$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: dMswbrrvCmQr6T4uozb5UVnw2DCYH2tJxmprAsWvuHA= Subject key identifier: 6C:0D:CA:E5:2A:51:28:54:20:CB:A8:46:A2:08:B7:99:6D:5B:AF:6C Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 022D Signing time: Thu 23 Jul 2026 03:57:48 +0000 Manifest this update: Thu 23 Jul 2026 03:57:47 +0000 Manifest next update: Thu 30 Jul 2026 03:57:47 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: u6t8ouvUyPmlRTcOSqyNlsfgGL3+Z5nD/2NYNfVHQCQ=) 2: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 3: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 4: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Jul 23 03:57:47 2026 GMT Not After : Jul 30 03:57:47 2026 GMT Subject: CN=6a61913c-42bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:41:93:42:bb:66:a5:8e:76:9c:85:3d:a7: 69:e7:fb:0a:18:76:71:e4:ff:d7:e5:17:c4:54:bf: 00:b8:2a:a0:5c:3e:69:ce:25:7d:16:65:f3:58:4e: 4a:f6:38:87:33:57:8f:1a:7b:30:85:9d:9e:8f:ac: d1:33:cd:4e:b0:57:bb:fa:5d:4d:5c:26:da:51:e2: b2:2b:79:25:72:0d:ea:d3:1a:29:3f:db:b9:31:8d: 37:56:8a:67:68:fc:84:7d:1a:7e:49:5e:cf:9c:5a: 8f:99:02:46:7a:4a:f7:6d:9a:55:b6:2e:7a:e5:c3: a1:1c:ac:fc:73:bb:3c:25:66:6b:d9:24:01:db:72: 23:b4:53:e0:be:45:be:73:bf:28:0f:a9:39:5c:b8: 70:6a:4d:1e:f3:3d:6f:88:4b:63:03:51:03:42:a3: a0:0b:da:32:b3:13:0b:56:86:cf:37:32:5a:c6:b7: 87:7f:04:65:ab:ea:cf:cb:fe:c0:0c:0a:10:d5:5b: 3d:b9:c3:26:7a:73:7d:e6:f1:05:73:6d:ef:44:b8: 0f:f2:3c:60:22:09:e4:14:79:1a:6a:50:d4:cd:e8: 54:cd:99:04:f4:b7:1b:fa:19:9b:6d:78:0b:70:c5: bf:53:5c:29:40:7b:57:9b:25:b2:2d:97:33:63:c5: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0D:CA:E5:2A:51:28:54:20:CB:A8:46:A2:08:B7:99:6D:5B:AF:6C X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:be:d6:93:64:b6:b6:f4:24:27:a0:e9:1e:49:cc:07:e8:52: 12:44:45:3b:6e:90:74:6d:a3:71:55:74:c6:82:0f:43:8c:70: 7d:74:39:aa:a1:be:55:56:17:98:68:7d:d0:c5:50:20:0e:3f: 76:2f:12:c8:f8:03:37:48:ce:60:ba:93:ba:9b:34:e6:f6:ad: 06:a9:3b:99:24:ca:2b:54:6d:50:57:f2:63:b5:f2:f5:b4:de: f3:da:da:b1:64:29:06:1b:c9:ae:cc:6d:24:c9:b5:24:91:9a: d6:47:f5:a5:4e:50:57:fd:44:50:0a:cd:c2:e4:cc:3a:56:27: 06:b8:be:2f:41:f4:c1:11:12:39:3c:a0:6a:ff:c0:30:f2:f6: f2:1b:77:7a:f2:e4:13:68:0c:af:ca:36:98:b5:ce:ab:03:56: 68:1a:cf:9c:fe:51:70:31:4d:27:5c:90:bd:f0:ad:8f:3f:09: 05:bb:54:89:68:44:c6:73:67:50:4c:06:a6:33:07:cd:e6:c1: 0e:8f:fc:58:cc:c6:3d:ba:c9:d7:30:1f:5e:e9:d3:6d:a6:a4: cf:4a:14:d3:f1:66:f3:2e:47:72:77:6a:fe:1c:0a:e8:51:a2: 14:bf:31:57:86:a2:6e:75:2a:fb:4c:bd:4b:17:6b:ad:a8:9b: 49:ef:30:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwNzIzMDM1NzQ3WhcNMjYwNzMwMDM1NzQ3WjAYMRYwFAYD VQQDEw02YTYxOTEzYy00MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQpBk0K7ZqWOdpyFPadp5/sKGHZx5P/X5RfEVL8AuCqgXD5pziV9FmXzWE5K 9jiHM1ePGnswhZ2ej6zRM81OsFe7+l1NXCbaUeKyK3klcg3q0xopP9u5MY03Vopn aPyEfRp+SV7PnFqPmQJGekr3bZpVti565cOhHKz8c7s8JWZr2SQB23IjtFPgvkW+ c78oD6k5XLhwak0e8z1viEtjA1EDQqOgC9oysxMLVobPNzJaxreHfwRlq+rPy/7A DAoQ1Vs9ucMmenN95vEFc23vRLgP8jxgIgnkFHkaalDUzehUzZkE9Lcb+hmbbXgL cMW/U1wpQHtXmyWyLZczY8VevwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwNyuUq UShUIMuoRqIIt5ltW69sMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb77Wk2S2tvQkJ6DpHknMB+hSEkRFO26QdG2jcVV0xoIPQ4xwfXQ5qqG+VVYX mGh90MVQIA4/di8SyPgDN0jOYLqTups05vatBqk7mSTKK1RtUFfyY7Xy9bTe89ra sWQpBhvJrsxtJMm1JJGa1kf1pU5QV/1EUArNwuTMOlYnBri+L0H0wRESOTygav/A MPL28ht3evLkE2gMr8o2mLXOqwNWaBrPnP5RcDFNJ1yQvfCtjz8JBbtUiWhExnNn UEwGpjMHzebBDo/8WMzGPbrJ1zAfXunTbaakz0oU0/Fm8y5Hcndq/hwK6FGiFL8x V4aibnUq+0y9SxdrraibSe8w7Q== -----END CERTIFICATE-----Generated at Fri Jul 24 13:57:32 2026 by rpki-client