$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: +E86IjPeLHVbcDwsMrxa++EEy72XPUwPskw+fAlFHiM= Subject key identifier: 9C:15:B2:C0:45:E5:B9:19:23:E3:BC:2A:A7:B2:09:27:2A:A1:EB:11 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 029F Signing time: Mon 29 Jun 2026 02:04:18 +0000 Manifest this update: Mon 29 Jun 2026 02:04:18 +0000 Manifest next update: Mon 06 Jul 2026 02:04:18 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: xtpFLHF2QcQ+FrtaFcwUcdsh9dnLnjyYYHgElakCms8=) 2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) 3: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Jul 2026 02:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Jun 29 02:04:18 2026 GMT Not After : Jul 6 02:04:18 2026 GMT Subject: CN=6a41d2a2-609c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:38:b9:25:ba:77:39:cc:5a:bd:79:d3:f1: e6:4c:f8:b0:9f:87:27:58:1a:9b:c8:31:2a:09:3d: ad:a8:eb:2a:fb:3c:5e:98:49:91:d5:1b:9a:56:04: 76:d6:10:3c:6d:35:fc:04:21:0a:c3:e1:fa:15:a3: 9b:bc:f1:b3:21:01:70:53:ff:56:a8:1f:97:6d:14: ab:f6:61:22:ef:28:59:87:cf:6d:19:9b:b9:62:5d: bc:17:fa:1e:e1:4a:a4:d0:bf:82:26:06:93:f4:87: b9:ff:59:56:cb:f0:85:db:7d:05:4b:eb:71:9b:01: 79:c9:b5:11:83:45:10:28:81:e0:e7:f5:9d:a3:e2: 86:48:23:aa:49:eb:09:3c:31:f3:47:05:22:c2:ac: bc:fd:e4:e6:e2:3d:2b:c7:97:fd:b1:24:a8:e4:4c: 30:3b:aa:0a:11:f8:ef:51:1c:1d:3b:f0:bd:46:b3: 71:5d:81:84:2f:7f:e5:37:be:33:89:c2:07:49:5f: be:a0:29:7d:ff:6f:3a:c2:4e:b1:e5:7d:be:87:12: 7b:f5:9e:d9:11:56:38:53:59:2c:87:29:47:8a:43: 6d:d0:27:42:17:9b:40:fc:d7:75:8c:a8:d4:0b:6b: 60:cd:f8:6b:49:00:09:01:5f:97:83:67:24:c5:52: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:15:B2:C0:45:E5:B9:19:23:E3:BC:2A:A7:B2:09:27:2A:A1:EB:11 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0b:29:9a:0b:bf:3f:07:4d:ba:17:8e:08:79:34:de:17:99: 47:49:9a:27:e4:4f:c3:66:ef:9b:e3:de:a9:6d:6f:dd:69:b6: 2b:01:5a:15:dd:09:a2:f0:66:37:d3:fb:50:9d:40:18:0f:6d: fd:82:56:22:7f:90:b3:05:bd:3e:bd:63:d9:2c:02:ba:79:ed: 21:2f:f4:7d:65:96:54:fe:4d:70:ce:37:c5:a7:a0:97:d5:72: af:7d:70:90:13:35:48:01:ff:c2:16:1e:0b:e6:4c:ae:4c:bd: 3c:fc:d4:3b:30:27:d1:7b:c2:b1:30:d9:38:4b:e4:33:9b:de: 46:d4:72:a2:76:ed:88:55:f8:8c:79:e3:e4:60:f7:72:59:ab: bd:9c:b3:5f:3c:d2:54:a2:83:2d:c2:92:4f:59:b8:21:ea:4f: d6:0c:6b:df:0e:f0:68:61:5a:00:76:c1:34:22:ab:4d:8e:74: 5f:8f:3c:a7:1c:45:6f:43:a3:9b:d1:b8:58:78:5d:b9:bd:d4: 1e:16:69:56:dd:e2:02:80:e8:50:9f:25:eb:16:a2:80:85:92: 66:66:97:a2:bc:bf:ee:ba:e0:f7:80:8e:99:4c:c9:9f:dc:c5: 6f:16:f0:c1:c1:6f:79:17:b1:41:46:0c:2b:21:47:38:b3:8a: 08:49:10:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwNjI5MDIwNDE4WhcNMjYwNzA2MDIwNDE4WjAYMRYwFAYD VQQDEw02YTQxZDJhMi02MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorU4uSW6dznMWr150/HmTPiwn4cnWBqbyDEqCT2tqOsq+zxemEmR1RuaVgR2 1hA8bTX8BCEKw+H6FaObvPGzIQFwU/9WqB+XbRSr9mEi7yhZh89tGZu5Yl28F/oe 4Uqk0L+CJgaT9Ie5/1lWy/CF230FS+txmwF5ybURg0UQKIHg5/Wdo+KGSCOqSesJ PDHzRwUiwqy8/eTm4j0rx5f9sSSo5EwwO6oKEfjvURwdO/C9RrNxXYGEL3/lN74z icIHSV++oCl9/286wk6x5X2+hxJ79Z7ZEVY4U1kshylHikNt0CdCF5tA/Nd1jKjU C2tgzfhrSQAJAV+Xg2ckxVKL/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwVssBF 5bkZI+O8KqeyCScqoesRMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJwspmgu/PwdNuheOCHk03heZR0maJ+RPw2bvm+PeqW1v3Wm2KwFaFd0JovBm N9P7UJ1AGA9t/YJWIn+QswW9Pr1j2SwCunntIS/0fWWWVP5NcM43xaegl9Vyr31w kBM1SAH/whYeC+ZMrky9PPzUOzAn0XvCsTDZOEvkM5veRtRyonbtiFX4jHnj5GD3 clmrvZyzXzzSVKKDLcKST1m4IepP1gxr3w7waGFaAHbBNCKrTY50X488pxxFb0Oj m9G4WHhdub3UHhZpVt3iAoDoUJ8l6xaigIWSZmaXory/7rrg94COmUzJn9zFbxbw wcFveRexQUYMKyFHOLOKCEkQRQ== -----END CERTIFICATE-----Generated at Tue Jun 30 23:35:07 2026 by rpki-client