$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft File: iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json) Hash identifier: 5aCAYdXKaii8McKjyjVLoLUvNgYgWU8ay6ARJ+k2lAE= Subject key identifier: FF:E4:D6:AA:1B:37:27:AF:E3:45:70:F1:D7:3A:26:C8:BD:85:5A:EE Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD Certificate issuer: /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft Manifest number: 68 Signing time: Thu 23 Jul 2026 10:00:06 +0000 Manifest this update: Thu 23 Jul 2026 10:00:05 +0000 Manifest next update: Thu 30 Jul 2026 10:00:05 +0000 Files and hashes: 1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: vh80ZTHl3rOp7BmatfoIhtnpkIyZHDVtH4aBMqa78hk=) 2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Validity Not Before: Jul 23 10:00:05 2026 GMT Not After : Jul 30 10:00:05 2026 GMT Subject: CN=6a61e626-3f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:56:42:31:12:84:39:3b:df:f1:93:48:de:9a: 0e:5b:24:ed:97:91:68:cb:9a:36:c1:72:e9:53:f5: d3:3d:a6:be:ed:e2:95:e1:8e:17:98:e6:81:56:75: b6:aa:26:c0:98:94:1f:23:8b:b0:b4:34:91:24:d7: 6c:61:a2:fe:50:e0:7c:ad:a3:82:54:8a:7a:d4:6d: 9e:a1:ba:ca:de:96:bc:e0:8a:ed:46:4f:0a:ab:5a: ce:e4:6f:58:02:ec:5d:e3:0c:b9:31:27:00:35:4e: 6b:db:85:1b:37:b9:df:27:b5:97:45:cf:76:7a:a7: 07:cd:ec:d9:09:49:6d:94:77:3c:4a:11:40:e9:8e: e9:dd:41:e4:ea:63:cf:29:61:98:96:58:1f:d9:b6: 03:62:70:18:26:99:43:d5:17:77:c2:14:c9:16:ac: 70:54:54:9b:09:7d:b0:fb:68:2b:d3:5e:1d:f5:b0: b1:4c:95:47:bd:14:8e:ca:03:1b:8f:36:0d:f7:08: 40:ca:eb:29:d2:f9:51:b7:48:c3:6c:e4:ba:d5:c2: 6a:18:02:e2:f3:9a:3c:e3:c3:1d:a2:2d:d6:a4:95: 8a:42:f7:ad:71:99:1c:75:1e:53:20:f0:6d:28:83: 4a:12:82:5e:20:87:ee:7a:21:1b:3b:bd:ef:8e:73: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E4:D6:AA:1B:37:27:AF:E3:45:70:F1:D7:3A:26:C8:BD:85:5A:EE X509v3 Authority Key Identifier: keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:54:8d:56:95:2f:55:b5:79:10:c4:8d:a4:b4:7d:2d:d0:3f: f4:5f:92:89:41:7e:5e:17:f1:e1:52:ee:0e:38:b4:f6:25:f4: c3:d9:92:89:8b:ae:69:87:21:2b:c3:ee:10:7d:9a:73:c1:7a: 05:c6:3b:92:ea:9d:2b:3b:7e:04:07:fd:51:2b:6f:ff:6b:58: 87:63:0c:c6:6d:60:df:f1:98:bf:dc:5b:07:fa:1d:f4:fa:7e: a9:6f:a7:25:e4:c0:67:8a:36:97:ef:61:21:c0:92:dc:41:7e: 98:81:41:19:85:e3:b1:60:d7:3a:f0:5b:94:eb:a3:3e:3f:19: 2d:12:9c:cb:47:80:e7:05:b3:69:6c:9f:9a:34:52:04:8a:b2: 26:fe:58:45:2e:b7:ff:6a:35:01:ea:fb:ea:2d:3f:61:49:52: bc:24:a1:ee:7c:20:e5:a0:71:76:b2:24:03:b3:d2:bd:8b:30: 0c:3d:b0:7c:b1:b3:2b:e6:2c:03:5f:14:03:a8:71:9d:0b:e6: 2d:e3:13:81:41:e9:35:4c:fc:0e:42:f4:c2:fb:4d:d7:a6:a6: e3:e3:77:dc:35:6e:4a:47:28:3a:de:3e:83:9e:03:64:67:78: 9e:f2:96:b4:94:bd:b9:77:27:9e:c7:82:aa:df:95:93:5c:ab: 81:6d:e4:17 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoODkwMjY4RkQyNUM3NzlFMzZGQkI4NzJGNjAxM0YzMDQx NUZGQTJERDAeFw0yNjA3MjMxMDAwMDVaFw0yNjA3MzAxMDAwMDVaMBgxFjAUBgNV BAMTDTZhNjFlNjI2LTNmOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfVkIxEoQ5O9/xk0jemg5bJO2XkWjLmjbBculT9dM9pr7t4pXhjheY5oFWdbaq JsCYlB8ji7C0NJEk12xhov5Q4Hyto4JUinrUbZ6husrelrzgiu1GTwqrWs7kb1gC 7F3jDLkxJwA1TmvbhRs3ud8ntZdFz3Z6pwfN7NkJSW2UdzxKEUDpjundQeTqY88p YZiWWB/ZtgNicBgmmUPVF3fCFMkWrHBUVJsJfbD7aCvTXh31sLFMlUe9FI7KAxuP Ng33CEDK6ynS+VG3SMNs5LrVwmoYAuLzmjzjwx2iLdaklYpC961xmRx1HlMg8G0o g0oSgl4gh+56IRs7ve+Oc0o9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/+TWqhs3 J6/jRXDx1zomyL2FWu4wHwYDVR0jBBgwFoAUiQJo/SXHeeNvu4cvYBPzBBX/ot0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzVFQTM0NjJBRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVOdnU0Y3ZZQlB6QkJYX290 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVFKb19TWEhlZU52dTRjdllCUHpCQlhfb3QwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzVFQTM0NjJBRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVO dnU0Y3ZZQlB6QkJYX290MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChVI1WlS9VtXkQxI2ktH0t0D/0X5KJQX5eF/HhUu4OOLT2JfTD2ZKJi65phyEr w+4QfZpzwXoFxjuS6p0rO34EB/1RK2//a1iHYwzGbWDf8Zi/3FsH+h30+n6pb6cl 5MBnijaX72EhwJLcQX6YgUEZheOxYNc68FuU66M+PxktEpzLR4DnBbNpbJ+aNFIE irIm/lhFLrf/ajUB6vvqLT9hSVK8JKHufCDloHF2siQDs9K9izAMPbB8sbMr5iwD XxQDqHGdC+Yt4xOBQek1TPwOQvTC+03Xpqbj43fcNW5KRyg63j6DngNkZ3ie8pa0 lL25dyeex4Kq35WTXKuBbeQX -----END CERTIFICATE-----Generated at Fri Jul 24 12:52:07 2026 by rpki-client