$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: KF0nIfgd4iqtiiRGJGFGj+B63WuT6isWGOG8kz4bLok= Subject key identifier: F6:E1:A2:8A:E7:9F:0B:E1:D6:3C:2A:57:EC:75:F8:F3:4E:21:58:D5 Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 0496 Signing time: Tue 21 Jul 2026 00:51:54 +0000 Manifest this update: Tue 21 Jul 2026 00:51:53 +0000 Manifest next update: Tue 28 Jul 2026 00:51:53 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: COM8ctAJuyF2Cjn/v/ZQ6y6wC08QUAb/tluckZZBJmA=) 2: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 3: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Jul 21 00:51:53 2026 GMT Not After : Jul 28 00:51:53 2026 GMT Subject: CN=6a5ec2aa-e2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:23:c4:b2:3a:15:74:1c:f4:8d:62:a8:74: 7f:ce:7c:e9:90:71:6c:ad:ae:40:73:bb:39:c5:5f: 1a:13:6f:60:2e:a2:9c:77:09:01:92:f3:8f:9d:3e: e3:e4:b5:9d:7d:b7:a6:94:74:ba:1c:67:e0:7e:fe: 37:9a:fd:99:6d:fd:22:d1:7f:10:53:44:e8:b0:d5: 96:0a:ac:c7:ac:8c:7b:b5:03:a6:95:d8:7e:30:1d: 33:ec:88:82:a5:12:dc:ee:5d:6e:2f:b1:0f:58:07: da:7c:75:01:0e:e8:3b:65:03:51:81:aa:30:91:94: 75:5f:6c:00:df:2e:f6:a4:f3:91:c6:1c:a0:eb:0d: 25:4d:c9:be:50:1c:fd:56:5b:34:81:77:da:80:7c: f8:78:15:6a:4d:0f:e7:1a:9d:0a:80:c9:37:6d:8a: cf:a1:6b:d9:70:7b:ee:08:cd:be:37:f0:3d:a5:f0: 6f:0a:b7:0b:6b:13:51:7a:c0:4a:29:84:93:7b:cc: ce:99:f1:da:0f:9b:81:7f:98:d2:c9:69:c8:b8:a9: d6:ff:c2:70:05:aa:05:24:2a:fb:16:72:cb:b8:81: e3:3b:91:dd:91:1c:0c:bf:fb:b7:ff:ee:07:b8:96: 6c:ba:7b:86:fe:4a:8a:3a:82:10:c7:5d:d6:b2:75: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E1:A2:8A:E7:9F:0B:E1:D6:3C:2A:57:EC:75:F8:F3:4E:21:58:D5 X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cf:8b:a8:53:73:da:7d:60:58:91:d1:fc:69:75:91:e3:5b: 24:93:06:10:00:9a:0b:e5:4a:fd:c6:9e:b2:ec:6c:06:9a:31: 5e:a4:1f:e9:41:10:eb:ff:4b:ee:22:17:90:17:84:11:1d:1c: 77:29:1c:83:ab:5e:cb:7a:08:f3:2c:b0:59:00:96:8c:49:74: cb:4f:a9:a3:52:02:e0:bb:80:30:ec:74:2d:41:d4:01:d2:7a: 7b:96:a5:6f:85:8d:3d:26:c4:54:f9:97:35:98:0d:ea:1b:e1: af:54:48:a2:0b:a1:1d:50:5e:be:c4:41:ed:48:ab:cb:d2:2a: f1:bf:83:08:e1:6e:01:64:67:1c:06:c6:49:d0:e8:71:c9:97: 1e:1f:cc:63:2e:6c:4b:d8:40:9f:f0:c0:42:0a:77:b6:4a:44: c8:ea:f6:43:a3:18:27:ce:89:23:3b:f6:64:43:0e:7e:d0:11: a1:56:2d:61:fe:ed:a0:a0:09:f6:6c:af:46:b2:f0:20:54:d7: 09:4c:5c:04:ef:9b:1e:f4:2b:10:c7:0e:2e:e9:f7:12:28:c0: 5f:23:12:47:a1:d5:16:de:90:64:38:c2:9a:85:87:3e:33:ef: f7:9a:79:16:50:a2:c5:71:f5:f7:c0:10:18:51:2c:09:35:a1: af:f6:dc:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYwNzIxMDA1MTUzWhcNMjYwNzI4MDA1MTUzWjAYMRYwFAYD VQQDEw02YTVlYzJhYS1lMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu34jxLI6FXQc9I1iqHR/znzpkHFsra5Ac7s5xV8aE29gLqKcdwkBkvOPnT7j 5LWdfbemlHS6HGfgfv43mv2Zbf0i0X8QU0TosNWWCqzHrIx7tQOmldh+MB0z7IiC pRLc7l1uL7EPWAfafHUBDug7ZQNRgaowkZR1X2wA3y72pPORxhyg6w0lTcm+UBz9 Vls0gXfagHz4eBVqTQ/nGp0KgMk3bYrPoWvZcHvuCM2+N/A9pfBvCrcLaxNResBK KYSTe8zOmfHaD5uBf5jSyWnIuKnW/8JwBaoFJCr7FnLLuIHjO5HdkRwMv/u3/+4H uJZsunuG/kqKOoIQx13WsnU8kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbhoorn nwvh1jwqV+x1+PNOIVjVMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgc+LqFNz2n1gWJHR/Gl1keNbJJMGEACaC+VK/caesuxsBpoxXqQf6UEQ6/9L 7iIXkBeEER0cdykcg6tey3oI8yywWQCWjEl0y0+po1IC4LuAMOx0LUHUAdJ6e5al b4WNPSbEVPmXNZgN6hvhr1RIoguhHVBevsRB7Uiry9Iq8b+DCOFuAWRnHAbGSdDo ccmXHh/MYy5sS9hAn/DAQgp3tkpEyOr2Q6MYJ86JIzv2ZEMOftARoVYtYf7toKAJ 9myvRrLwIFTXCUxcBO+bHvQrEMcOLun3EijAXyMSR6HVFt6QZDjCmoWHPjPv95p5 FlCixXH198AQGFEsCTWhr/bcVQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:58 2026 by rpki-client