$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: 5GNa0p/I+/ZE9rDfOdBAPpq5fnoOB4M2uTLpOAbwXaw= Subject key identifier: 3A:B9:91:90:86:97:D2:C9:0D:47:AF:A6:C1:E8:DE:EC:35:05:0C:36 Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0C88 Signing time: Wed 22 Jul 2026 18:55:26 +0000 Manifest this update: Wed 22 Jul 2026 18:55:26 +0000 Manifest next update: Wed 29 Jul 2026 18:55:26 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: I8Sa6I8bBFuPJPijJVjcZ7MBR+zQWgrn+9JoavSivx4=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: aUl7t5S7wwdZHMJJBNCy28ETR7/g4qJO+m/jz+Gzuxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: Jul 22 18:55:26 2026 GMT Not After : Jul 29 18:55:26 2026 GMT Subject: CN=6a61121e-8069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:25:a6:3a:ed:13:80:70:05:b5:17:c7:71: 6e:b9:2e:5b:b5:33:c9:28:83:ec:e2:bb:9d:a3:03: 93:6a:6b:ae:b4:6d:b6:79:40:d5:66:ee:6b:f7:8a: 93:5c:d7:ea:66:fc:7f:6b:dd:2e:8e:44:c8:c9:0c: 49:5e:f8:0d:9f:01:ec:e2:59:71:ec:c6:11:c5:34: 9c:3e:9e:ab:dd:f0:37:d3:a7:7f:11:bd:37:1f:94: 21:3e:96:96:fb:fe:93:13:84:7e:13:37:71:d1:b7: 9b:80:e5:0a:df:19:55:46:28:d4:a4:3f:f2:76:e4: d1:29:a2:bc:b4:b0:40:ad:91:9a:84:f6:3b:7a:3d: f9:e0:00:59:01:04:ac:32:b6:96:e7:b7:8b:6a:6f: ce:98:4b:69:8e:60:ce:70:3e:98:b2:56:8d:eb:06: 7c:0b:9a:d3:59:06:98:ca:fa:d0:a8:74:6c:9f:66: b5:83:07:df:12:6e:54:90:93:f0:8f:ae:b6:32:9d: bf:ee:86:55:07:8a:e9:7e:2d:ac:21:2f:9f:f6:92: 7f:7b:d2:ef:d7:d8:21:6f:4d:3c:e5:2d:9e:26:81: e7:e3:0e:cb:ef:7a:72:1f:1e:59:b5:d7:c8:6d:0a: 8d:b7:3b:cb:79:de:76:dc:de:07:02:8f:14:ad:b8: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B9:91:90:86:97:D2:C9:0D:47:AF:A6:C1:E8:DE:EC:35:05:0C:36 X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6e:de:59:2d:fb:9e:98:29:0b:e4:23:60:dd:61:2e:36:ea: 4e:d8:90:c0:d1:ed:e8:c6:0d:77:30:d8:fe:79:68:fe:db:70: a6:08:22:04:67:75:61:59:e1:7f:dc:30:bc:7e:c2:bc:03:64: dc:35:71:da:08:ac:f4:85:ca:7d:8e:f7:d0:5a:e6:a6:44:59: 0d:d3:79:b9:42:ec:c6:17:a1:fd:59:c1:d0:a3:a1:3d:13:58: 2b:35:e1:48:31:b8:42:45:98:c8:a4:0a:d2:4d:37:f1:a7:5a: e2:be:d6:cb:78:ed:2a:68:b6:a0:75:cf:05:62:41:12:3f:da: 1f:30:3a:ab:be:61:ac:ae:1f:58:2b:9f:06:ee:72:08:21:86: d4:fe:ee:ab:07:b6:71:dd:d0:a3:5c:49:2c:3b:27:c8:45:a6: 59:c0:18:38:45:d9:dc:b7:b3:5e:2b:d6:20:5e:62:1c:b5:e8: 1a:d1:56:2c:6d:ec:8b:ef:00:07:af:35:3c:a2:6f:2a:f5:f2: 5b:c5:79:80:35:f3:1b:25:2d:34:ea:bd:14:1f:80:67:a8:56: 20:19:91:13:83:eb:66:f2:e9:a4:5f:7c:c8:8c:98:8f:5c:f9: 87:3c:e8:86:38:e2:b8:2c:fe:bf:40:2e:d9:97:5a:d1:3f:95: 17:96:9d:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjYwNzIyMTg1NTI2WhcNMjYwNzI5MTg1NTI2WjAYMRYwFAYD VQQDEw02YTYxMTIxZS04MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBslpjrtE4BwBbUXx3FuuS5btTPJKIPs4rudowOTamuutG22eUDVZu5r94qT XNfqZvx/a90ujkTIyQxJXvgNnwHs4llx7MYRxTScPp6r3fA306d/Eb03H5QhPpaW +/6TE4R+Ezdx0bebgOUK3xlVRijUpD/yduTRKaK8tLBArZGahPY7ej354ABZAQSs MraW57eLam/OmEtpjmDOcD6YslaN6wZ8C5rTWQaYyvrQqHRsn2a1gwffEm5UkJPw j662Mp2/7oZVB4rpfi2sIS+f9pJ/e9Lv19ghb0085S2eJoHn4w7L73pyHx5ZtdfI bQqNtzvLed523N4HAo8UrbgmeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDq5kZCG l9LJDUevpsHo3uw1BQw2MB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfG7eWS37npgpC+QjYN1hLjbqTtiQwNHt6MYNdzDY/nlo/ttwpggiBGd1YVnh f9wwvH7CvANk3DVx2gis9IXKfY730FrmpkRZDdN5uULsxheh/VnB0KOhPRNYKzXh SDG4QkWYyKQK0k038ada4r7Wy3jtKmi2oHXPBWJBEj/aHzA6q75hrK4fWCufBu5y CCGG1P7uqwe2cd3Qo1xJLDsnyEWmWcAYOEXZ3LezXivWIF5iHLXoGtFWLG3si+8A B681PKJvKvXyW8V5gDXzGyUtNOq9FB+AZ6hWIBmRE4PrZvLppF98yIyYj1z5hzzo hjjiuCz+v0Au2Zda0T+VF5adcA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:57:50 2026 by rpki-client