$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: vs62ntAdd20TyBDgCoLgPncEhCvo8aLTQZVYy94lLY8= Subject key identifier: 54:19:7A:15:36:64:19:38:67:EB:62:12:7B:34:D7:1D:C8:3A:40:04 Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 010D Signing time: Thu 23 Jul 2026 07:46:00 +0000 Manifest this update: Thu 23 Jul 2026 07:46:00 +0000 Manifest next update: Thu 30 Jul 2026 07:46:00 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: k5S++gql8FgkDq7jiEV0OsZiZQa/ukk5/pqPVOayY7E=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: wgm/K3czk438q8wY+F8Senpx6ebVl18VJSckLP4XIDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Jul 23 07:46:00 2026 GMT Not After : Jul 30 07:46:00 2026 GMT Subject: CN=6a61c6b8-0630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:53:6e:a2:6b:e7:f9:e1:01:49:8e:14:1d: 60:8d:f0:1f:fc:ab:f6:c0:49:df:04:8b:85:bd:a0: 58:63:a1:c6:f5:83:5f:38:22:53:0f:b7:3d:60:0a: ef:87:08:87:3e:eb:86:03:3a:d8:f9:ab:5c:26:3f: ea:dd:46:30:18:04:e2:3a:68:b8:d1:c1:ce:cb:54: 17:a6:21:a8:11:fd:8c:6c:fd:cc:bb:ab:9f:43:28: e3:3a:4e:c8:a3:0d:2e:90:ad:8e:67:ae:89:7c:0f: b9:44:84:05:9b:83:18:58:e6:ca:bb:4e:10:42:e6: a3:ae:dd:ec:7f:77:0f:10:4b:1c:33:09:b9:9e:82: 02:c1:a6:09:fb:6d:7e:a8:87:dc:c9:3c:ce:59:90: 1d:63:da:fb:34:04:5b:0a:d9:57:c4:de:f5:09:9f: d7:dd:98:82:93:03:41:4b:36:68:06:ac:97:b4:6f: 4e:de:97:54:eb:8b:c4:64:0b:e4:05:b6:68:41:3e: 8c:88:0c:d0:87:25:ed:59:8a:c4:8e:7c:47:92:c8: 69:8b:83:d5:1b:0a:6c:83:8b:3e:40:98:9f:14:41: dc:fe:43:0c:88:30:8a:82:e6:af:30:ec:7e:90:5a: 6e:14:f7:44:f4:11:c3:dc:4e:5c:29:92:26:01:bb: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:19:7A:15:36:64:19:38:67:EB:62:12:7B:34:D7:1D:C8:3A:40:04 X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e5:dc:14:78:ff:14:20:b7:64:31:18:3c:e6:e3:54:69:17: 70:df:3d:b2:3c:1e:1c:04:48:8c:c2:cb:98:1f:eb:4a:67:20: 4d:97:a7:38:83:c7:b5:7a:5e:df:bc:1e:8b:d6:f1:60:2f:14: d8:69:36:a5:6e:6a:47:56:6d:31:e6:c3:12:79:88:ad:8c:72: a6:f1:71:55:8b:10:c9:7a:35:10:70:17:b4:d7:7c:18:33:a2: 10:1a:e8:df:1c:7e:b5:69:6a:26:c8:ef:9f:14:58:d1:9c:f7: 81:3a:05:e6:d5:8f:89:45:3e:9b:d4:62:62:86:c0:a1:69:46: 1e:89:2f:7a:f5:5f:bc:63:37:03:7d:35:54:2b:b2:ab:a5:12: 89:23:37:df:e4:8c:d2:c2:ac:ed:4d:47:d0:a3:11:50:1e:91: 10:2a:77:1d:6e:0b:49:fc:97:21:b4:53:d1:a0:f3:c6:af:ee: a3:56:d5:a9:9f:7b:88:9e:e4:28:9f:20:2f:24:a6:a0:38:3f: b1:ce:71:ee:b8:93:f4:c6:c7:72:60:dc:b5:30:8e:ee:1f:17: 93:f2:67:50:5a:52:8a:b9:69:20:39:f8:15:5b:1e:f2:f7:b4: 23:d3:58:02:2e:2f:99:d3:e3:8e:9a:66:a4:57:3b:3c:e3:ac: cb:32:ef:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRTExMTAvBgNVBAUTKDg5OTM5MzhDODU3NTAwMjgwRThGNUU1M0RDMEIzRTkz MDdBRUQ0QTcwHhcNMjYwNzIzMDc0NjAwWhcNMjYwNzMwMDc0NjAwWjAYMRYwFAYD VQQDEw02YTYxYzZiOC0wNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN9TbqJr5/nhAUmOFB1gjfAf/Kv2wEnfBIuFvaBYY6HG9YNfOCJTD7c9YArv hwiHPuuGAzrY+atcJj/q3UYwGATiOmi40cHOy1QXpiGoEf2MbP3Mu6ufQyjjOk7I ow0ukK2OZ66JfA+5RIQFm4MYWObKu04QQuajrt3sf3cPEEscMwm5noICwaYJ+21+ qIfcyTzOWZAdY9r7NARbCtlXxN71CZ/X3ZiCkwNBSzZoBqyXtG9O3pdU64vEZAvk BbZoQT6MiAzQhyXtWYrEjnxHkshpi4PVGwpsg4s+QJifFEHc/kMMiDCKguavMOx+ kFpuFPdE9BHD3E5cKZImAbvVzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQZehU2 ZBk4Z+tiEns01x3IOkAEMB8GA1UdIwQYMBaAFImTk4yFdQAoDo9eU9wLPpMHrtSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNFMS83Q0YwN0JDNkVG NDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFDZ09qMTVUM0FzLWt3ZXUx S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNFMS83Q0YwN0JDNkVGNDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFD Z09qMTVUM0FzLWt3ZXUxS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZOXcFHj/FCC3ZDEYPObjVGkXcN89sjweHARIjMLLmB/rSmcgTZenOIPHtXpe 37wei9bxYC8U2Gk2pW5qR1ZtMebDEnmIrYxypvFxVYsQyXo1EHAXtNd8GDOiEBro 3xx+tWlqJsjvnxRY0Zz3gToF5tWPiUU+m9RiYobAoWlGHokvevVfvGM3A301VCuy q6USiSM33+SM0sKs7U1H0KMRUB6RECp3HW4LSfyXIbRT0aDzxq/uo1bVqZ97iJ7k KJ8gLySmoDg/sc5x7riT9MbHcmDctTCO7h8Xk/JnUFpSirlpIDn4FVse8ve0I9NY Ai4vmdPjjppmpFc7POOsyzLvLg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:59:45 2026 by rpki-client