$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: mbj7QgvcGrRCuoxkZn3WUlHrpccXTaLGQ47hE5K2GYU= Subject key identifier: EF:D4:85:B7:66:2F:3F:A4:77:94:FC:8B:2C:8F:F0:62:2D:86:F0:71 Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 01E7 Signing time: Mon 27 Jul 2026 05:16:02 +0000 Manifest this update: Mon 27 Jul 2026 05:16:01 +0000 Manifest next update: Mon 03 Aug 2026 05:16:01 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: lQjsZi/RW81QiUZ6ThG6xrk6X4DJwLFs3Tj96CLilYk=) 2: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) 3: 69EBCB546BAE11F196CCF4747547A888.roa (hash: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E=) 4: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Jul 27 05:16:01 2026 GMT Not After : Aug 3 05:16:01 2026 GMT Subject: CN=6a66e992-fe0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:46:35:d4:67:98:67:0e:c3:43:df:9a:e2: b0:eb:d2:2e:4d:19:5c:2d:04:e7:d9:5e:d1:14:1c: f7:2b:77:a1:02:0c:e9:54:01:e3:bf:1b:51:ea:72: 85:45:b4:12:11:36:d0:5b:19:75:59:fa:8d:8c:df: 57:94:4f:ac:0d:f9:0a:df:99:67:00:08:a6:09:87: 72:f2:3c:c4:12:86:ea:cb:3b:71:50:9a:52:d1:50: 01:17:f7:6e:82:6d:c1:f3:7e:8a:bd:0b:03:e4:d4: 18:d9:d9:83:80:f3:36:14:8e:ad:5e:6f:a2:14:0a: d3:26:60:7c:ad:c2:2e:45:f1:f8:2e:e5:75:7c:8e: e6:09:42:bf:6a:48:a7:ce:b0:41:f8:57:5b:09:71: 82:ec:10:9a:e8:c8:f0:10:7f:db:f7:8a:29:4e:63: b2:7b:04:eb:0a:47:f8:bd:38:62:c7:ea:a0:74:eb: 95:82:0a:a3:a0:19:54:19:9a:c2:43:0d:b9:8d:5f: 7f:b3:e5:4b:5c:39:62:25:b8:11:eb:87:89:38:e5: 06:ce:7f:7f:40:5f:65:bb:5a:84:f7:48:18:71:7f: 22:21:89:88:81:97:cc:eb:b5:df:9e:05:7a:63:d0: 3b:83:61:a6:99:7c:21:e5:01:ba:92:67:74:7a:b2: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:85:B7:66:2F:3F:A4:77:94:FC:8B:2C:8F:F0:62:2D:86:F0:71 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:65:32:77:ff:d2:d4:11:7f:64:8f:b2:d2:0c:ec:29:62:85: ac:80:c9:93:ce:5e:e7:14:b2:54:95:2b:4b:b6:c9:8f:95:96: c9:94:aa:63:04:1b:2d:5b:b9:ae:44:4e:31:cb:11:a1:b5:31: 6f:c9:3e:c4:1e:1f:32:9f:0c:6d:79:f1:79:eb:2c:d7:84:99: 73:02:2f:47:60:b9:fa:8b:c3:36:9a:ce:18:3d:99:b2:c5:9d: 5b:40:01:8c:df:07:ef:51:6a:f1:d9:61:3a:82:53:67:a4:16: 76:f2:ad:eb:c7:32:03:63:d4:c8:fd:67:52:4e:6f:77:e2:94: f8:fd:c6:b1:a3:b2:78:f0:9f:48:8c:fa:6b:27:a1:3f:8b:a1: 4e:bb:8d:73:92:e2:f2:29:5c:1f:49:7f:f0:a5:3f:41:3f:8b: 07:ed:1e:8c:6c:ad:c9:bd:9d:e3:0c:3d:4d:22:82:6d:25:b5: f0:04:55:5b:9c:b2:05:57:d9:55:8a:06:8e:17:12:95:7e:c6: b4:fa:43:6a:00:55:f0:7e:a5:86:c5:43:0b:53:31:be:5a:00: 8d:9b:3b:a9:a5:b5:f0:a9:d7:4d:4e:ac:52:f0:8f:03:93:5a: 27:09:27:09:8b:b9:96:90:36:72:8d:c8:2b:58:c5:ec:df:f7: 4d:bf:bb:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwNzI3MDUxNjAxWhcNMjYwODAzMDUxNjAxWjAYMRYwFAYD VQQDEw02YTY2ZTk5Mi1mZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzFGNdRnmGcOw0PfmuKw69IuTRlcLQTn2V7RFBz3K3ehAgzpVAHjvxtR6nKF RbQSETbQWxl1WfqNjN9XlE+sDfkK35lnAAimCYdy8jzEEobqyztxUJpS0VABF/du gm3B836KvQsD5NQY2dmDgPM2FI6tXm+iFArTJmB8rcIuRfH4LuV1fI7mCUK/akin zrBB+FdbCXGC7BCa6MjwEH/b94opTmOyewTrCkf4vThix+qgdOuVggqjoBlUGZrC Qw25jV9/s+VLXDliJbgR64eJOOUGzn9/QF9lu1qE90gYcX8iIYmIgZfM67XfngV6 Y9A7g2GmmXwh5QG6kmd0erI8HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/Uhbdm Lz+kd5T8iyyP8GIthvBxMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIWUyd//S1BF/ZI+y0gzsKWKFrIDJk85e5xSyVJUrS7bJj5WWyZSqYwQbLVu5 rkROMcsRobUxb8k+xB4fMp8MbXnxeess14SZcwIvR2C5+ovDNprOGD2ZssWdW0AB jN8H71Fq8dlhOoJTZ6QWdvKt68cyA2PUyP1nUk5vd+KU+P3GsaOyePCfSIz6ayeh P4uhTruNc5Li8ilcH0l/8KU/QT+LB+0ejGytyb2d4ww9TSKCbSW18ARVW5yyBVfZ VYoGjhcSlX7GtPpDagBV8H6lhsVDC1MxvloAjZs7qaW18KnXTU6sUvCPA5NaJwkn CYu5lpA2co3IK1jF7N/3Tb+7Cg== -----END CERTIFICATE-----Generated at Mon Jul 27 12:48:55 2026 by rpki-client