$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft File: IKFf0591NMenolMf7YtaFwipP1I.mft (raw, json) Hash identifier: PSj0kImPtEsvc2D79O2wnpUEXnUcO0bK5dTvwNR+qwg= Subject key identifier: 00:14:8E:36:9E:06:FD:3E:35:A8:64:3F:EB:A2:31:CC:27:5A:49:03 Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52 Certificate issuer: /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft Manifest number: 2A Signing time: Mon 03 Aug 2026 10:24:38 +0000 Manifest this update: Mon 03 Aug 2026 10:24:37 +0000 Manifest next update: Mon 10 Aug 2026 10:24:37 +0000 Files and hashes: 1: IKFf0591NMenolMf7YtaFwipP1I.crl (hash: /GmsdFccXGJYRHuXXHbMCV+p+iOoxFU+mAOp3IAgqL4=) 2: 01A09AD4529A11F1B2F4C97190833773.roa (hash: LeQAKpSHZPhzl/yDoMV2G62pZQxQb0sxO6TIaMOgO10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 10:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52 Validity Not Before: Aug 3 10:24:37 2026 GMT Not After : Aug 10 10:24:37 2026 GMT Subject: CN=6a706c65-9c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:72:d3:d8:0e:e3:d7:be:67:ac:c2:de:dd: 16:28:94:b0:b0:35:a3:d0:8b:e3:43:f1:77:96:5a: 34:21:6b:57:bd:f6:91:13:31:09:86:8f:27:1e:09: 78:50:6d:05:f2:92:6c:d7:60:b1:26:2a:88:2f:6a: f5:d8:42:ca:26:d2:62:40:9f:f8:a0:57:04:29:5a: 31:da:d1:59:e6:2a:3e:a6:3b:68:93:5d:db:ba:ec: 2c:3c:d9:bf:98:f9:31:9d:05:57:73:21:53:3a:71: b9:80:31:9a:ea:e2:f5:45:f8:97:58:43:8f:e0:f1: 66:c2:81:5a:41:df:0b:4f:d7:7b:53:58:9d:52:2a: a9:34:b4:c7:74:d0:6e:c1:ab:b4:47:f1:94:c7:ee: ae:76:6b:b1:50:3b:3a:30:f9:b9:6a:00:d5:ab:ea: 49:5d:b8:6e:0a:bc:cc:db:0d:61:dc:ff:57:72:2d: ed:20:73:ae:1a:1c:dc:3b:cf:f5:20:8c:b0:58:8e: 8b:32:08:b3:33:2f:2d:02:be:2b:2b:61:b4:36:39: b7:0c:06:5d:98:35:92:ec:f4:f1:5d:ab:e3:83:b6: 0e:14:3b:00:51:13:cc:3a:86:11:c4:a8:00:fb:72: 6d:f4:85:7e:9f:a9:67:38:53:a4:85:c4:05:03:a0: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:14:8E:36:9E:06:FD:3E:35:A8:64:3F:EB:A2:31:CC:27:5A:49:03 X509v3 Authority Key Identifier: keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2f:27:5e:c8:19:72:30:c7:88:de:f7:2a:f4:01:2a:dc:ae: 3c:02:3e:25:0e:05:67:9f:04:b4:b8:0b:a6:49:cd:82:d1:d8: 5c:46:31:63:50:4f:f5:c8:53:57:cc:d1:4f:44:b1:79:20:c3: 73:db:e1:fa:26:02:b6:00:80:4e:c1:6a:df:62:eb:fb:f5:3c: 2c:90:88:d9:7f:81:ed:5e:d2:82:be:a6:48:62:d7:66:12:51: 67:8e:ca:79:b8:32:87:2e:55:89:58:f1:87:dd:ee:e8:5b:88: bd:3c:7f:26:67:b8:34:e5:ce:f1:70:6b:23:5e:10:bf:2c:52: b4:0d:dc:52:dc:c7:e8:2c:ec:9c:e7:93:ec:80:19:ec:67:41: 43:aa:fc:d6:b6:e8:e6:2b:d2:b9:27:69:39:2f:e4:c1:c4:0e: 1a:51:f3:fa:cf:e7:a2:4e:fd:da:16:a8:46:80:53:41:f0:87: 3c:fa:e7:43:3f:40:0c:61:e8:41:64:35:68:77:70:3b:4f:3a: 4c:b1:fb:ad:09:12:23:3a:f2:98:9b:6b:f6:18:22:d5:73:77: e6:92:73:c4:32:4f:11:79:bc:62:ee:09:5a:8f:ed:0a:65:77: 30:8b:7a:f4:80:fe:f4:cb:8c:f5:34:0c:9b:0a:82:24:70:b5: 9d:2a:5d:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MUJCRTExMC8GA1UEBRMoMjBBMTVGRDM5Rjc1MzRDN0E3QTI1MzFGRUQ4QjVBMTcw OEE5M0Y1MjAeFw0yNjA4MDMxMDI0MzdaFw0yNjA4MTAxMDI0MzdaMBgxFjAUBgNV BAMTDTZhNzA2YzY1LTljOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEJHLT2A7j175nrMLe3RYolLCwNaPQi+ND8XeWWjQha1e99pETMQmGjyceCXhQ bQXykmzXYLEmKogvavXYQsom0mJAn/igVwQpWjHa0VnmKj6mO2iTXdu67Cw82b+Y +TGdBVdzIVM6cbmAMZrq4vVF+JdYQ4/g8WbCgVpB3wtP13tTWJ1SKqk0tMd00G7B q7RH8ZTH7q52a7FQOzow+blqANWr6klduG4KvMzbDWHc/1dyLe0gc64aHNw7z/Ug jLBYjosyCLMzLy0CvisrYbQ2ObcMBl2YNZLs9PFdq+ODtg4UOwBRE8w6hhHEqAD7 cm30hX6fqWc4U6SFxAUDoL4NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUABSONp4G /T41qGQ/66IxzCdaSQMwHwYDVR0jBBgwFoAUIKFf0591NMenolMf7YtaFwipP1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxQkJFL0I3Qjk4RkFDNTI5 OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1lbm9sTWY3WXRhRndpcFAx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUtGZjA1OTFOTWVub2xNZjdZdGFGd2lwUDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx QkJFL0I3Qjk4RkFDNTI5OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1l bm9sTWY3WXRhRndpcFAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0LydeyBlyMMeI3vcq9AEq3K48Aj4lDgVnnwS0uAumSc2C0dhcRjFjUE/1yFNX zNFPRLF5IMNz2+H6JgK2AIBOwWrfYuv79TwskIjZf4HtXtKCvqZIYtdmElFnjsp5 uDKHLlWJWPGH3e7oW4i9PH8mZ7g05c7xcGsjXhC/LFK0DdxS3MfoLOyc55PsgBns Z0FDqvzWtujmK9K5J2k5L+TBxA4aUfP6z+eiTv3aFqhGgFNB8Ic8+udDP0AMYehB ZDVod3A7TzpMsfutCRIjOvKYm2v2GCLVc3fmknPEMk8Rebxi7glaj+0KZXcwi3r0 gP70y4z1NAybCoIkcLWdKl1R -----END CERTIFICATE-----Generated at Tue Aug 4 23:50:30 2026 by rpki-client