$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: lhf0/Qpcl9MNi7rHBwjU2bWlWy9iPOTIL0N8P4vYzeA= Subject key identifier: 41:AE:C4:D0:83:C8:18:52:9B:D7:C9:37:ED:14:29:37:B6:A8:31:C5 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0B9B Signing time: Thu 20 Aug 2026 19:03:29 +0000 Manifest this update: Thu 20 Aug 2026 19:03:29 +0000 Manifest next update: Thu 27 Aug 2026 19:03:29 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: kZbFhXoIx+HWe5DCSzbbW0u3Y4lKEa8+lrWXMH5J09Y=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Aug 20 19:03:29 2026 GMT Not After : Aug 27 19:03:29 2026 GMT Subject: CN=6a874f81-8f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:eb:58:44:70:21:40:1a:ae:bd:9d:02:63: e9:a8:4a:1e:d8:73:39:63:5e:88:60:eb:de:df:65: 26:a3:58:47:4e:f7:43:cf:0c:f8:e7:8f:66:c9:8f: 3b:d7:d1:46:0c:ab:46:7d:c4:a7:be:1f:45:79:03: 9c:42:69:5a:ef:1c:8f:0d:8d:6e:4b:61:b7:8e:36: 09:4c:d3:20:a6:57:21:d7:7c:15:a1:89:0c:87:24: bc:c4:2c:ac:89:e0:49:e3:a2:16:5b:c4:d4:67:44: 9e:e1:5d:20:38:f9:ac:74:b9:f3:98:68:41:a3:e4: 6b:e9:29:a1:16:20:9d:32:73:e7:b4:8f:a1:08:26: 00:36:e4:b0:5f:b9:15:4c:be:f7:ce:b9:6f:c6:c5: d1:00:62:40:1d:9e:50:33:d6:28:70:ec:1e:af:31: 75:51:55:05:24:33:93:ff:5f:a5:c8:54:0a:67:b7: 0c:74:89:11:c0:b0:1e:5c:e9:e1:35:87:c5:13:06: 9e:86:d5:2e:3c:c0:22:3a:ba:c0:f0:32:fb:e2:53: c5:f2:f0:9c:77:fe:74:2a:a7:38:6b:8b:d1:2b:a8: be:a6:ae:d4:8a:ae:da:25:b3:57:5f:c2:d3:1c:97: 6d:3b:da:a4:d2:46:3b:bc:8b:00:7c:bc:56:cb:59: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:C4:D0:83:C8:18:52:9B:D7:C9:37:ED:14:29:37:B6:A8:31:C5 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:56:2d:3b:66:e7:35:77:2b:c5:4d:0d:9b:09:1b:f4:de:5e: e2:e4:a3:14:8b:ec:55:b9:7c:e4:4d:19:f3:b1:0b:a6:d3:6a: f3:8b:b8:16:70:fe:87:9b:9d:2c:f4:9b:a2:91:6a:e8:94:db: 62:8e:b1:11:80:a5:02:76:ce:3c:ac:34:29:65:f9:9d:4f:9b: 8a:75:53:79:63:25:ac:5d:1d:f6:45:15:da:e6:88:fd:10:66: d5:b3:62:6f:03:7a:1b:83:e5:74:c1:f3:55:45:fe:0f:4e:2a: b2:1b:c8:9e:c4:36:bc:be:1f:f5:93:c3:14:2d:91:0d:83:25: d7:34:95:b6:6b:8e:13:b3:fb:05:0d:ce:a1:b5:2c:eb:a7:1d: a9:02:d0:05:3a:db:6d:ba:d8:a7:a0:5e:f4:ea:b8:9f:b1:d7: eb:35:b9:e0:42:c1:01:53:6e:ae:6a:b4:ae:de:b3:fd:18:58: fb:6c:24:78:c2:cd:b0:ed:72:93:c0:8e:e8:6f:15:c8:68:84: e8:42:a1:5b:38:05:d3:12:d9:e2:88:25:1a:fc:68:9e:5d:24: 41:9e:37:ef:71:40:4f:f7:0c:b0:c9:35:30:bd:5a:7e:cb:95: 8d:cd:70:ba:a7:d9:83:4a:0f:8d:17:e0:a6:91:72:5c:dc:1f: 71:0f:23:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjYwODIwMTkwMzI5WhcNMjYwODI3MTkwMzI5WjAYMRYwFAYD VQQDEw02YTg3NGY4MS04ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B3rWERwIUAarr2dAmPpqEoe2HM5Y16IYOve32Umo1hHTvdDzwz4549myY87 19FGDKtGfcSnvh9FeQOcQmla7xyPDY1uS2G3jjYJTNMgplch13wVoYkMhyS8xCys ieBJ46IWW8TUZ0Se4V0gOPmsdLnzmGhBo+Rr6SmhFiCdMnPntI+hCCYANuSwX7kV TL73zrlvxsXRAGJAHZ5QM9YocOwerzF1UVUFJDOT/1+lyFQKZ7cMdIkRwLAeXOnh NYfFEwaehtUuPMAiOrrA8DL74lPF8vCcd/50Kqc4a4vRK6i+pq7Uiq7aJbNXX8LT HJdtO9qk0kY7vIsAfLxWy1m/4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGuxNCD yBhSm9fJN+0UKTe2qDHFMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANFYtO2bnNXcrxU0Nmwkb9N5e4uSjFIvsVbl85E0Z87ELptNq84u4FnD+h5ud LPSbopFq6JTbYo6xEYClAnbOPKw0KWX5nU+binVTeWMlrF0d9kUV2uaI/RBm1bNi bwN6G4PldMHzVUX+D04qshvInsQ2vL4f9ZPDFC2RDYMl1zSVtmuOE7P7BQ3OobUs 66cdqQLQBTrbbbrYp6Be9Oq4n7HX6zW54ELBAVNurmq0rt6z/RhY+2wkeMLNsO1y k8CO6G8VyGiE6EKhWzgF0xLZ4oglGvxonl0kQZ4373FAT/cMsMk1ML1afsuVjc1w uqfZg0oPjRfgppFyXNwfcQ8j2Q== -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:45 2026 by rpki-client