$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: 1C5p8YSzB0iOyUXjVqA874My86nz9FmFayQj8dxdJP8= Subject key identifier: 31:26:BE:61:23:2D:B0:06:5A:1B:87:98:4B:27:66:AD:51:7C:04:88 Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1DA2 Signing time: Wed 22 Jul 2026 16:11:40 +0000 Manifest this update: Wed 22 Jul 2026 16:11:39 +0000 Manifest next update: Wed 29 Jul 2026 16:11:39 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: gYSDIdB8D3wRLnr1nzaPwpP581t2weT8+k7nw4RcVFo=) 2: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=) 4: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7616 (0x1dc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Jul 22 16:11:39 2026 GMT Not After : Jul 29 16:11:39 2026 GMT Subject: CN=6a60ebbb-3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:b0:0c:b5:93:5f:58:4a:0e:ac:8e:27:1a: 91:4b:ba:9c:46:20:23:10:1d:f2:97:0a:bd:1f:95: 93:4b:42:51:58:e5:06:54:a0:86:06:36:ee:53:2c: 3b:fb:14:15:bc:ab:7d:ed:e9:80:57:9b:ea:1b:ec: cf:b6:70:78:af:1a:ae:61:a3:1e:56:0b:5e:6b:66: 43:e3:f3:9a:65:aa:a9:e8:18:b4:a1:c5:66:f3:b3: 58:e8:96:02:11:d7:ec:b5:6a:64:53:a7:3b:f1:15: 37:34:e7:a6:eb:09:9c:79:b0:59:c2:21:f0:f7:86: b1:26:ca:ac:57:68:08:40:93:5d:05:c7:e3:d0:20: 36:1b:a0:9e:e3:af:bc:a5:9d:39:c0:14:b2:9f:5f: 43:1b:da:5e:e1:ea:6f:8e:1c:e0:76:e1:49:1e:3f: cf:a4:ef:02:c4:81:62:41:fa:86:21:09:13:ef:ac: 58:2c:e0:b7:11:6f:82:1a:12:9d:75:56:36:79:09: 62:bc:1c:46:86:09:d2:f3:07:d2:d7:cc:85:df:1f: f0:40:48:d7:7f:af:37:ef:35:ce:85:4d:8b:ab:e4: af:d1:3f:a9:d9:57:c0:31:91:ce:19:cb:ec:1a:0a: 78:0f:e7:2d:f8:94:b7:9b:31:a6:f3:3b:49:00:ac: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:26:BE:61:23:2D:B0:06:5A:1B:87:98:4B:27:66:AD:51:7C:04:88 X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1f:df:05:ad:38:dc:79:b7:5b:34:1d:b5:a6:46:ae:62:55: 9a:27:ad:e1:e0:da:6f:10:1c:f9:0c:59:88:c1:b0:bc:ae:47: 4b:43:25:bd:9d:d8:25:09:a8:3b:25:69:8e:19:7b:a1:ac:08: 18:fe:21:fb:6d:a4:21:1b:0d:10:e0:eb:8f:3c:15:40:5b:0c: 44:34:fa:2b:f6:2d:66:0b:02:97:4b:44:cf:e7:5b:f9:7c:87: 64:b9:b1:1f:e7:62:fd:81:ad:61:b0:53:86:c1:06:18:5e:81: d2:cd:0e:d2:b3:01:06:5b:15:0e:89:b0:11:4f:5e:6a:d8:5b: f0:cb:17:04:d9:bc:c1:bc:31:90:fc:a2:20:6f:71:ab:96:52: a4:0d:ba:9f:72:89:91:9b:dc:4b:39:ef:11:33:75:c3:83:f9: cf:aa:69:0c:27:a4:d4:1f:e8:9d:f0:de:be:8c:e2:d8:47:f0: 8c:63:1b:77:8d:c3:a3:96:cb:1b:06:5b:96:44:50:04:8e:51: f0:07:27:b3:be:a0:ba:4f:73:04:69:5d:d3:54:e2:97:fc:0a: 80:9d:fb:e9:a0:d0:7b:5d:bf:0f:fa:a1:f4:7d:99:39:f0:9a: b5:0b:1d:8a:92:39:13:45:42:b8:0c:df:36:4f:38:9c:33:26: 99:9a:6c:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjYwNzIyMTYxMTM5WhcNMjYwNzI5MTYxMTM5WjAYMRYwFAYD VQQDEw02YTYwZWJiYi0zNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDqwDLWTX1hKDqyOJxqRS7qcRiAjEB3ylwq9H5WTS0JRWOUGVKCGBjbuUyw7 +xQVvKt97emAV5vqG+zPtnB4rxquYaMeVgtea2ZD4/OaZaqp6Bi0ocVm87NY6JYC EdfstWpkU6c78RU3NOem6wmcebBZwiHw94axJsqsV2gIQJNdBcfj0CA2G6Ce46+8 pZ05wBSyn19DG9pe4epvjhzgduFJHj/PpO8CxIFiQfqGIQkT76xYLOC3EW+CGhKd dVY2eQlivBxGhgnS8wfS18yF3x/wQEjXf6837zXOhU2Lq+Sv0T+p2VfAMZHOGcvs Ggp4D+ct+JS3mzGm8ztJAKxLpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEmvmEj LbAGWhuHmEsnZq1RfASIMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHh/fBa043Hm3WzQdtaZGrmJVmiet4eDabxAc+QxZiMGwvK5HS0MlvZ3YJQmo OyVpjhl7oawIGP4h+22kIRsNEODrjzwVQFsMRDT6K/YtZgsCl0tEz+db+XyHZLmx H+di/YGtYbBThsEGGF6B0s0O0rMBBlsVDomwEU9eathb8MsXBNm8wbwxkPyiIG9x q5ZSpA26n3KJkZvcSznvETN1w4P5z6ppDCek1B/onfDevozi2EfwjGMbd43Do5bL GwZblkRQBI5R8Acns76guk9zBGld01Til/wKgJ376aDQe12/D/qh9H2ZOfCatQsd ipI5E0VCuAzfNk84nDMmmZpsmw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:06:05 2026 by rpki-client