$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: Lxe6KpuEBSuVGMKBvyNvRmiy5PbkA/P6piitz6YFPRU= Subject key identifier: B5:72:7D:34:45:EE:3A:E8:8E:EC:1C:59:E7:CF:29:2F:B2:D7:B7:49 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 0592 Signing time: Wed 22 Jul 2026 23:59:12 +0000 Manifest this update: Wed 22 Jul 2026 23:59:11 +0000 Manifest next update: Wed 29 Jul 2026 23:59:11 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: V0D3Xy+fmC8kMUihrZZH3gcMrenlkJcUWwi7JFZ+2VE=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: GjQyrBrtjLGGx1Z0J/WzD76UJKpZKFLKZW1IsmAIl18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Jul 22 23:59:11 2026 GMT Not After : Jul 29 23:59:11 2026 GMT Subject: CN=6a615950-7dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9f:23:b2:2e:6c:1e:2b:ab:4e:84:34:32:c3: 0d:3b:50:24:5d:2a:15:43:a9:83:b3:28:2a:2f:46: d3:fa:6b:8a:d7:d3:4e:af:af:fc:10:96:9e:2e:db: 6e:27:48:d1:66:ca:7e:50:71:0e:3f:e0:02:7c:8a: 9e:b6:bd:93:fe:cd:f7:62:6c:e1:89:02:e5:3a:73: 68:0f:15:34:08:79:63:aa:16:34:6d:69:92:7f:d3: 26:aa:84:50:1e:da:7c:10:8e:0a:f1:db:ad:cd:87: 51:f4:b0:30:a3:96:a1:17:39:3a:78:58:4f:d4:75: 6b:c2:53:70:c5:d0:2e:17:23:10:0c:5c:1f:13:89: 49:a8:c7:da:a4:51:e7:ed:b1:f2:f5:e7:87:e9:50: ca:10:e6:d6:ed:ee:58:6c:71:18:d0:78:88:7d:d6: 89:4f:8f:2b:68:b0:78:6b:56:cd:7a:a9:70:36:f5: 34:81:ff:a6:a2:2e:c3:bf:13:80:c4:db:9f:26:2c: 1a:09:0b:6f:75:96:02:ae:fa:78:81:a6:c5:38:b3: 9f:49:c0:3d:be:a5:b1:2d:b1:f6:fe:e2:3b:b7:55: 9e:9c:3d:3d:de:8a:72:90:83:3e:9e:ca:40:d6:38: 74:b9:8e:e9:1c:f2:70:18:09:24:9a:3a:bc:78:b6: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:72:7D:34:45:EE:3A:E8:8E:EC:1C:59:E7:CF:29:2F:B2:D7:B7:49 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:8b:54:a9:a9:0d:1c:d6:67:90:01:5f:4b:71:35:4d:3b:cc: 0d:1a:8f:ae:10:1d:73:bb:15:01:ff:d1:19:ed:4f:00:b6:96: cb:82:cd:29:de:59:6b:ac:e5:40:3e:15:04:fe:e8:60:ef:9b: 8a:7a:63:7a:30:69:25:02:2f:ca:51:25:53:f3:6d:2e:c8:5f: 5f:8d:4b:b2:00:1b:8b:d9:a2:45:8b:d4:2f:97:29:4d:d8:cd: ed:c6:53:b8:d8:a7:27:a7:4a:65:7f:b3:d5:a4:77:51:28:16: 69:50:0b:bd:ff:3b:91:b1:38:7f:54:7c:fb:e1:6d:81:b3:dd: 69:21:38:90:71:17:02:d5:9f:73:57:42:40:cb:cf:81:09:3a: ed:d2:fc:08:d5:9c:11:76:98:fb:6f:18:bc:28:76:24:44:51: 4c:5e:f3:b0:a6:42:d8:ad:9a:1a:17:24:02:63:85:1c:f8:70: 9e:56:90:7e:cb:85:e0:22:98:79:c8:6f:c3:d9:e7:45:1c:3a: 27:4a:73:c7:7b:d5:71:40:3f:0c:01:f6:7d:30:7e:4b:35:ef: 7e:ad:01:16:3a:92:ea:57:14:14:a9:b1:83:07:ee:fe:85:78: 63:b1:f5:e5:41:14:75:56:2b:4d:4a:16:01:90:c5:38:c9:cd: 77:d1:3c:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjYwNzIyMjM1OTExWhcNMjYwNzI5MjM1OTExWjAYMRYwFAYD VQQDEw02YTYxNTk1MC03ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAip8jsi5sHiurToQ0MsMNO1AkXSoVQ6mDsygqL0bT+muK19NOr6/8EJaeLttu J0jRZsp+UHEOP+ACfIqetr2T/s33YmzhiQLlOnNoDxU0CHljqhY0bWmSf9MmqoRQ Htp8EI4K8dutzYdR9LAwo5ahFzk6eFhP1HVrwlNwxdAuFyMQDFwfE4lJqMfapFHn 7bHy9eeH6VDKEObW7e5YbHEY0HiIfdaJT48raLB4a1bNeqlwNvU0gf+moi7DvxOA xNufJiwaCQtvdZYCrvp4gabFOLOfScA9vqWxLbH2/uI7t1WenD093opykIM+nspA 1jh0uY7pHPJwGAkkmjq8eLaEowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVyfTRF 7jrojuwcWefPKS+y17dJMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsItUqakNHNZnkAFfS3E1TTvMDRqPrhAdc7sVAf/RGe1PALaWy4LNKd5Za6zl QD4VBP7oYO+binpjejBpJQIvylElU/NtLshfX41LsgAbi9miRYvUL5cpTdjN7cZT uNinJ6dKZX+z1aR3USgWaVALvf87kbE4f1R8++FtgbPdaSE4kHEXAtWfc1dCQMvP gQk67dL8CNWcEXaY+28YvCh2JERRTF7zsKZC2K2aGhckAmOFHPhwnlaQfsuF4CKY echvw9nnRRw6J0pzx3vVcUA/DAH2fTB+SzXvfq0BFjqS6lcUFKmxgwfu/oV4Y7H1 5UEUdVYrTUoWAZDFOMnNd9E8Xw== -----END CERTIFICATE-----Generated at Fri Jul 24 02:31:10 2026 by rpki-client