$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: k7F/3sl0aGn7lX90iJaMCjeippRLLPjuOKnXbbOmrdk= Subject key identifier: 10:B2:6E:3C:3F:2C:13:B7:38:6D:85:11:13:CA:0C:B7:9A:FF:EF:FA Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 012F Signing time: Wed 22 Jul 2026 17:41:19 +0000 Manifest this update: Wed 22 Jul 2026 17:41:18 +0000 Manifest next update: Wed 29 Jul 2026 17:41:18 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: xt83XYHkj7cwi3XHkRg03R7zSbdiYSXTokUIEDk0ss8=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Jul 22 17:41:18 2026 GMT Not After : Jul 29 17:41:18 2026 GMT Subject: CN=6a6100bf-f154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:cf:a4:7b:ef:4f:d9:79:8e:47:90:d7:57: 44:e2:8b:4b:96:6e:33:00:d6:a2:ab:31:1d:0a:58: c0:c4:55:28:77:70:1f:1c:95:b5:4a:8e:86:27:50: d7:ee:24:1e:4f:e7:dc:59:41:29:7a:ac:ee:67:7d: 3b:5d:a5:17:a6:57:34:1d:6b:fa:bf:1e:8a:20:ec: 9a:cf:30:72:d1:29:9f:89:b4:92:84:be:a5:41:a8: 01:1c:f8:3e:28:2f:20:c6:98:03:ca:2a:9b:23:d0: 3b:d2:e4:a9:24:2b:62:94:73:c9:67:98:76:19:06: ff:7a:c1:aa:a8:df:85:46:36:e1:1f:52:8e:30:42: 54:ee:e4:e9:8f:c1:ea:f4:b7:4e:99:65:6b:00:57: 4b:6a:73:6b:af:c6:0a:b0:d5:fe:6f:39:85:d6:c0: bb:9b:83:42:be:c6:ac:b4:84:ee:0f:93:c3:d7:3b: 37:90:a4:92:ae:87:a8:4a:75:96:1d:b0:7a:67:30: 76:d8:54:52:db:f0:79:88:1d:33:bc:b3:98:75:15: c3:7b:0a:63:f6:0a:06:34:a7:a9:b7:51:82:f8:37: 30:7b:bd:e1:4e:dd:04:3c:95:d3:16:b8:a0:b6:8c: d7:0d:29:e6:ed:87:07:ee:ae:a8:2b:75:95:27:d5: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:6E:3C:3F:2C:13:B7:38:6D:85:11:13:CA:0C:B7:9A:FF:EF:FA X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:7a:4e:2c:ec:fc:28:70:e1:bf:3c:ca:18:cc:90:d1:63:ff: 3f:38:a1:a4:ef:73:22:d3:9d:ea:4f:7a:67:5b:d2:f4:df:15: 18:ec:84:01:e2:07:72:72:d6:a4:b5:1c:92:2d:ba:22:b5:58: 5d:23:3e:7f:53:01:bd:dd:20:a4:19:01:dd:6e:83:06:f5:e2: 35:dc:82:37:c8:5c:9f:e3:51:c8:2d:65:4a:14:61:7e:9c:b4: 15:8c:6e:f6:04:ec:19:38:b0:03:6d:01:6c:ae:db:a9:8d:27: 21:d2:59:85:ce:11:ca:2c:bd:83:e2:55:3c:45:7a:1d:ae:34: d7:f9:7e:f9:77:17:4f:b3:52:80:d0:ba:fa:58:86:7c:1f:48: 6a:c4:6e:62:ce:bc:4a:60:6a:b1:aa:d2:47:b7:6d:14:88:1a: c5:90:c7:ae:07:c3:a0:ba:fc:5a:f2:79:03:14:8b:d5:32:ca: cb:73:da:ba:64:ff:26:c6:27:8f:80:dc:a9:8b:00:86:25:66: 43:17:84:9c:c4:04:b0:86:09:0a:43:06:19:41:da:a8:ec:65: 6e:95:31:18:a7:e1:45:85:07:b0:76:56:cc:b0:d4:81:ed:60: c8:a8:34:0b:8c:bd:46:4a:b6:42:06:b1:5c:53:58:12:8b:a1: e7:1c:d2:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYwNzIyMTc0MTE4WhcNMjYwNzI5MTc0MTE4WjAYMRYwFAYD VQQDEw02YTYxMDBiZi1mMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1DPpHvvT9l5jkeQ11dE4otLlm4zANaiqzEdCljAxFUod3AfHJW1So6GJ1DX 7iQeT+fcWUEpeqzuZ307XaUXplc0HWv6vx6KIOyazzBy0SmfibSShL6lQagBHPg+ KC8gxpgDyiqbI9A70uSpJCtilHPJZ5h2GQb/esGqqN+FRjbhH1KOMEJU7uTpj8Hq 9LdOmWVrAFdLanNrr8YKsNX+bzmF1sC7m4NCvsastITuD5PD1zs3kKSSroeoSnWW HbB6ZzB22FRS2/B5iB0zvLOYdRXDewpj9goGNKept1GC+Dcwe73hTt0EPJXTFrig tozXDSnm7YcH7q6oK3WVJ9XsLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCybjw/ LBO3OG2FERPKDLea/+/6MB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyHpOLOz8KHDhvzzKGMyQ0WP/PzihpO9zItOd6k96Z1vS9N8VGOyEAeIHcnLW pLUcki26IrVYXSM+f1MBvd0gpBkB3W6DBvXiNdyCN8hcn+NRyC1lShRhfpy0FYxu 9gTsGTiwA20BbK7bqY0nIdJZhc4Ryiy9g+JVPEV6Ha401/l++XcXT7NSgNC6+liG fB9IasRuYs68SmBqsarSR7dtFIgaxZDHrgfDoLr8WvJ5AxSL1TLKy3PaumT/JsYn j4DcqYsAhiVmQxeEnMQEsIYJCkMGGUHaqOxlbpUxGKfhRYUHsHZWzLDUge1gyKg0 C4y9Rkq2QgaxXFNYEouh5xzSRQ== -----END CERTIFICATE-----Generated at Fri Jul 24 09:03:41 2026 by rpki-client