$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft File: i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json) Hash identifier: W9Ww3bnUI7c9tLRDIgCID6j7hO8pItAatq49deMuBII= Subject key identifier: 3B:D8:4B:25:2D:F7:67:D0:C4:68:72:EA:4F:6C:97:98:73:14:B1:21 Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft Manifest number: 015F Signing time: Thu 23 Jul 2026 06:35:06 +0000 Manifest this update: Thu 23 Jul 2026 06:35:06 +0000 Manifest next update: Thu 30 Jul 2026 06:35:06 +0000 Files and hashes: 1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: gmBRJ4cmVcMfCe9C5WMcjnmovP9GlE0waZ6dkWlUZU4=) 2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: /pgTpJCeELO0vx7ey0ylXFhJZdDNJrts1Zcttp5czrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Validity Not Before: Jul 23 06:35:06 2026 GMT Not After : Jul 30 06:35:06 2026 GMT Subject: CN=6a61b61a-75fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:3f:ec:aa:b7:f4:48:81:94:b8:94:cb:3c: 08:68:ab:1e:5c:22:33:31:1e:68:a4:26:18:e6:b4: c1:da:3f:18:07:e6:09:81:13:2c:09:93:50:1c:07: ad:df:a5:b1:6c:02:d2:96:f9:65:4c:29:1d:bc:d7: 17:0b:44:5a:0d:a9:dc:d8:80:ba:e9:69:85:46:f7: 72:91:5a:b0:2f:80:3b:09:2e:52:60:40:8a:6e:5f: 5c:e8:47:03:3b:97:b9:2f:87:29:f8:4c:f5:76:02: 6c:db:2e:cc:c8:50:6c:6a:18:9c:46:7c:71:65:03: 1c:a2:8c:97:ab:40:58:82:fd:85:c2:ae:99:2b:5e: b6:e6:d0:1d:25:0f:b9:fa:f8:d1:73:84:56:e6:86: 7c:f1:a6:1b:60:37:d1:28:8f:37:a4:4f:62:9d:b8: 33:53:6f:00:11:09:26:7c:2e:19:18:e0:28:d1:d4: 9b:7c:9f:49:37:7f:a6:29:c6:1d:32:01:1f:4f:19: 45:98:8f:99:b9:4b:8b:be:d7:4e:27:76:0c:fe:d8: da:c7:86:14:65:cb:52:35:9d:97:26:d1:97:75:e3: 09:af:48:e9:83:24:f0:0f:96:6d:d6:b1:1c:6a:ad: cd:a5:18:45:2d:f2:d0:a0:07:b5:d4:30:01:7f:2a: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D8:4B:25:2D:F7:67:D0:C4:68:72:EA:4F:6C:97:98:73:14:B1:21 X509v3 Authority Key Identifier: keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:44:6e:5c:a4:da:92:00:94:4e:63:5e:e8:47:5a:b0:de: 85:bf:cf:a4:9b:97:53:37:1e:80:48:28:55:50:ef:ab:77:3c: 72:37:b0:f6:ad:ac:11:57:9c:5b:e3:b3:25:54:b2:77:e9:2c: 11:75:5b:97:25:39:ae:07:e3:36:f0:b0:cd:b6:91:5d:7f:0f: dd:aa:48:de:4e:2e:11:d2:af:ae:b3:32:73:b9:51:d0:26:86: 36:4e:55:5e:12:fb:da:53:c5:c8:94:72:d4:64:be:b1:53:6b: 6c:9c:77:f8:2c:80:8e:f5:87:c0:53:c6:95:3e:b2:a2:63:aa: 87:22:f6:b7:62:75:5c:46:53:86:04:8c:c5:95:c2:f3:51:1c: 3a:f5:ea:5e:b2:95:99:63:fa:ea:87:1a:3d:c6:c7:47:ee:0e: 9e:d0:06:6d:3d:cc:90:f4:6f:07:84:80:f3:4c:b3:ac:49:22: 27:f2:67:fe:9b:b3:33:b7:5b:c7:1e:93:32:e2:9c:c9:7f:fd: 07:d3:df:a9:d7:cf:55:d4:e4:3e:87:30:83:4b:41:af:2d:df: 3e:a4:9e:9b:17:9d:32:81:31:47:42:43:96:57:49:3c:45:ac: b0:1b:24:51:8a:5f:0c:6d:2e:6f:28:b6:79:fa:17:45:20:7c: 96:51:03:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKDhCNDg2QUNDQUYxMkE2N0E5NTY4OEU4RDExQkQ2NThD MDQxQzEyNUEwHhcNMjYwNzIzMDYzNTA2WhcNMjYwNzMwMDYzNTA2WjAYMRYwFAYD VQQDEw02YTYxYjYxYS03NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZQ/7Kq39EiBlLiUyzwIaKseXCIzMR5opCYY5rTB2j8YB+YJgRMsCZNQHAet 36WxbALSlvllTCkdvNcXC0RaDanc2IC66WmFRvdykVqwL4A7CS5SYECKbl9c6EcD O5e5L4cp+Ez1dgJs2y7MyFBsahicRnxxZQMcooyXq0BYgv2Fwq6ZK1625tAdJQ+5 +vjRc4RW5oZ88aYbYDfRKI83pE9inbgzU28AEQkmfC4ZGOAo0dSbfJ9JN3+mKcYd MgEfTxlFmI+ZuUuLvtdOJ3YM/tjax4YUZctSNZ2XJtGXdeMJr0jpgyTwD5Zt1rEc aq3NpRhFLfLQoAe11DABfyqhdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvYSyUt 92fQxGhy6k9sl5hzFLEhMB8GA1UdIwQYMBaAFItIasyvEqZ6lWiOjRG9ZYwEHBJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi80RDdDRTY2QTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi9pMGhxeks4U3BucVZhSTZORWIxbGpBUWNF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2kwaHF6SzhTcG5xVmFJNk5FYjFsakFRY0Vsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi80RDdDRTY2QTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi9pMGhxeks4U3Bu cVZhSTZORWIxbGpBUWNFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABFFEblyk2pIAlE5jXuhHWrDehb/PpJuXUzcegEgoVVDvq3c8cjew9q2sEVec W+OzJVSyd+ksEXVblyU5rgfjNvCwzbaRXX8P3apI3k4uEdKvrrMyc7lR0CaGNk5V XhL72lPFyJRy1GS+sVNrbJx3+CyAjvWHwFPGlT6yomOqhyL2t2J1XEZThgSMxZXC 81EcOvXqXrKVmWP66ocaPcbHR+4OntAGbT3MkPRvB4SA80yzrEkiJ/Jn/puzM7db xx6TMuKcyX/9B9PfqdfPVdTkPocwg0tBry3fPqSemxedMoExR0JDlldJPEWssBsk UYpfDG0ubyi2efoXRSB8llED4g== -----END CERTIFICATE-----Generated at Thu Jul 23 21:54:46 2026 by rpki-client