$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft File: IY_bC_-9DsQ8Nb53hZviztXFQOo.mft (raw, json) Hash identifier: iFU2IxIMytJxdpzpGJaREmEcXxQ4Frvp0+BIclk4JtU= Subject key identifier: CA:2E:17:E6:2E:3D:66:4C:EC:2E:2B:72:0D:16:A1:1A:81:88:E6:9F Authority key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA Certificate issuer: /CN=A91CF477/serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft Manifest number: 0F Signing time: Thu 23 Jul 2026 11:11:39 +0000 Manifest this update: Thu 23 Jul 2026 11:11:38 +0000 Manifest next update: Thu 30 Jul 2026 11:11:38 +0000 Files and hashes: 1: IY_bC_-9DsQ8Nb53hZviztXFQOo.crl (hash: 5phh9n+uzLPpX6S5igwyyHV4EXHrMCQVQmtGG0xYtbg=) 2: BB05DCBA712511F1BDAC11CB6EA30FBC.roa (hash: P4GuX5ou/U+Rpw8seN62fuLfOYRcHVXRnnvShlDFcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA Validity Not Before: Jul 23 11:11:38 2026 GMT Not After : Jul 30 11:11:38 2026 GMT Subject: CN=6a61f6eb-7b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1a:fd:69:15:4c:b5:4f:82:49:1e:09:3f:d7: bd:c8:b4:81:c5:ed:ba:43:53:15:ea:80:12:84:4f: ed:45:16:3a:a6:fc:f3:fd:34:09:24:9d:b6:0c:46: 04:68:10:20:66:0a:aa:48:5c:f6:20:e9:c3:9c:2b: c1:fe:b9:9c:a9:ab:fd:44:58:e0:77:f5:46:76:35: 32:ff:4a:cd:7e:f3:4c:37:32:6d:12:a4:fe:9c:89: e5:f8:3b:9e:ae:85:d4:72:44:fd:a6:15:5e:ef:42: f3:fa:79:49:f4:6b:1e:0d:6a:01:06:31:47:b1:58: 68:c1:59:5f:a0:c0:ec:23:e4:8a:5e:c4:94:d0:9f: 48:5a:9d:b7:a8:5d:eb:9d:47:5e:91:cf:dd:c4:03: 0d:99:63:3d:87:26:0d:88:ef:f4:ba:1e:d6:46:e8: 52:e5:d5:0a:db:12:9b:11:a0:a5:3b:d4:78:fa:b0: 95:96:ef:47:81:36:45:d4:c1:43:89:96:b8:73:74: 51:00:64:98:1e:ba:e6:8d:5c:04:9e:81:6c:90:41: a7:50:1a:cf:76:ba:c9:d0:98:74:f1:1a:b5:c2:cc: 69:ea:89:f3:e6:3e:26:95:f5:03:5d:19:4f:83:f3: cd:21:fd:b3:8d:3d:07:ff:64:0b:61:bf:d3:61:72: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2E:17:E6:2E:3D:66:4C:EC:2E:2B:72:0D:16:A1:1A:81:88:E6:9F X509v3 Authority Key Identifier: keyid:21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:05:16:13:c4:f7:bc:3e:4a:52:f1:77:de:ab:00:99:71: 69:d2:d4:d8:12:27:9b:e6:3a:4b:a6:9e:7c:e3:16:1d:11:db: 88:6d:c7:af:90:f9:64:8e:20:3d:93:a2:8f:d1:38:2e:07:a1: a7:5b:46:af:ed:61:e5:bf:75:1f:b5:36:6f:a2:97:41:4d:29: 3f:3f:9b:d2:43:2f:eb:19:c4:5a:3a:aa:fa:d3:c3:a8:20:22: b8:9f:7a:f7:f9:cc:98:7a:ca:d6:68:f1:52:0f:f5:57:5d:9b: ea:e1:24:c6:c8:c7:7a:fe:58:01:a2:0f:c8:e8:92:f6:81:be: 82:ee:9b:39:15:25:30:fe:6d:2d:45:7e:a2:5d:7e:4e:1f:41: 11:ad:e9:73:ab:4b:b1:db:72:ec:9c:a9:95:08:61:3d:c7:fa: 00:6f:91:46:3b:ba:ff:f6:95:7a:af:67:81:5a:2d:fe:26:12: 51:5f:04:1c:e6:93:74:3e:52:b1:3b:d9:4e:6c:e0:9b:aa:38: f4:4c:36:0e:17:35:6a:58:ba:37:a6:05:d2:dc:13:f2:c2:3b: 08:b9:80:aa:ff:aa:ac:7c:bf:f7:fb:b4:0e:e7:84:55:2f:f6: 67:50:e0:c5:b4:29:b9:4e:f3:0d:ba:5d:54:b6:e3:5e:06:f3: ec:7a:db:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RjQ3NzExMC8GA1UEBRMoMjE4RkRCMEJGRkJEMEVDNDNDMzVCRTc3ODU5QkUyQ0VE NUM1NDBFQTAeFw0yNjA3MjMxMTExMzhaFw0yNjA3MzAxMTExMzhaMBgxFjAUBgNV BAMTDTZhNjFmNmViLTdiMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRGv1pFUy1T4JJHgk/173ItIHF7bpDUxXqgBKET+1FFjqm/PP9NAkknbYMRgRo ECBmCqpIXPYg6cOcK8H+uZypq/1EWOB39UZ2NTL/Ss1+80w3Mm0SpP6cieX4O56u hdRyRP2mFV7vQvP6eUn0ax4NagEGMUexWGjBWV+gwOwj5IpexJTQn0hanbeoXeud R16Rz93EAw2ZYz2HJg2I7/S6HtZG6FLl1QrbEpsRoKU71Hj6sJWW70eBNkXUwUOJ lrhzdFEAZJgeuuaNXASegWyQQadQGs92usnQmHTxGrXCzGnqifPmPiaV9QNdGU+D 880h/bONPQf/ZAthv9NhcibfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyi4X5i49 ZkzsLityDRahGoGI5p8wHwYDVR0jBBgwFoAUIY/bC/+9DsQ8Nb53hZviztXFQOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGNDc3LzY1NDJDNjQ0NzEy NTExRjE4N0VBQURDQTZEQTMwRkJDL0lZX2JDXy05RHNROE5iNTNoWnZpenRYRlFP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVlfYkNfLTlEc1E4TmI1M2hadml6dFhGUU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG NDc3LzY1NDJDNjQ0NzEyNTExRjE4N0VBQURDQTZEQTMwRkJDL0lZX2JDXy05RHNR OE5iNTNoWnZpenRYRlFPby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpjAUWE8T3vD5KUvF33qsAmXFp0tTYEieb5jpLpp584xYdEduIbcevkPlkjiA9 k6KP0TguB6GnW0av7WHlv3UftTZvopdBTSk/P5vSQy/rGcRaOqr608OoICK4n3r3 +cyYesrWaPFSD/VXXZvq4STGyMd6/lgBog/I6JL2gb6C7ps5FSUw/m0tRX6iXX5O H0ERrelzq0ux23LsnKmVCGE9x/oAb5FGO7r/9pV6r2eBWi3+JhJRXwQc5pN0PlKx O9lObOCbqjj0TDYOFzVqWLo3pgXS3BPywjsIuYCq/6qsfL/3+7QO54RVL/ZnUODF tCm5TvMNul1UtuNeBvPsetvZ -----END CERTIFICATE-----Generated at Fri Jul 24 19:24:47 2026 by rpki-client