$ rpki-client -vvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft File: iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json) Hash identifier: lCR+im0RFhlfTUoDVKn2lIVnl0Gn+fsIs5rOkteaBNU= Subject key identifier: 6C:E4:31:3A:30:55:4A:1D:AB:40:81:03:FA:8E:43:33:3D:4E:B9:BA Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE Certificate issuer: /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft Manifest number: 4B Signing time: Wed 19 Aug 2026 09:10:33 +0000 Manifest this update: Wed 19 Aug 2026 09:10:32 +0000 Manifest next update: Wed 26 Aug 2026 09:10:32 +0000 Files and hashes: 1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: 8/s7Fdq4KTSW3R+7HFaDVP2yMzVARCzLgaHdqDsAurk=) 2: 30C6735E371C11F1AB220340C9833773.roa (hash: r1zttv5Tg4fvomOU2T9kTIcd0o8O/m74nqkwAFCr7V8=) 3: 52E7D8963D6711F19B0B1A66AE833773.roa (hash: D4eeMtM0vlvOieXn6mH3kJIRvN6LTz+MNbPoGWUcWyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE Validity Not Before: Aug 19 09:10:32 2026 GMT Not After : Aug 26 09:10:32 2026 GMT Subject: CN=6a857309-b19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:7b:bb:dc:8a:58:b7:1d:ec:ed:5c:a8:bc: 18:c7:ea:eb:ec:ba:47:56:c3:85:a3:89:ee:ee:80: 06:b1:29:d4:97:db:d0:71:87:0e:22:b6:1d:3f:64: c8:54:13:2b:e7:f3:20:d1:00:75:ac:f6:a9:98:ce: 3e:75:65:bd:3e:86:aa:38:25:82:d6:42:85:74:ff: 8a:9d:13:6c:88:6e:ff:a0:4c:4d:72:96:74:90:a5: 91:e2:f6:38:f6:3f:0b:d8:12:2c:8d:00:8b:89:f4: 1b:93:5c:89:2f:a6:29:8f:d8:36:46:17:c1:9a:58: c0:8a:f1:fc:5a:f1:44:a9:de:79:5d:e8:d0:3e:63: 11:7d:e8:ad:3c:40:06:60:72:8b:01:71:e5:5e:5f: 1d:76:c2:57:05:a5:84:6d:48:76:d4:29:38:1a:b3: 03:eb:a6:33:20:0b:cd:19:cc:7c:83:a6:c6:eb:17: cd:54:11:1b:d3:7f:f3:89:ce:84:26:e3:97:7e:ee: a7:51:40:04:5b:1e:2b:e9:c9:4a:64:b9:ec:d6:91: a8:47:46:53:e3:d8:8c:8b:5d:76:57:9b:62:59:ca: 1e:d3:0a:94:7f:14:48:d4:da:19:12:04:42:e2:53: 05:43:c7:f0:48:af:aa:d9:32:ad:9f:35:ea:8d:5c: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E4:31:3A:30:55:4A:1D:AB:40:81:03:FA:8E:43:33:3D:4E:B9:BA X509v3 Authority Key Identifier: keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:c3:c7:99:06:06:39:ce:3e:c3:2d:73:c5:bf:6c:d2:74: 4e:61:9a:f3:17:25:7f:bb:7a:cd:fa:a1:5d:26:df:45:51:4a: b0:bc:9f:b0:9d:6b:e8:59:3d:db:24:e6:ae:0e:fb:16:30:dd: 27:ff:34:e7:ee:a9:45:8c:55:37:10:2e:c6:a0:62:0e:b1:18: e3:33:98:d5:33:73:94:49:28:59:35:94:b4:11:0e:58:c7:9e: b4:fa:17:45:a7:b6:28:92:a0:0c:6e:15:23:87:b3:b1:a7:76: 52:f6:4f:b0:18:dc:a9:81:fb:70:33:63:0d:5a:b3:79:22:a0: 1a:2e:23:7f:22:17:ea:40:79:d8:3b:40:50:1b:71:8e:4e:fe: 9f:a0:10:0c:d7:6a:ee:a1:2f:ae:46:5f:21:f4:b8:da:15:88: 7a:d3:bb:31:36:22:c2:ac:a1:06:06:27:0e:3c:e6:05:cd:4f: c9:88:e5:16:6f:45:c5:9b:cd:1e:58:52:81:7b:92:47:bf:f0: 57:ae:cb:ad:7d:52:3a:de:c9:b5:7a:b4:37:f9:62:f2:e2:c1: d1:ed:8e:93:9e:a8:f2:d6:27:fc:46:53:6d:b7:02:db:12:e8: 06:7a:dd:1e:eb:a5:9d:b3:26:f8:bd:19:9f:62:84:e8:d6:95: 89:24:1e:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEExODExMC8GA1UEBRMoODg0OEVDMEVEQTM5NkZFMjE0RUVDMDMxN0YwRjUxQjkx OEQ2RkNFRTAeFw0yNjA4MTkwOTEwMzJaFw0yNjA4MjYwOTEwMzJaMBgxFjAUBgNV BAMTDTZhODU3MzA5LWIxOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPlXu73IpYtx3s7VyovBjH6uvsukdWw4Wjie7ugAaxKdSX29Bxhw4ith0/ZMhU Eyvn8yDRAHWs9qmYzj51Zb0+hqo4JYLWQoV0/4qdE2yIbv+gTE1ylnSQpZHi9jj2 PwvYEiyNAIuJ9BuTXIkvpimP2DZGF8GaWMCK8fxa8USp3nld6NA+YxF96K08QAZg cosBceVeXx12wlcFpYRtSHbUKTgaswPrpjMgC80ZzHyDpsbrF81UERvTf/OJzoQm 45d+7qdRQARbHivpyUpkuezWkahHRlPj2IyLXXZXm2JZyh7TCpR/FEjU2hkSBELi UwVDx/BIr6rZMq2fNeqNXMzfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbOQxOjBV Sh2rQIED+o5DMz1OubowHwYDVR0jBBgwFoAUiEjsDto5b+IU7sAxfw9RuRjW/O4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQTE4LzRGRUM3MUNDMzZE OTExRjE4REQwRkUyN0IxODMzNzczL2lFanNEdG81Yi1JVTdzQXhmdzlSdVJqV19P NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUVqc0R0bzViLUlVN3NBeGZ3OVJ1UmpXX080LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw QTE4LzRGRUM3MUNDMzZEOTExRjE4REQwRkUyN0IxODMzNzczL2lFanNEdG81Yi1J VTdzQXhmdzlSdVJqV19PNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaAMPHmQYGOc4+wy1zxb9s0nROYZrzFyV/u3rN+qFdJt9FUUqwvJ+wnWvoWT3b JOauDvsWMN0n/zTn7qlFjFU3EC7GoGIOsRjjM5jVM3OUSShZNZS0EQ5Yx560+hdF p7YokqAMbhUjh7Oxp3ZS9k+wGNypgftwM2MNWrN5IqAaLiN/IhfqQHnYO0BQG3GO Tv6foBAM12ruoS+uRl8h9LjaFYh607sxNiLCrKEGBicOPOYFzU/JiOUWb0XFm80e WFKBe5JHv/BXrsutfVI63sm1erQ3+WLy4sHR7Y6Tnqjy1if8RlNttwLbEugGet0e 66Wdsyb4vRmfYoTo1pWJJB5e -----END CERTIFICATE-----Generated at Wed Aug 19 16:46:33 2026 by rpki-client