$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: O9uYerl63IkRAxGwaccbsuCOT3X2elAM5np8s+MwRuU= Subject key identifier: BA:E3:77:F3:B1:C7:56:6A:11:84:E1:99:30:56:A6:C6:B4:BD:95:7A Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 0588 Signing time: Thu 23 Jul 2026 00:03:39 +0000 Manifest this update: Thu 23 Jul 2026 00:03:38 +0000 Manifest next update: Thu 30 Jul 2026 00:03:38 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: lF6xROIycX1NgIhn2HkPicrjc7aIw/eabiE+CinJvnk=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=) 3: 5295B96E705F11F1BD79389570A30FBC.roa (hash: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=) 4: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Jul 23 00:03:38 2026 GMT Not After : Jul 30 00:03:38 2026 GMT Subject: CN=6a615a5b-d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:45:f5:7c:66:79:65:df:4a:ab:51:75:68: dc:62:14:60:08:0f:ed:04:e4:4a:53:71:0e:7a:23: 36:a0:f5:92:18:f2:cf:e9:77:e0:32:f8:60:8c:97: 64:6f:21:83:26:02:20:e6:d4:f3:d4:8b:51:c0:6c: 76:e6:78:c5:6a:ed:e3:88:bc:a9:5c:66:db:f8:54: 87:e2:50:37:8d:94:23:aa:83:43:c5:40:86:f2:31: 0a:92:a0:a3:e7:8b:a1:3d:a6:2b:10:32:bb:c5:4a: e7:ac:4c:dd:5b:d6:d9:4e:98:89:81:02:16:3e:4f: 84:3a:99:e3:36:82:6a:99:60:25:a8:20:7a:b0:44: 69:dc:15:85:97:7e:ef:67:5f:b5:0f:fb:cd:2f:0b: 52:9b:47:c4:c0:ff:76:bd:68:a2:fb:72:65:84:b8: b5:c4:ae:2d:e8:8f:29:ed:14:5f:ba:48:aa:af:35: de:02:4e:cd:50:bf:29:6a:c4:6c:f6:87:98:58:ad: df:76:6d:52:1e:2d:52:74:94:9f:91:b6:a5:8f:5f: 66:1d:a8:c2:e4:b3:1a:bd:a8:57:56:60:68:3a:20: 7e:53:c1:77:c1:01:5a:0b:2c:e3:59:20:bd:17:d9: 22:d0:ea:54:7a:40:7d:f4:5e:28:82:2a:b7:e3:64: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:77:F3:B1:C7:56:6A:11:84:E1:99:30:56:A6:C6:B4:BD:95:7A X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3c:c7:91:8b:8a:19:46:5d:00:82:4f:3e:b8:ec:05:18:bd: 53:42:f7:4b:91:91:70:55:b5:90:e8:3b:c5:27:b7:59:24:6f: 3d:72:1a:f4:c1:6b:18:85:2f:19:b7:40:94:fd:d3:26:8d:96: b2:d1:b8:b2:2f:f0:ef:ea:0f:5a:2c:43:64:9e:65:fd:6e:0e: 4f:a3:78:d8:13:12:c2:91:6b:1c:94:b4:d0:a7:f3:55:fe:0a: 9a:61:f5:2e:cf:c6:04:25:bb:b9:72:2b:d4:b9:1e:9e:a9:5b: f8:87:12:66:31:07:1c:9d:74:64:aa:51:7c:a4:97:7f:48:ca: b5:ad:5d:7d:2d:56:14:64:01:12:92:32:94:17:f2:e6:34:60: fa:24:f6:fd:de:65:07:2c:35:77:cc:76:88:68:f5:c7:08:86: 81:e6:95:12:bf:7a:1c:64:6d:27:cf:65:d9:66:f3:a3:c2:c1: d5:12:56:1e:c2:d8:4e:e7:93:53:2f:80:a1:cf:13:91:80:3a: ca:46:03:23:da:7a:a1:49:f8:ce:f8:7e:60:76:31:79:b5:d1: 85:56:15:cd:e0:61:74:fd:ea:3e:3b:5b:48:1c:61:c9:85:68: d5:3d:9f:d6:a9:49:25:cc:83:45:da:b7:58:7b:71:83:f3:a6: 1f:6f:5d:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjYwNzIzMDAwMzM4WhcNMjYwNzMwMDAwMzM4WjAYMRYwFAYD VQQDEw02YTYxNWE1Yi1kNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTFF9XxmeWXfSqtRdWjcYhRgCA/tBORKU3EOeiM2oPWSGPLP6XfgMvhgjJdk byGDJgIg5tTz1ItRwGx25njFau3jiLypXGbb+FSH4lA3jZQjqoNDxUCG8jEKkqCj 54uhPaYrEDK7xUrnrEzdW9bZTpiJgQIWPk+EOpnjNoJqmWAlqCB6sERp3BWFl37v Z1+1D/vNLwtSm0fEwP92vWii+3JlhLi1xK4t6I8p7RRfukiqrzXeAk7NUL8pasRs 9oeYWK3fdm1SHi1SdJSfkbalj19mHajC5LMavahXVmBoOiB+U8F3wQFaCyzjWSC9 F9ki0OpUekB99F4ogiq342QPMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrjd/Ox x1ZqEYThmTBWpsa0vZV6MB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYjzHkYuKGUZdAIJPPrjsBRi9U0L3S5GRcFW1kOg7xSe3WSRvPXIa9MFrGIUv GbdAlP3TJo2WstG4si/w7+oPWixDZJ5l/W4OT6N42BMSwpFrHJS00KfzVf4KmmH1 Ls/GBCW7uXIr1Lkenqlb+IcSZjEHHJ10ZKpRfKSXf0jKta1dfS1WFGQBEpIylBfy 5jRg+iT2/d5lByw1d8x2iGj1xwiGgeaVEr96HGRtJ89l2Wbzo8LB1RJWHsLYTueT Uy+Aoc8TkYA6ykYDI9p6oUn4zvh+YHYxebXRhVYVzeBhdP3qPjtbSBxhyYVo1T2f 1qlJJcyDRdq3WHtxg/OmH29d9A== -----END CERTIFICATE-----Generated at Fri Jul 24 06:37:22 2026 by rpki-client