$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: WbzLfZHkAitev/r0Lq3IizVkiTnpVJ8kgGiNBbKgCD8= Subject key identifier: 4F:83:0F:0A:68:3F:70:D4:F4:55:4F:B3:8A:91:A4:30:DC:61:93:2D Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 0136 Signing time: Tue 21 Jul 2026 07:05:48 +0000 Manifest this update: Tue 21 Jul 2026 07:05:48 +0000 Manifest next update: Tue 28 Jul 2026 07:05:48 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: 0aWfeWloQL69rigytAO/iwSTvUrJH2siIJxmMHPWNpY=) 2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ILuNQjwNhW0PKN+i94dgKZ8uTmGwmDnJT50xUUvXJAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Jul 21 07:05:48 2026 GMT Not After : Jul 28 07:05:48 2026 GMT Subject: CN=6a5f1a4c-a63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:29:57:d3:89:b0:36:01:7c:60:84:f4:85: ff:b8:41:1c:7c:14:e8:bf:4f:f4:92:a6:29:45:01: 68:90:95:c0:e5:ef:bd:d9:95:0b:90:51:42:12:c5: 77:dc:98:08:0b:38:dc:4c:b7:01:e2:2c:31:ef:9e: 2a:43:1a:85:21:f0:02:06:ef:e2:a7:b9:f2:b6:d3: 49:99:0b:ca:33:76:49:23:d3:f0:e8:7f:a4:54:26: 5f:53:73:5a:8d:40:ba:37:6b:20:34:a8:78:18:49: 43:e7:1f:51:24:14:98:59:2d:4a:bc:e4:f4:81:dc: 51:2b:86:d1:80:a1:48:49:9c:c3:d7:f8:8a:0f:73: f8:a7:3f:68:1d:3a:fd:a4:d1:a7:8d:a3:94:ed:57: 48:e1:8e:96:ba:7a:19:8e:57:cd:bd:23:a1:55:87: 99:e3:a2:c2:f4:85:ee:63:e3:e3:6e:1c:c6:ce:20: 2b:a8:3d:80:90:79:82:14:3f:7e:79:3d:5b:6a:9b: 45:15:f1:6b:2e:c5:1b:fb:c3:79:ed:e7:38:cd:ea: da:3b:ac:06:70:4f:96:f7:1c:d9:cb:0a:4a:12:57: 02:ad:e0:33:76:e0:e7:db:e9:57:1d:3f:bc:f7:a6: 33:42:bc:57:ad:af:69:9f:09:bb:19:20:1e:21:f3: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:83:0F:0A:68:3F:70:D4:F4:55:4F:B3:8A:91:A4:30:DC:61:93:2D X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8a:39:20:ec:8f:6f:41:68:ee:c4:b6:09:2b:4f:b6:8c:02: ee:98:c8:a6:22:8a:5e:e4:8d:e1:c1:cd:49:85:66:03:a5:aa: c0:f6:48:5b:a8:f2:23:c5:d5:ce:e8:a1:44:93:ff:f2:36:6c: 0e:89:48:55:a2:23:03:cd:7a:27:97:a0:26:1d:16:e7:60:f9: 69:09:fb:11:c1:a7:90:5d:19:c6:5a:99:5b:c7:4f:87:55:e9: 00:56:37:3d:7c:bf:f5:21:41:2c:d8:fc:93:f9:d7:3b:ac:c2: ec:9e:bb:82:1e:89:e2:cc:bf:36:91:b1:c1:ea:bb:d9:1f:17: a5:fe:f2:aa:27:38:62:d6:52:3a:4a:3a:1a:2e:6e:ae:17:e8: d5:de:d8:00:f6:55:6d:d0:2f:48:2a:30:f0:2c:ed:8e:de:81: dc:8b:3f:87:24:68:bc:f2:c0:a7:fe:23:3c:4d:ca:4c:e0:28: 03:24:fa:05:70:1c:fa:11:58:a7:bd:f8:7a:30:e8:8d:ba:30: a6:9f:85:27:af:da:d9:54:e0:46:ff:d5:e6:7a:7a:2e:bc:1c: b1:b1:8f:62:fc:0e:12:b0:76:ed:d2:37:cc:89:e0:63:1d:47: 70:eb:76:aa:48:74:63:da:30:e9:a0:e5:70:2e:a6:28:d3:52: 00:20:6e:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwNzIxMDcwNTQ4WhcNMjYwNzI4MDcwNTQ4WjAYMRYwFAYD VQQDEw02YTVmMWE0Yy1hNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf8pV9OJsDYBfGCE9IX/uEEcfBTov0/0kqYpRQFokJXA5e+92ZULkFFCEsV3 3JgICzjcTLcB4iwx754qQxqFIfACBu/ip7nyttNJmQvKM3ZJI9Pw6H+kVCZfU3Na jUC6N2sgNKh4GElD5x9RJBSYWS1KvOT0gdxRK4bRgKFISZzD1/iKD3P4pz9oHTr9 pNGnjaOU7VdI4Y6WunoZjlfNvSOhVYeZ46LC9IXuY+PjbhzGziArqD2AkHmCFD9+ eT1baptFFfFrLsUb+8N57ec4zeraO6wGcE+W9xzZywpKElcCreAzduDn2+lXHT+8 96YzQrxXra9pnwm7GSAeIfP/vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+DDwpo P3DU9FVPs4qRpDDcYZMtMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf4o5IOyPb0Fo7sS2CStPtowC7pjIpiKKXuSN4cHNSYVmA6WqwPZIW6jyI8XV zuihRJP/8jZsDolIVaIjA816J5egJh0W52D5aQn7EcGnkF0ZxlqZW8dPh1XpAFY3 PXy/9SFBLNj8k/nXO6zC7J67gh6J4sy/NpGxweq72R8Xpf7yqic4YtZSOko6Gi5u rhfo1d7YAPZVbdAvSCow8Cztjt6B3Is/hyRovPLAp/4jPE3KTOAoAyT6BXAc+hFY p734ejDojbowpp+FJ6/a2VTgRv/V5np6LrwcsbGPYvwOErB27dI3zIngYx1HcOt2 qkh0Y9ow6aDlcC6mKNNSACBupQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:34:32 2026 by rpki-client