$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: 2yQOUEXdLAcTBIrMfFdmKkEykHDt8TZtDY+SsrW9cC4= Subject key identifier: DB:77:BA:C2:18:5A:E8:19:F0:62:D4:FB:02:D3:1A:1D:46:9B:EC:D1 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 0584 Signing time: Thu 16 Jul 2026 23:48:44 +0000 Manifest this update: Thu 16 Jul 2026 23:48:44 +0000 Manifest next update: Thu 23 Jul 2026 23:48:44 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: Tg8eU5rJ1i452mxkEFqYRs4/HzHjU39OkG/B8nASOes=) 2: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) 3: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) 4: B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (hash: wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 23:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Jul 16 23:48:44 2026 GMT Not After : Jul 23 23:48:44 2026 GMT Subject: CN=6a596ddc-beb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:f1:89:d2:fb:88:49:ab:94:cb:95:83:bf: 61:44:ee:dc:75:4e:74:f8:a0:f8:74:88:04:0a:26: 56:05:32:e6:29:7a:af:33:96:d4:43:fb:d0:b0:7b: a4:3a:90:f4:d0:aa:84:5e:57:f6:55:eb:98:45:e4: 14:59:78:5f:92:16:58:e6:f7:44:54:51:ab:50:18: a1:b4:2a:e2:e4:56:83:1b:16:e4:6b:6d:9f:86:33: 39:62:f4:55:29:a6:3e:4f:b7:26:59:78:76:5b:89: 2f:2c:a2:91:57:87:8e:f1:73:58:80:c4:f2:db:36: cb:36:e2:20:3d:91:79:5c:da:ba:d5:db:88:73:12: 9e:23:0a:1c:7f:8b:65:8e:01:02:88:c5:42:e8:6f: 3f:b3:22:35:eb:5c:0c:3a:ba:9e:73:77:b7:90:be: 1e:65:e3:07:b2:25:af:3d:c1:6c:0c:37:43:1d:66: 82:1b:f7:92:fb:c3:58:5e:e8:a7:64:36:a2:a6:6a: 56:96:bb:b7:46:33:15:f7:f2:dd:4e:6e:99:d3:a4: 0c:bd:c3:3b:17:80:bf:1d:8f:1e:fb:4b:75:e1:c6: 65:8e:d0:5e:a3:d1:4f:89:c1:4d:8f:2e:c6:37:8d: 20:90:c4:30:46:0d:73:df:f0:2c:83:34:07:6d:62: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:BA:C2:18:5A:E8:19:F0:62:D4:FB:02:D3:1A:1D:46:9B:EC:D1 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:62:80:bc:34:20:ae:e5:db:c5:cf:cd:70:67:03:8c:1e:dc: 98:24:7b:a1:bd:07:b1:42:3e:25:7f:0f:dd:48:7c:0f:2d:86: 35:8b:44:d5:1c:ac:f4:55:1c:cf:fb:7c:0c:57:ca:d9:95:b3: 4c:fb:33:37:d5:ad:f9:84:9c:11:a8:c0:df:15:70:19:10:08: ee:fb:24:75:5a:15:c9:58:9b:98:0d:23:4f:77:6d:dc:68:2c: 7f:11:c2:d9:44:00:6c:45:2f:c0:b1:fb:24:15:8c:d4:b9:84: e4:db:de:6a:75:ee:f7:f1:e8:50:d0:82:e3:f5:1c:e0:62:bb: 43:e7:d5:b8:11:1a:6a:8e:72:95:ab:aa:9c:c2:7c:c3:47:00: 6e:85:c0:8d:91:0b:d0:07:fc:2c:f3:c6:c2:24:a2:6e:08:e3: 56:b4:25:19:01:eb:7d:99:aa:ac:8c:51:88:fb:60:4c:5a:db: 45:2d:09:78:64:0b:78:d0:4a:92:2a:47:71:86:07:2e:38:b9: de:a9:28:45:d5:49:80:f0:7f:38:52:3a:0c:69:f0:f5:47:aa: aa:58:c9:b2:74:45:ae:d5:66:f9:09:85:12:7b:1f:86:b5:c6: 0f:19:04:7c:c3:be:8c:73:3b:0a:7e:ec:71:28:0d:72:6f:5e: 55:77:c0:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwNzE2MjM0ODQ0WhcNMjYwNzIzMjM0ODQ0WjAYMRYwFAYD VQQDEw02YTU5NmRkYy1iZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPLxidL7iEmrlMuVg79hRO7cdU50+KD4dIgECiZWBTLmKXqvM5bUQ/vQsHuk OpD00KqEXlf2VeuYReQUWXhfkhZY5vdEVFGrUBihtCri5FaDGxbka22fhjM5YvRV KaY+T7cmWXh2W4kvLKKRV4eO8XNYgMTy2zbLNuIgPZF5XNq61duIcxKeIwocf4tl jgECiMVC6G8/syI161wMOrqec3e3kL4eZeMHsiWvPcFsDDdDHWaCG/eS+8NYXuin ZDaipmpWlru3RjMV9/LdTm6Z06QMvcM7F4C/HY8e+0t14cZljtBeo9FPicFNjy7G N40gkMQwRg1z3/AsgzQHbWIqGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNt3usIY WugZ8GLU+wLTGh1Gm+zRMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqWKAvDQgruXbxc/NcGcDjB7cmCR7ob0HsUI+JX8P3Uh8Dy2GNYtE1Rys9FUc z/t8DFfK2ZWzTPszN9Wt+YScEajA3xVwGRAI7vskdVoVyVibmA0jT3dt3GgsfxHC 2UQAbEUvwLH7JBWM1LmE5NveanXu9/HoUNCC4/Uc4GK7Q+fVuBEaao5ylauqnMJ8 w0cAboXAjZEL0Af8LPPGwiSibgjjVrQlGQHrfZmqrIxRiPtgTFrbRS0JeGQLeNBK kipHcYYHLji53qkoRdVJgPB/OFI6DGnw9UeqqljJsnRFrtVm+QmFEnsfhrXGDxkE fMO+jHM7Cn7scSgNcm9eVXfAMw== -----END CERTIFICATE-----Generated at Sat Jul 18 07:17:45 2026 by rpki-client