$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: ULSuQvDwHol/bnkgE0c00wIB7FfgbXFujPYFsHFOcTU= Subject key identifier: 6F:13:51:C7:C6:25:BF:89:45:9A:FB:1A:AF:94:A7:DD:A1:D0:85:54 Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 10FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 10EB Signing time: Sun 26 Jul 2026 17:28:58 +0000 Manifest this update: Sun 26 Jul 2026 17:28:57 +0000 Manifest next update: Sun 02 Aug 2026 17:28:57 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: dK9gQFSvBbaBKqk6/u4IcDS14hSn1ztC7fVa+m4PhE0=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: a8kvW6Orzqu3ANz5V7LVYSu6qTioAnb21VQHXAb65ds=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: CkPn2ZJIX2L7WrIqMPI/SIicfwibPMx/ZU7x2GuJAkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4347 (0x10fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Jul 26 17:28:57 2026 GMT Not After : Aug 2 17:28:57 2026 GMT Subject: CN=6a6643da-5f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:da:e3:11:62:21:b2:cc:77:50:76:2b:cc: 40:68:25:2a:53:8d:4f:28:e8:44:a0:3e:23:f5:17: 53:89:be:9a:45:b6:28:83:38:9a:20:1d:95:a0:8b: 47:de:4b:63:64:e3:38:f2:72:58:ea:5f:3e:82:b8: 59:0a:ba:49:86:20:13:b6:07:22:45:7c:f7:42:d6: 82:24:5d:94:1e:82:cd:f2:23:4a:b0:cf:66:9d:39: 15:ce:1d:fc:74:81:5b:7e:1d:eb:e6:60:e6:58:bb: 2e:15:90:db:fe:d1:f4:6e:66:51:7c:9d:f6:ad:88: bb:78:50:ea:cf:28:13:25:9f:26:01:02:23:1c:72: 8c:4f:75:8c:9b:0e:57:d4:72:57:61:f0:02:01:dd: e5:a2:17:46:8f:b2:a8:7e:1d:d6:e2:9c:14:ea:05: 58:56:93:40:2a:4e:e2:9f:e2:c1:7c:aa:46:5b:4c: bb:bd:93:91:b8:0e:17:38:28:68:b0:17:7d:88:51: b8:cf:42:8d:fc:1b:45:ca:e2:da:52:da:88:14:e8: f4:c0:ac:cf:32:b9:ba:97:2c:e5:56:b6:28:91:3f: 50:c6:c4:a5:7b:ce:ec:29:42:05:97:ca:6b:3c:e9: 68:7e:98:e5:1e:18:25:2a:32:b0:0d:c2:24:04:52: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:13:51:C7:C6:25:BF:89:45:9A:FB:1A:AF:94:A7:DD:A1:D0:85:54 X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2b:32:5d:9b:2f:97:28:65:41:db:58:0b:71:77:bf:b6:29: 66:3d:24:fb:1a:fa:9d:1c:85:d4:06:7b:6e:a8:51:aa:77:dc: 73:cd:7b:30:20:89:b7:88:9d:57:d5:12:82:ab:7d:ce:25:cc: f8:91:7b:cf:02:50:b0:9f:e6:6d:cb:a2:ab:c1:63:dc:5c:21: 89:f6:d9:22:ad:18:13:0d:4a:e7:c0:5a:cd:01:41:bd:b0:93: e2:b3:c1:36:c9:61:a0:48:79:b8:61:f3:a1:9e:ce:77:f7:bc: 12:99:ce:8b:02:a6:4d:fc:38:c2:59:96:2c:5e:5d:52:0f:e4: 16:50:51:c0:cd:56:f4:d3:c3:df:f3:d3:51:8e:15:47:29:73: 33:33:be:73:c5:e2:5c:c4:d3:67:2d:2e:30:57:fe:d0:9d:f8: bb:82:26:0a:92:0a:d7:56:21:64:9f:32:14:b7:e3:af:00:52: e2:fb:09:f7:6d:ce:ae:12:f7:b9:63:3c:9b:e6:d3:1a:4f:5f: b0:46:0d:6d:81:bf:94:de:d2:9f:f5:66:87:ee:4b:7d:e5:8d: 89:cf:76:b8:80:0d:dd:db:e5:6f:a5:18:52:de:ea:af:c9:7b: 2c:4e:bf:82:e4:f3:f3:19:69:17:ba:76:61:d4:e4:15:b3:60: ed:60:ad:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjYwNzI2MTcyODU3WhcNMjYwODAyMTcyODU3WjAYMRYwFAYD VQQDEw02YTY2NDNkYS01ZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2La4xFiIbLMd1B2K8xAaCUqU41PKOhEoD4j9RdTib6aRbYogziaIB2VoItH 3ktjZOM48nJY6l8+grhZCrpJhiATtgciRXz3QtaCJF2UHoLN8iNKsM9mnTkVzh38 dIFbfh3r5mDmWLsuFZDb/tH0bmZRfJ32rYi7eFDqzygTJZ8mAQIjHHKMT3WMmw5X 1HJXYfACAd3lohdGj7Kofh3W4pwU6gVYVpNAKk7in+LBfKpGW0y7vZORuA4XOCho sBd9iFG4z0KN/BtFyuLaUtqIFOj0wKzPMrm6lyzlVrYokT9QxsSle87sKUIFl8pr POlofpjlHhglKjKwDcIkBFJHTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8TUcfG Jb+JRZr7Gq+Up92h0IVUMB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjysyXZsvlyhlQdtYC3F3v7YpZj0k+xr6nRyF1AZ7bqhRqnfcc817MCCJt4id V9USgqt9ziXM+JF7zwJQsJ/mbcuiq8Fj3FwhifbZIq0YEw1K58BazQFBvbCT4rPB NslhoEh5uGHzoZ7Od/e8EpnOiwKmTfw4wlmWLF5dUg/kFlBRwM1W9NPD3/PTUY4V RylzMzO+c8XiXMTTZy0uMFf+0J34u4ImCpIK11YhZJ8yFLfjrwBS4vsJ923OrhL3 uWM8m+bTGk9fsEYNbYG/lN7Sn/Vmh+5LfeWNic92uIAN3dvlb6UYUt7qr8l7LE6/ guTz8xlpF7p2YdTkFbNg7WCtKg== -----END CERTIFICATE-----Generated at Mon Jul 27 16:51:36 2026 by rpki-client