$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: ftM5z8JqahalQaxcMT+/2QUyJjxghpofRW1inJiM4+8= Subject key identifier: A6:60:53:69:B7:15:3B:CB:8D:E5:E2:95:B3:35:06:5B:88:5E:4A:76 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 0585 Signing time: Thu 16 Jul 2026 23:49:01 +0000 Manifest this update: Thu 16 Jul 2026 23:49:00 +0000 Manifest next update: Thu 23 Jul 2026 23:49:00 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: cQM1u8l5oCYJ6T7LGVBz5+2IcAi/lg9ISCotGIeqV7Q=) 2: 5295B96E705F11F1BD79389570A30FBC.roa (hash: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=) 3: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=) 4: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 23:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Jul 16 23:49:00 2026 GMT Not After : Jul 23 23:49:00 2026 GMT Subject: CN=6a596dec-aae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:d2:78:1f:28:08:08:bb:e2:18:73:ab:81: 81:47:f1:5d:29:65:26:97:04:a3:c9:b3:7b:06:d9: 78:bb:60:cd:91:6a:23:d5:b8:7f:a1:b6:99:03:e0: dc:17:6d:3d:c3:45:24:95:b0:c9:01:df:df:7c:fe: 52:9d:bc:ff:63:0b:90:27:3c:55:e6:3a:37:57:b4: 1a:eb:5f:d7:73:b1:b0:e0:2b:fd:7e:9e:0c:ee:3d: 25:73:57:03:00:d8:19:e0:de:4a:c2:f8:38:27:2b: 0c:32:e4:d8:31:53:70:7b:5c:11:c9:f9:cd:f2:40: 86:04:e6:0b:b6:df:7a:c0:b2:1f:cb:3b:3d:f5:fc: ed:6c:bd:83:2e:d4:d6:c0:47:9a:16:b2:55:64:ed: e7:a1:f5:4e:b3:0f:4e:c6:d8:3a:8d:0b:43:2e:68: ca:54:68:53:6c:83:35:fa:d3:07:2a:f1:fc:99:f9: ee:6f:d3:cf:17:5b:0e:95:d1:04:1e:03:0d:70:13: 42:b5:71:22:af:cf:ce:e5:fa:56:13:65:79:df:2b: 6c:34:00:2b:31:f5:ce:23:f9:90:14:a3:ec:ec:02: 7b:23:69:0a:92:46:fd:5d:c4:6a:37:ea:03:82:ac: cf:26:50:bf:55:b1:fe:f6:42:10:cb:12:47:23:1d: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:53:69:B7:15:3B:CB:8D:E5:E2:95:B3:35:06:5B:88:5E:4A:76 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:54:9e:a5:b7:10:2c:c2:48:24:a0:d8:88:87:90:87:09:75: 59:1a:2b:03:c1:f7:21:90:91:20:f2:07:2b:9c:d6:d8:02:7e: 00:5e:59:6b:40:a2:88:b1:ce:17:fa:28:8c:4b:97:7a:54:2c: da:44:e3:7a:ca:72:01:c4:59:0f:54:f6:79:a6:78:94:5c:73: 9b:b9:ca:db:61:2a:d4:c8:df:ac:64:ca:a0:fc:0c:22:b6:83: 04:be:f5:4d:7d:18:8a:25:3d:43:e8:02:9c:04:32:33:d1:df: db:b5:b5:26:3d:4d:92:0b:cb:11:27:f9:79:64:14:21:98:ea: 50:f4:f1:16:b9:5b:12:c8:f8:82:25:34:3d:82:94:68:de:b3: 27:2b:66:2f:f2:ed:f8:55:f3:ab:58:ba:49:2a:60:ff:c7:dd: 55:5a:9f:90:25:cd:3e:b8:ab:e0:57:1c:eb:25:03:38:8a:f8: ad:7b:c5:33:54:83:1c:41:aa:93:60:62:60:66:00:b6:4e:c5: 0d:ea:d8:e5:1f:96:46:33:8d:7e:80:76:db:ff:69:1a:c9:c0: c7:71:60:33:11:e9:0e:f4:be:ef:d7:07:86:7c:41:aa:b2:a1: 01:cc:38:1d:91:02:68:5a:4c:8b:bf:6e:a1:4e:a4:5d:2d:69: 89:11:b8:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjYwNzE2MjM0OTAwWhcNMjYwNzIzMjM0OTAwWjAYMRYwFAYD VQQDEw02YTU5NmRlYy1hYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkGnSeB8oCAi74hhzq4GBR/FdKWUmlwSjybN7Btl4u2DNkWoj1bh/obaZA+Dc F209w0UklbDJAd/ffP5Snbz/YwuQJzxV5jo3V7Qa61/Xc7Gw4Cv9fp4M7j0lc1cD ANgZ4N5Kwvg4JysMMuTYMVNwe1wRyfnN8kCGBOYLtt96wLIfyzs99fztbL2DLtTW wEeaFrJVZO3nofVOsw9Oxtg6jQtDLmjKVGhTbIM1+tMHKvH8mfnub9PPF1sOldEE HgMNcBNCtXEir8/O5fpWE2V53ytsNAArMfXOI/mQFKPs7AJ7I2kKkkb9XcRqN+oD gqzPJlC/VbH+9kIQyxJHIx1b1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZgU2m3 FTvLjeXilbM1BluIXkp2MB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFSepbcQLMJIJKDYiIeQhwl1WRorA8H3IZCRIPIHK5zW2AJ+AF5Za0CiiLHO F/oojEuXelQs2kTjespyAcRZD1T2eaZ4lFxzm7nK22Eq1MjfrGTKoPwMIraDBL71 TX0YiiU9Q+gCnAQyM9Hf27W1Jj1NkgvLESf5eWQUIZjqUPTxFrlbEsj4giU0PYKU aN6zJytmL/Lt+FXzq1i6SSpg/8fdVVqfkCXNPrir4Fcc6yUDOIr4rXvFM1SDHEGq k2BiYGYAtk7FDerY5R+WRjONfoB22/9pGsnAx3FgMxHpDvS+79cHhnxBqrKhAcw4 HZECaFpMi79uoU6kXS1piRG4dA== -----END CERTIFICATE-----Generated at Sat Jul 18 07:16:43 2026 by rpki-client