$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json) Hash identifier: w166tlLn20GAJF0PPaliND23Fp7MKdp47zRwMx/bgS4= Subject key identifier: 31:05:21:61:5E:10:36:8E:3A:1E:DC:F8:78:93:17:45:D4:9E:CB:55 Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft Manifest number: 9E Signing time: Thu 23 Jul 2026 09:10:07 +0000 Manifest this update: Thu 23 Jul 2026 09:10:06 +0000 Manifest next update: Thu 30 Jul 2026 09:10:06 +0000 Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: TJj62c1nLLkmM2P0nJ3vvU5xrmWOLu7Mbw6x0nwSUbY=) 2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 2jaK9Imhu+Xw7a9whl7nd2mMko9E0vTzAQrleZ3Kuic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Validity Not Before: Jul 23 09:10:06 2026 GMT Not After : Jul 30 09:10:06 2026 GMT Subject: CN=6a61da6f-dc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:8d:54:bc:98:19:38:fa:c2:0d:5e:03:6a: 21:b6:0b:b3:a3:33:18:00:0a:ba:e8:bc:04:22:12: db:28:cc:62:28:b8:a1:05:7c:aa:3a:03:36:3b:8c: 4d:4c:98:89:65:2d:21:93:2e:d9:fa:6e:3a:74:e0: 37:ba:4c:e7:f6:2a:2b:53:1c:cc:70:68:dd:35:b7: f8:5d:8f:6e:a6:ef:a5:12:0b:63:de:cf:de:0f:f3: 02:cc:a9:3a:52:e4:f7:66:cc:4b:09:e8:2f:ff:85: 46:ff:a2:88:f3:c4:57:38:7f:85:d1:a3:55:7c:d1: 0c:ff:2c:c7:6e:24:ef:95:3b:9d:49:e7:c0:bf:c6: eb:87:06:a5:c7:d6:7b:0a:49:00:a7:be:ff:d3:12: 65:60:9c:03:61:ca:c2:08:94:a8:39:c6:8e:a3:ea: d7:8f:b5:ad:17:b7:b8:85:9a:9c:64:a7:cb:63:33: d4:71:60:f1:cd:82:ac:37:e9:ac:66:70:bd:45:11: 89:01:61:a3:78:47:2b:d2:ac:55:6e:29:01:e5:07: 4f:b8:33:55:d2:de:5a:53:80:51:2a:7a:2b:c9:54: e7:a0:64:3c:28:d0:b5:07:10:69:f2:d6:72:6a:8b: b9:c7:82:17:56:9b:db:66:c3:53:37:b5:d0:ed:5f: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:21:61:5E:10:36:8E:3A:1E:DC:F8:78:93:17:45:D4:9E:CB:55 X509v3 Authority Key Identifier: keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f7:8d:e0:25:e6:8d:53:5a:1f:ad:b1:9c:10:95:16:82:e9: 6e:31:d8:7e:84:69:27:8b:c9:ad:05:ae:de:7a:dc:bd:ba:83: 5b:58:31:c2:7c:d4:76:96:b4:97:d9:f6:a7:6a:46:70:48:b7: 08:aa:59:42:74:1e:d3:96:dc:9c:bb:e0:71:8d:2c:df:bd:23: 6d:dd:c5:74:3a:5d:50:09:d7:99:57:f7:26:e5:9c:28:f9:67: f0:e9:54:69:7f:a7:36:1e:05:1e:49:85:ea:be:b7:07:52:ee: ca:7e:fb:14:f5:2d:ad:a9:da:9f:e1:2f:78:10:88:63:67:c5: ae:5a:51:4d:48:07:f2:91:35:e2:61:76:1b:bc:a6:f2:c2:0a: 80:d8:d6:6f:2d:6d:b9:aa:41:f8:6a:31:db:b0:55:79:12:a4: c0:79:6e:10:49:be:64:17:99:63:66:03:53:a3:46:bf:d5:dc: 90:c7:5a:04:35:e4:ca:01:d0:ef:e3:32:f3:2a:61:55:86:22: f1:03:99:64:17:d4:49:3f:8d:46:b1:d1:4e:7f:65:96:84:a2: 35:6b:df:bd:e9:f8:97:f1:64:26:c2:37:74:65:79:51:ee:74: b0:74:bc:ab:25:59:ae:28:67:57:b9:69:e0:84:55:50:e3:ea: 82:79:91:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFNkQxMTAvBgNVBAUTKDIyNDcyMTg3NkExMUUyRDNBNEI5OEIyMUJDODRGNzhF NjRGRUM4NDYwHhcNMjYwNzIzMDkxMDA2WhcNMjYwNzMwMDkxMDA2WjAYMRYwFAYD VQQDEw02YTYxZGE2Zi1kYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38KNVLyYGTj6wg1eA2ohtguzozMYAAq66LwEIhLbKMxiKLihBXyqOgM2O4xN TJiJZS0hky7Z+m46dOA3ukzn9iorUxzMcGjdNbf4XY9upu+lEgtj3s/eD/MCzKk6 UuT3ZsxLCegv/4VG/6KI88RXOH+F0aNVfNEM/yzHbiTvlTudSefAv8brhwalx9Z7 CkkAp77/0xJlYJwDYcrCCJSoOcaOo+rXj7WtF7e4hZqcZKfLYzPUcWDxzYKsN+ms ZnC9RRGJAWGjeEcr0qxVbikB5QdPuDNV0t5aU4BRKnoryVTnoGQ8KNC1BxBp8tZy aou5x4IXVpvbZsNTN7XQ7V84IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEFIWFe EDaOOh7c+HiTF0XUnstVMB8GA1UdIwQYMBaAFCJHIYdqEeLTpLmLIbyE945k/shG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU2RC81MTExMEFGRTk3 NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0T2t1WXNodklUM2ptVC15 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU2RC81MTExMEFGRTk3NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0 T2t1WXNodklUM2ptVC15RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAofeN4CXmjVNaH62xnBCVFoLpbjHYfoRpJ4vJrQWu3nrcvbqDW1gxwnzUdpa0 l9n2p2pGcEi3CKpZQnQe05bcnLvgcY0s370jbd3FdDpdUAnXmVf3JuWcKPln8OlU aX+nNh4FHkmF6r63B1Luyn77FPUtranan+EveBCIY2fFrlpRTUgH8pE14mF2G7ym 8sIKgNjWby1tuapB+Gox27BVeRKkwHluEEm+ZBeZY2YDU6NGv9XckMdaBDXkygHQ 7+My8yphVYYi8QOZZBfUST+NRrHRTn9lloSiNWvfven4l/FkJsI3dGV5Ue50sHS8 qyVZrihnV7lp4IRVUOPqgnmRdQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:00:46 2026 by rpki-client