$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: d4PJWG1h0VldntCTUPiAfeqC/KXPwSBq7At6i4UJs+I= Subject key identifier: 33:97:DB:45:ED:69:C5:9C:67:64:62:DF:9E:ED:7F:76:3D:0A:EC:D1 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 138D Signing time: Mon 20 Jul 2026 17:06:15 +0000 Manifest this update: Mon 20 Jul 2026 17:06:14 +0000 Manifest next update: Mon 27 Jul 2026 17:06:14 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: X1/HimbA0AjqY6j7VbI7u/yeoQwlUQOUWZ3Z7fhEQ+0=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: Y5k6Nh1K8NNS0hPh5WTEjL7DqnEuLThuhCaWRqICeaE=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: k+p0xtu7l+Ym0EwSnutl9VlQ16P8ym/648o14VPC7t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5030 (0x13a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Jul 20 17:06:14 2026 GMT Not After : Jul 27 17:06:14 2026 GMT Subject: CN=6a5e5587-2ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:7b:a7:61:b2:7e:01:52:62:dc:87:4e:c6: 65:65:f2:53:31:0f:bb:c5:ee:cf:83:fc:0c:6b:7c: cf:15:04:b8:a5:70:60:b3:79:0e:01:af:63:40:19: 40:00:43:d1:3c:ef:be:1f:67:00:95:1b:d9:4f:0d: d0:be:25:4c:2a:f4:c1:00:ae:c2:bc:0d:71:c0:fb: 47:e8:9f:82:04:48:9e:db:4c:fa:2b:a4:60:15:af: a1:e5:c3:46:6a:c6:05:24:24:65:0e:0a:c7:61:8e: 4f:aa:dd:58:be:31:75:22:38:b2:3e:f5:c2:54:79: 4d:b6:93:38:69:99:87:e2:c1:6b:fd:b5:ec:08:b3: c4:e9:b6:c0:cf:1a:ba:3e:93:39:b5:7f:1a:47:01: fd:42:ce:6c:94:9d:d6:4e:b6:ff:2f:9c:f7:c1:6a: 02:5e:6f:a1:1b:96:40:27:36:6e:b5:2f:38:13:ce: 9b:e1:c8:f8:60:d2:73:2f:f8:5f:14:78:64:b4:89: f1:51:b2:51:7a:5a:67:39:de:d9:28:bd:33:ee:7a: 24:85:f8:2d:fa:55:18:31:fa:fe:cd:05:74:3b:72: 49:63:f6:6d:4d:34:7d:13:f2:26:91:24:32:2c:7b: 48:3c:f3:20:3e:74:dd:fe:f5:27:52:a3:bf:c9:70: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:97:DB:45:ED:69:C5:9C:67:64:62:DF:9E:ED:7F:76:3D:0A:EC:D1 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:87:15:bf:28:c5:6b:b9:ed:7b:bb:74:e1:6d:ad:79:8f:b6: e5:46:ee:42:eb:67:04:13:6d:15:75:c9:de:84:18:f0:14:f7: 57:eb:2a:62:aa:d6:04:27:c8:ba:62:8b:63:cc:3c:c8:e9:ca: 0e:c7:b6:96:da:e3:91:be:c0:fc:d6:f0:28:c9:bc:9e:db:52: 3b:97:0c:66:2b:74:78:88:dd:e4:49:af:87:a1:7e:34:f4:0b: da:0b:30:e4:57:b5:ba:e9:59:7c:d8:b2:83:75:9f:9c:84:3a: 61:ff:1b:46:3b:f3:28:cb:68:d9:f2:e4:f6:e9:da:a9:af:bb: 19:7a:ba:56:68:75:e1:e1:82:38:37:ef:c7:bc:e1:c9:b5:72: 23:cb:1b:a4:59:b0:6b:40:6a:b3:de:50:73:27:82:e9:50:33: 38:c2:f3:43:be:70:c4:05:08:b7:3e:2d:0e:f5:5a:4e:ef:d8: ee:6b:16:19:fa:25:4c:7a:f8:6b:06:2d:b3:0d:c6:3d:06:1c: 05:84:21:bd:e3:75:b6:b5:d7:4c:09:e1:02:b3:44:41:df:b4: 30:67:af:29:7e:cb:9d:3f:cd:0e:56:b8:e3:12:52:a6:1b:bd: db:61:c7:56:62:6c:6d:ec:e3:4d:38:87:e5:32:ab:24:95:2c: 3c:f5:cd:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYwNzIwMTcwNjE0WhcNMjYwNzI3MTcwNjE0WjAYMRYwFAYD VQQDEw02YTVlNTU4Ny0yZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2At7p2GyfgFSYtyHTsZlZfJTMQ+7xe7Pg/wMa3zPFQS4pXBgs3kOAa9jQBlA AEPRPO++H2cAlRvZTw3QviVMKvTBAK7CvA1xwPtH6J+CBEie20z6K6RgFa+h5cNG asYFJCRlDgrHYY5Pqt1YvjF1IjiyPvXCVHlNtpM4aZmH4sFr/bXsCLPE6bbAzxq6 PpM5tX8aRwH9Qs5slJ3WTrb/L5z3wWoCXm+hG5ZAJzZutS84E86b4cj4YNJzL/hf FHhktInxUbJRelpnOd7ZKL0z7nokhfgt+lUYMfr+zQV0O3JJY/ZtTTR9E/ImkSQy LHtIPPMgPnTd/vUnUqO/yXCxNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOX20Xt acWcZ2Ri357tf3Y9CuzRMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPYcVvyjFa7nte7t04W2teY+25UbuQutnBBNtFXXJ3oQY8BT3V+sqYqrWBCfI umKLY8w8yOnKDse2ltrjkb7A/NbwKMm8nttSO5cMZit0eIjd5Emvh6F+NPQL2gsw 5Fe1uulZfNiyg3WfnIQ6Yf8bRjvzKMto2fLk9unaqa+7GXq6Vmh14eGCODfvx7zh ybVyI8sbpFmwa0Bqs95QcyeC6VAzOMLzQ75wxAUItz4tDvVaTu/Y7msWGfolTHr4 awYtsw3GPQYcBYQhveN1trXXTAnhArNEQd+0MGevKX7LnT/NDla44xJSphu922HH VmJsbezjTTiH5TKrJJUsPPXNsw== -----END CERTIFICATE-----Generated at Tue Jul 21 23:22:17 2026 by rpki-client