$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json) Hash identifier: 03oGna0560T/UJcsmsyWpNbOPDx1xPoZR99lRoe+EP8= Subject key identifier: F4:C7:34:22:FE:7E:BE:18:AD:89:EF:57:3B:CA:9A:3A:6A:AE:07:80 Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft Manifest number: 0BC7 Signing time: Wed 22 Jul 2026 19:22:04 +0000 Manifest this update: Wed 22 Jul 2026 19:22:04 +0000 Manifest next update: Wed 29 Jul 2026 19:22:04 +0000 Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: WyEhsyjiM/aH+mPpbASDAZJKpYsjnrNE4yvV/qvVaMc=) 2: A558194E801F11EFB86B2647C4F9AE02.roa (hash: t9NapK/6qJjRf58S65SJlIEwaZxa09mw/H0Mw5wLnc0=) 3: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Jul 22 19:22:04 2026 GMT Not After : Jul 29 19:22:04 2026 GMT Subject: CN=6a61185c-d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:b4:71:81:89:5a:28:0a:75:16:ae:df:47: 05:c0:4f:3c:10:72:70:08:2b:37:57:12:b2:3e:e0: a5:fa:3d:32:e2:ef:92:3b:62:c3:21:2f:b6:85:90: 1b:28:a7:27:73:83:e4:9d:e8:a5:1d:18:4d:9f:7f: 54:dc:cc:d8:56:b6:18:4f:ba:e9:f8:1c:50:45:0e: 55:c5:6a:5a:5b:0e:19:e4:1a:72:c0:4a:93:10:0e: c5:31:b1:35:44:48:c8:34:f2:9c:e2:40:81:6d:67: b0:ac:2d:48:69:ff:23:f8:40:2f:1b:ce:c6:41:a2: 42:6d:87:0a:1c:5d:07:ab:f7:e0:a4:68:a7:f8:ad: c2:94:b8:78:8a:e0:66:2d:8c:29:53:26:cb:bc:90: ce:a3:f7:82:79:9d:be:64:ae:05:1c:de:d1:f5:31: f6:bc:7f:da:0c:ee:3d:d3:04:a3:88:bc:51:a0:af: 5e:42:8b:17:77:86:d2:d0:07:fe:e4:b5:05:e0:ec: 84:4e:13:f9:19:5c:b4:f6:dd:f4:52:77:2f:70:cb: 6d:8d:0d:3e:87:80:4b:7a:8e:20:ee:34:ea:74:6c: 94:37:cb:f9:31:a9:fd:c8:e1:3d:44:b9:ae:b0:db: 63:c5:64:a5:ba:d2:a0:41:d8:dd:8d:0d:82:32:9d: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C7:34:22:FE:7E:BE:18:AD:89:EF:57:3B:CA:9A:3A:6A:AE:07:80 X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e8:ea:02:a7:76:2c:33:27:78:a3:e6:77:bf:56:63:6d:cb: d1:d2:2d:71:ab:fd:06:da:c3:9c:33:1b:44:92:08:75:27:5a: 4d:93:9a:7d:cd:a9:88:bd:59:5c:5b:f3:41:80:4c:2e:a4:81: aa:13:83:37:d5:77:2f:80:d5:a4:af:83:55:c2:47:1b:f6:e1: 55:bc:26:55:eb:71:2a:06:e7:8b:9f:8d:95:53:1f:35:10:95: 66:a2:54:99:dd:2d:77:7b:2a:68:98:fb:d2:4e:02:31:b0:6a: af:0d:ec:04:41:39:96:69:e0:f2:8d:d0:b2:8c:8a:4d:94:ad: 42:05:6f:a9:40:dd:25:58:35:84:70:11:17:4d:9a:38:38:68: 5a:bd:c2:ee:56:27:13:9f:c1:f7:fe:40:2c:3b:b4:b9:6d:be: 68:2a:be:40:b0:f2:2c:b2:e7:78:5a:50:57:67:c5:ff:4c:34: 54:ad:31:77:18:74:64:c6:4c:a8:6c:a9:b1:91:c1:4a:fe:98: 36:23:a5:02:b6:e1:b0:f2:86:49:8d:92:bf:af:de:f4:40:14: 2e:aa:96:ad:14:06:d1:1e:2f:a9:28:ba:e9:b8:f4:09:44:2b: c2:d9:b0:0e:29:7e:e6:42:cf:49:a0:a5:75:46:52:2a:56:41: 10:bc:68:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjYwNzIyMTkyMjA0WhcNMjYwNzI5MTkyMjA0WjAYMRYwFAYD VQQDEw02YTYxMTg1Yy1kMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVu0cYGJWigKdRau30cFwE88EHJwCCs3VxKyPuCl+j0y4u+SO2LDIS+2hZAb KKcnc4PkneilHRhNn39U3MzYVrYYT7rp+BxQRQ5VxWpaWw4Z5BpywEqTEA7FMbE1 REjINPKc4kCBbWewrC1Iaf8j+EAvG87GQaJCbYcKHF0Hq/fgpGin+K3ClLh4iuBm LYwpUybLvJDOo/eCeZ2+ZK4FHN7R9TH2vH/aDO490wSjiLxRoK9eQosXd4bS0Af+ 5LUF4OyEThP5GVy09t30UncvcMttjQ0+h4BLeo4g7jTqdGyUN8v5Man9yOE9RLmu sNtjxWSlutKgQdjdjQ2CMp1B0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTHNCL+ fr4YrYnvVzvKmjpqrgeAMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjkwNS8xRkE3QzQ2QzQ4RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6 TmNCN2ttQmFMZF9SZ0hvVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOjqAqd2LDMneKPmd79WY23L0dItcav9BtrDnDMbRJIIdSdaTZOafc2piL1Z XFvzQYBMLqSBqhODN9V3L4DVpK+DVcJHG/bhVbwmVetxKgbni5+NlVMfNRCVZqJU md0td3sqaJj70k4CMbBqrw3sBEE5lmng8o3QsoyKTZStQgVvqUDdJVg1hHARF02a ODhoWr3C7lYnE5/B9/5ALDu0uW2+aCq+QLDyLLLneFpQV2fF/0w0VK0xdxh0ZMZM qGypsZHBSv6YNiOlArbhsPKGSY2Sv6/e9EAULqqWrRQG0R4vqSi66bj0CUQrwtmw Dil+5kLPSaCldUZSKlZBELxofQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:57:56 2026 by rpki-client