:bd:95:d5:41: 69:83:2f:93:81:13:14:2f:43:53:c8:ba:84:16:7d:48:54:48: a0:62:63:69:11:89:63:fc:ad:b7:62:b5:74:b8:32:b4:50:2e: 94:aa:88:60:aa:7b:f1:6c:be:f8:5c:01:cf:0f:a3:74:93:a8: 63:ad:ba:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBMDQxMTAvBgNVBAUTKDg4RkIxRDIxQ0I4ODNDOTdDMjlBQ0I3N0Q0RDY4ODg0 QjNBN0E2MDgwHhcNMjYwNzIzMDkzODE3WhcNMjYwNzMwMDkzODE3WjAYMRYwFAYD VQQDEw02YTYxZTEwYS0wMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOndctSbRQX+BESCOL+GY+9ITo5FaPMoQp8n3beg/wvTLpGfNcSpOPeDVg/v 74mn2Whu0qyvh4FAikWUqXmttK7ujdTGjhcpzYNXq5HTLoi6i6miMA1Le4m5AAEh sCQB9oyE5KZC9lv0c65l9E45Eiovu+llcNxvnXOFkafra7mlCYKilUvTzXuqYJhh wz3Gc8yLzByf7Vr09GaPu3JufOzI5eIn1+2wqT33hc5SDyLVNqq1+KNPd5EZijze cRnBGQsjYTjrSpkBaGgpLjDxDr/i2KNtFd3eRrQgP+416UGd01UKqFae+g1bapcw xC3hj8MPtZImg+KlRF/gXbVSKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKeQAuia UH1qA2MlQKqbTd62w4KfMB8GA1UdIwQYMBaAFIj7HSHLiDyXwprLd9TWiISzp6YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkEwNC8yNUM1Mjc3RUM5 QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBKZkNtc3QzMU5hSWhMT25w Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkEwNC8yNUM1Mjc3RUM5QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBK ZkNtc3QzMU5hSWhMT25wZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG7rCI0PK27xotYO3HAHGHjvnXFPB56/7UDVvl0HGOii2I1/l7wRGwtHEOjFE sssAedYcsHYMX052jjMfM272skWO9UT/O+aUYmGBE0Vpgzo9ZHZtRtyJwbaZ9O2A i731n9KxlNpHBiZCfJUEgOg4rsmXlQGXd5I4SiUeOIj5yG9ZqzvyhL1IR2W/bMpo fybCbDlfgy/Q/tqaZ+HJcpJgjTeazlnnat+j3NfBoKhW0u08i2NvrqK8foOcDtpc msAKcb69ldVBaYMvk4ETFC9DU8i6hBZ9SFRIoGJjaRGJY/ytt2K1dLgytFAulKqI YKp78Wy++FwBzw+jdJOoY626Rw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:13 2026 by rpki-client