$ rpki-client -vvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft File: ie3CdDRVzlmv66wxSG3f6_fNB1E.mft (raw, json) Hash identifier: NGek7UpSHS0IOT0D1VUL0SAwyuBtmd+uLkxsZRvb8zA= Subject key identifier: 25:53:1A:CF:25:1E:34:0A:01:A0:83:B9:30:06:5E:B8:61:88:2F:CC Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 Certificate issuer: /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft Manifest number: 05 Signing time: Tue 11 Aug 2026 08:36:50 +0000 Manifest this update: Tue 11 Aug 2026 08:36:50 +0000 Manifest next update: Tue 18 Aug 2026 08:36:50 +0000 Files and hashes: 1: ie3CdDRVzlmv66wxSG3f6_fNB1E.crl (hash: GJNHYTD9et+hZmPBExw8pdelt1cNmRJOEQRPgDUw8MA=) 2: HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa (hash: TqF7VDLUvGn6swrLSWdyVb07AQkMUSMT51u5VOQs9aE=) 3: 1C162B1892FF11F1ADF87C276D11F970.roa (hash: QNsu5mDAlK5ceLi1SvnsBhnHeCKn6PMBuIedIEG5/+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Aug 2026 08:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Validity Not Before: Aug 11 08:36:50 2026 GMT Not After : Aug 18 08:36:50 2026 GMT Subject: CN=6a7adf22-44df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:b3:67:22:68:0e:92:50:2d:cf:c6:5f:1e: c1:a5:a8:73:c8:51:96:41:e3:b0:5a:17:90:bf:ae: 69:51:dd:21:aa:63:1c:14:41:41:37:ed:b0:d8:64: e7:fd:42:38:69:d6:5c:82:5c:01:53:49:7d:ff:3f: 8c:be:e8:0a:9a:19:de:c9:41:b6:1e:ca:9b:bf:d3: 7d:58:ac:8c:52:4e:f2:5b:2b:bf:1d:e8:01:8a:ae: 4f:55:4c:9d:85:10:6b:1c:89:d4:0a:e4:3d:0f:64: d9:77:a2:2d:09:e8:a6:ca:51:35:f5:71:f2:f6:bc: 05:fc:f6:1a:ba:31:5a:dd:36:61:af:50:bf:f5:7c: 42:34:b2:c8:28:3e:e7:2e:06:f8:da:ce:34:6a:4e: 1b:08:d8:de:0d:1b:de:80:10:a2:c1:5e:61:37:49: 38:9b:b7:b5:c5:19:20:4b:07:9c:de:09:4d:80:34: 94:95:5a:70:98:91:9d:1c:33:30:67:43:11:79:48: b3:03:2f:e3:d5:e0:eb:d6:a6:bb:a2:cc:d3:9f:42: 3b:27:ad:e2:c5:cd:96:aa:74:c3:2d:e0:3c:54:2e: 68:a9:72:42:30:93:80:98:e7:aa:bf:65:17:8a:4a: 14:c4:ba:80:ed:1c:e3:68:57:71:34:70:a8:ad:37: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:1A:CF:25:1E:34:0A:01:A0:83:B9:30:06:5E:B8:61:88:2F:CC X509v3 Authority Key Identifier: keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:94:e4:b7:22:e5:15:57:16:6c:12:67:69:57:af:7e:34:16: 3c:f7:99:2c:a2:ef:f1:af:b3:4b:7a:f4:cf:fc:6b:9c:c6:d8: 8e:3e:14:9b:92:da:2a:22:26:e9:a4:35:9d:8a:aa:ca:58:a9: 5b:cf:bf:8a:34:e3:a1:b0:23:7a:73:6b:c8:d7:8e:77:47:5f: c0:2c:b3:81:6e:39:70:8c:82:c2:14:8e:23:ad:71:9c:41:03: 78:49:dc:51:ed:1c:8e:52:c1:6e:6c:e0:ea:4c:4a:10:d7:ab: bf:be:50:d9:eb:1a:0e:ab:8a:f1:6f:33:06:ec:2c:a7:e4:39: a0:0d:b2:1a:91:82:51:25:53:8f:a7:92:d0:df:a9:a0:4d:b4: b8:17:ba:26:b3:c5:f8:35:a3:f8:83:7c:c8:83:ea:9b:f3:87: 6b:07:d2:40:a0:37:fe:07:78:f3:c6:de:aa:78:77:9e:5b:26: 85:2e:9b:9d:c0:4f:db:74:5a:43:4e:66:92:15:cd:db:b8:e2: 3c:a1:a4:ff:dd:1f:6b:a2:65:83:70:67:fb:09:fd:56:39:4f: a6:3e:99:29:39:c4:4c:9c:3f:7f:7f:3d:6b:d9:36:00:86:e1: 62:f2:a6:fd:a2:4e:93:fe:80:93:12:75:d8:b7:fc:52:e7:fb: 6f:f0:f4:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEEzRTExMC8GA1UEBRMoODlFREMyNzQzNDU1Q0U1OUFGRUJBQzMxNDg2RERGRUJG N0NEMDc1MTAeFw0yNjA4MTEwODM2NTBaFw0yNjA4MTgwODM2NTBaMBgxFjAUBgNV BAMTDTZhN2FkZjIyLTQ0ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQXLNnImgOklAtz8ZfHsGlqHPIUZZB47BaF5C/rmlR3SGqYxwUQUE37bDYZOf9 Qjhp1lyCXAFTSX3/P4y+6AqaGd7JQbYeypu/031YrIxSTvJbK78d6AGKrk9VTJ2F EGscidQK5D0PZNl3oi0J6KbKUTX1cfL2vAX89hq6MVrdNmGvUL/1fEI0ssgoPucu BvjazjRqThsI2N4NG96AEKLBXmE3STibt7XFGSBLB5zeCU2ANJSVWnCYkZ0cMzBn QxF5SLMDL+PV4OvWpruizNOfQjsnreLFzZaqdMMt4DxULmipckIwk4CY56q/ZReK ShTEuoDtHONoV3E0cKitNyvHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJVMazyUe NAoBoIO5MAZeuGGIL8wwHwYDVR0jBBgwFoAUie3CdDRVzlmv66wxSG3f6/fNB1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4QTNFL0VENDg2ODkyOTJG RDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxtdjY2d3hTRzNmNl9mTkIx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWUzQ2REUlZ6bG12NjZ3eFNHM2Y2X2ZOQjFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 QTNFL0VENDg2ODkyOTJGRDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxt djY2d3hTRzNmNl9mTkIxRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUlOS3IuUVVxZsEmdpV69+NBY895ksou/xr7NLevTP/GucxtiOPhSbktoqIibp pDWdiqrKWKlbz7+KNOOhsCN6c2vI1453R1/ALLOBbjlwjILCFI4jrXGcQQN4SdxR 7RyOUsFubODqTEoQ16u/vlDZ6xoOq4rxbzMG7Cyn5DmgDbIakYJRJVOPp5LQ36mg TbS4F7oms8X4NaP4g3zIg+qb84drB9JAoDf+B3jzxt6qeHeeWyaFLpudwE/bdFpD TmaSFc3buOI8oaT/3R9romWDcGf7Cf1WOU+mPpkpOcRMnD9/fz1r2TYAhuFi8qb9 ok6T/oCTEnXYt/xS5/tv8PTl -----END CERTIFICATE-----Generated at Thu Aug 13 07:47:13 2026 by rpki-client