$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: 3SM17YtYfLHRfnFfDMtiZxGj4lm65F+y7H8CZBDFUt8= Subject key identifier: AB:82:C1:93:12:9F:0E:4A:57:8E:D0:A3:ED:24:C0:D8:0D:5A:E6:9C Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 07CC Signing time: Tue 18 Aug 2026 21:44:25 +0000 Manifest this update: Tue 18 Aug 2026 21:44:24 +0000 Manifest next update: Tue 25 Aug 2026 21:44:24 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: pW2I1+3fSVgEZQy30U0QuyB6ur0CAicrkhTbO5+HnNg=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ekCf+qkgQjsCTS/hD3kgERoIA8Bx5WAn9/u0BBY+k1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 21:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Aug 18 21:44:24 2026 GMT Not After : Aug 25 21:44:24 2026 GMT Subject: CN=6a84d238-ac21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:af:1c:29:42:17:90:7c:dd:0f:9f:36:f8: 65:7e:a2:bf:b4:1e:77:32:07:17:61:08:8a:3c:99: fa:26:79:68:72:ce:72:67:ba:4e:55:b7:ea:c3:b8: b9:50:7a:63:4e:7b:f3:46:b3:8c:4b:c3:b5:f0:bd: e5:fb:da:2d:a2:cc:3b:09:7c:d2:79:c8:af:1a:ac: 60:5f:c1:bb:91:a1:4c:6a:cd:b7:ea:8d:95:34:01: 73:6a:46:e9:10:71:9a:fb:1f:c7:78:6d:5b:80:72: d3:71:98:82:3f:e8:f5:2f:ef:76:ce:a2:60:1b:22: b0:04:90:6d:ab:51:c5:be:8d:49:5a:64:51:7f:df: 7e:a2:65:6a:a1:b8:5c:27:40:5f:9a:15:95:98:bd: 68:ab:9c:59:1f:af:25:5d:40:4d:cf:db:2f:dc:fb: 42:e4:82:f2:71:74:36:48:99:74:5c:e4:c2:89:76: 07:5c:bc:fe:69:da:1e:c9:7f:eb:9b:a7:e8:7f:a9: a3:af:a6:65:e4:8b:33:d9:b9:95:ea:19:5e:7a:93: a6:53:0e:00:1c:b0:25:22:32:6d:fa:b6:d3:da:ee: 4e:55:e9:3d:54:96:5b:0b:9c:a8:a9:71:c7:df:b0: b0:bc:2c:d0:85:42:cd:ac:1f:d2:0d:04:7d:1e:40: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:C1:93:12:9F:0E:4A:57:8E:D0:A3:ED:24:C0:D8:0D:5A:E6:9C X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c1:32:c5:f8:b8:8b:13:85:df:e3:62:51:f7:33:f6:48:22: f4:9f:81:df:9d:d8:b9:c6:fd:4a:17:19:6a:cd:51:ab:e2:0a: 7b:50:92:0e:da:31:43:25:3b:3a:9b:12:ad:f6:1c:7b:a8:19: b1:fa:4d:dc:30:59:70:9f:6e:fa:84:f6:04:74:1c:d5:9c:dd: ba:d8:1b:e3:c4:32:74:8a:1b:c4:f0:6d:c0:fd:fb:c5:46:b0: 62:ec:a2:67:58:7f:07:c6:05:b2:6a:06:6c:7a:6c:84:bc:d1: 74:23:b5:f1:8f:01:1f:67:b4:d7:47:57:8a:4f:60:67:8b:59: 63:26:c5:81:e5:8f:ad:06:79:e7:cb:8e:cd:72:3d:e3:07:dd: 87:2e:e5:a9:a9:fb:00:11:f0:10:84:64:b9:86:46:2f:b1:5f: 23:9e:63:d7:ec:f6:85:f4:d7:79:cb:2f:f7:c2:8e:70:42:3a: 2b:12:49:38:2b:be:60:6d:2e:05:34:ac:b6:cc:e1:63:c3:77: d8:27:03:5b:20:12:54:6a:17:f1:6e:28:28:f2:9e:8d:93:28: 74:94:50:3a:8f:04:82:73:88:3d:b6:22:cc:a3:b5:a4:9e:9b: 32:d6:57:29:3f:82:ea:b9:5c:39:c5:5c:4a:20:7b:91:3e:f7: bf:16:56:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjYwODE4MjE0NDI0WhcNMjYwODI1MjE0NDI0WjAYMRYwFAYD VQQDEw02YTg0ZDIzOC1hYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3CvHClCF5B83Q+fNvhlfqK/tB53MgcXYQiKPJn6Jnlocs5yZ7pOVbfqw7i5 UHpjTnvzRrOMS8O18L3l+9otosw7CXzSecivGqxgX8G7kaFMas236o2VNAFzakbp EHGa+x/HeG1bgHLTcZiCP+j1L+92zqJgGyKwBJBtq1HFvo1JWmRRf99+omVqobhc J0BfmhWVmL1oq5xZH68lXUBNz9sv3PtC5ILycXQ2SJl0XOTCiXYHXLz+adoeyX/r m6fof6mjr6Zl5Isz2bmV6hleepOmUw4AHLAlIjJt+rbT2u5OVek9VJZbC5yoqXHH 37CwvCzQhULNrB/SDQR9HkA6vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuCwZMS nw5KV47Qo+0kwNgNWuacMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWMEyxfi4ixOF3+NiUfcz9kgi9J+B353Yucb9ShcZas1Rq+IKe1CSDtoxQyU7 OpsSrfYce6gZsfpN3DBZcJ9u+oT2BHQc1Zzdutgb48QydIobxPBtwP37xUawYuyi Z1h/B8YFsmoGbHpshLzRdCO18Y8BH2e010dXik9gZ4tZYybFgeWPrQZ558uOzXI9 4wfdhy7lqan7ABHwEIRkuYZGL7FfI55j1+z2hfTXecsv98KOcEI6KxJJOCu+YG0u BTSstszhY8N32CcDWyASVGoX8W4oKPKejZModJRQOo8EgnOIPbYizKO1pJ6bMtZX KT+C6rlcOcVcSiB7kT73vxZWUg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:34 2026 by rpki-client