$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: tj701cThQHTKEp2ktO4ia4aVKrQKJx7VwLlL3/DjL48= Subject key identifier: 05:7E:C1:06:83:AF:73:51:A4:CD:B2:7A:B6:03:84:A6:E8:F3:BF:B9 Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: E5 Signing time: Thu 16 Jul 2026 19:58:15 +0000 Manifest this update: Thu 16 Jul 2026 19:58:14 +0000 Manifest next update: Thu 23 Jul 2026 19:58:14 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: QPAK4r31oqXfBEvywg9fC5O6RB0xWfHXW09iO2Onsk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 19:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Jul 16 19:58:14 2026 GMT Not After : Jul 23 19:58:14 2026 GMT Subject: CN=6a5937d6-4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:d5:c2:22:76:a2:2a:8f:f2:10:15:c8:8a: ad:7d:8c:f8:f2:5a:74:dc:34:23:8b:57:6c:41:07: 02:f0:68:86:31:9c:3a:b0:3c:d0:6a:9a:e4:e5:c1: 30:2b:ec:e9:07:66:86:65:43:e1:4b:cc:78:74:87: 72:c9:b7:8e:19:f4:07:dd:d9:07:4e:0e:59:97:59: 2d:be:d7:a4:ff:3c:31:c7:68:dc:3d:10:27:15:42: 13:a2:e3:e2:27:6b:f6:a6:b6:45:ea:f8:a8:2b:f4: 17:0f:b1:19:a7:2a:eb:4c:5a:e1:66:bd:d3:25:73: eb:a1:9b:5e:db:83:bf:d9:7f:3f:b3:4e:fb:ca:e2: e2:a7:a9:5b:be:20:b0:b0:05:db:f0:f0:54:cf:34: 67:9b:a2:ec:b7:92:42:0f:81:94:3c:8c:57:46:92: 54:69:0b:66:c7:ef:f2:2a:d5:d9:55:4a:0c:56:9b: 69:2d:f4:a4:85:21:7e:1f:e1:60:eb:c3:5a:7d:0e: 5d:9b:cf:35:be:d7:73:b3:ef:dd:bd:2b:f6:eb:89: 03:39:4d:f7:1c:1b:12:f1:39:fb:0f:6a:25:a9:ca: 52:15:2d:7a:39:83:01:eb:8f:81:84:cf:4b:5f:bc: 51:1b:d6:3c:ac:34:b6:ec:d3:f0:eb:75:49:0f:30: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:C1:06:83:AF:73:51:A4:CD:B2:7A:B6:03:84:A6:E8:F3:BF:B9 X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:64:33:ff:c8:f0:de:03:2f:a3:da:0b:ca:23:2c:be:32:5e: 06:7f:2b:21:33:69:d4:4c:36:1c:82:9e:de:ed:75:68:e6:75: 4c:85:c2:74:3c:23:71:e1:37:da:d8:02:72:3d:d2:75:38:62: 90:83:cf:96:55:3a:2f:8c:c7:dd:2f:b2:58:e9:f4:d8:e5:89: 72:37:f5:fc:72:12:28:76:8f:b6:f8:9f:2a:58:aa:7b:0f:a7: bc:a9:cc:78:f9:29:a4:81:2d:ac:e7:5e:39:8d:c4:b0:a8:c1: d8:d7:26:50:7c:00:14:01:8d:60:92:ec:4c:1e:2a:a2:cc:ff: ec:32:ec:9f:c2:92:c6:e7:ec:78:5e:11:20:f9:80:3f:d7:e7: 1c:1a:05:f3:63:e9:21:76:0c:5b:20:98:21:89:4d:36:4d:af: 9b:64:3f:32:8e:d1:1f:ee:cd:4f:c5:c6:07:e9:06:8e:96:98: aa:ef:bd:af:1d:0d:3f:b1:7e:dd:f0:4c:24:57:77:4a:a9:f0: 68:b7:23:4a:08:b9:7f:75:df:f0:80:82:1b:fe:a9:3e:e1:38: 5e:f4:2c:fd:1a:50:11:e5:44:f2:1e:4f:e1:f3:f4:fd:8e:b7: 68:42:98:97:6b:94:f4:e4:12:12:70:17:be:5b:68:e5:d0:76: ae:c8:d6:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKDhBMTFFQjc2NEIxNTc4NTM5RDZFRDNCMjkwM0JGNjFG NEMwODAwN0MwHhcNMjYwNzE2MTk1ODE0WhcNMjYwNzIzMTk1ODE0WjAYMRYwFAYD VQQDEw02YTU5MzdkNi00NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh5XVwiJ2oiqP8hAVyIqtfYz48lp03DQji1dsQQcC8GiGMZw6sDzQaprk5cEw K+zpB2aGZUPhS8x4dIdyybeOGfQH3dkHTg5Zl1ktvtek/zwxx2jcPRAnFUITouPi J2v2prZF6vioK/QXD7EZpyrrTFrhZr3TJXProZte24O/2X8/s077yuLip6lbviCw sAXb8PBUzzRnm6Lst5JCD4GUPIxXRpJUaQtmx+/yKtXZVUoMVptpLfSkhSF+H+Fg 68NafQ5dm881vtdzs+/dvSv264kDOU33HBsS8Tn7D2olqcpSFS16OYMB64+BhM9L X7xRG9Y8rDS27NPw63VJDzCxUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAV+wQaD r3NRpM2yerYDhKbo87+5MB8GA1UdIwQYMBaAFIoR63ZLFXhTnW7TspA79h9MCAB8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi80OUU5OTZDNDJD NjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVGT2RidE95a0R2Mkgwd0lB SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi80OUU5OTZDNDJDNjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVG T2RidE95a0R2Mkgwd0lBSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGmQz/8jw3gMvo9oLyiMsvjJeBn8rITNp1Ew2HIKe3u11aOZ1TIXCdDwjceE3 2tgCcj3SdThikIPPllU6L4zH3S+yWOn02OWJcjf1/HISKHaPtvifKliqew+nvKnM ePkppIEtrOdeOY3EsKjB2NcmUHwAFAGNYJLsTB4qosz/7DLsn8KSxufseF4RIPmA P9fnHBoF82PpIXYMWyCYIYlNNk2vm2Q/Mo7RH+7NT8XGB+kGjpaYqu+9rx0NP7F+ 3fBMJFd3SqnwaLcjSgi5f3Xf8ICCG/6pPuE4XvQs/RpQEeVE8h5P4fP0/Y63aEKY l2uU9OQSEnAXvlto5dB2rsjWxw== -----END CERTIFICATE-----Generated at Sat Jul 18 03:29:13 2026 by rpki-client