$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: XA1Ni11SCbz0snTeZRTWvT7/FBfyAsn6C/euo9Tpn0g= Subject key identifier: D6:2C:79:B4:58:16:2D:64:DF:4A:3C:D9:93:1C:C4:42:5C:38:EF:E1 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0422 Signing time: Wed 05 Aug 2026 01:00:58 +0000 Manifest this update: Wed 05 Aug 2026 01:00:58 +0000 Manifest next update: Wed 12 Aug 2026 01:00:58 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: CQ+J7+L0NjpDW8FHDN5pi5o3w6E5rwSOtVFQt+PyyiI=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=) 3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=) 4: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=) 5: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Aug 5 01:00:58 2026 GMT Not After : Aug 12 01:00:58 2026 GMT Subject: CN=6a728b4a-f0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:0e:5b:d1:d7:19:c4:f5:20:68:7f:2b:73: 38:33:20:87:ac:b0:13:56:99:79:57:cb:17:2f:22: ef:03:99:e1:dd:06:2e:07:e2:2f:ad:f6:29:ae:bc: 78:6f:a5:be:a0:da:07:56:48:4f:b2:4b:38:9e:da: fc:91:98:b4:ea:6d:c5:99:be:b7:3b:6b:1e:f7:e5: cb:22:c0:2d:ff:a9:53:d7:54:3f:6b:d3:c7:cf:9f: cb:d1:2f:05:d2:b6:f2:c9:f1:18:a6:82:20:1a:b7: 62:7b:03:0b:85:02:70:25:d0:37:30:de:9c:24:fa: 0b:f4:94:39:7c:6f:07:0b:ae:79:c8:43:bb:bf:f1: 54:b5:dc:d5:92:16:fd:a9:5d:a9:b4:ac:26:9b:a5: 38:d9:c3:3b:5b:e0:7e:b4:5f:b2:fe:a5:89:39:c6: dd:c8:a6:7c:99:e9:1b:59:f7:e6:fc:49:29:91:9e: 9d:b0:7d:d8:7a:cb:bb:d4:cb:10:5f:a2:f2:28:90: f3:66:f5:e7:27:67:1a:64:27:b3:84:00:49:c4:ce: 4d:b1:24:29:af:8d:5b:37:86:62:5a:35:66:de:2f: 97:c1:51:fc:ca:e5:04:37:1c:48:86:bb:d7:58:78: 2b:6c:7d:88:3b:9e:4f:9c:4e:dc:8a:d1:1e:58:fd: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2C:79:B4:58:16:2D:64:DF:4A:3C:D9:93:1C:C4:42:5C:38:EF:E1 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:55:55:0c:27:87:44:be:8e:96:a6:b4:c5:09:ad:01:1b:93: fb:f1:53:9a:4a:25:83:b0:2c:d3:05:4e:02:b7:a8:f7:1d:6d: c4:d8:0f:dd:8f:7a:81:e0:a8:54:a2:1c:8a:04:15:63:2a:6a: 2c:b0:99:90:0a:ec:06:1a:cc:9b:56:50:89:fc:2b:77:d3:e6: 1c:f1:88:08:99:a7:f1:2e:0e:b1:67:00:a0:51:b4:b6:c5:31: 0b:df:9c:32:69:99:c9:10:7a:c1:16:87:a1:bc:7b:89:72:4c: ee:32:14:ff:17:10:ab:d0:4a:31:70:6f:23:4a:33:d0:0e:8a: 9c:07:ff:93:7a:0a:75:cc:f4:f4:95:45:e3:d2:f1:17:d7:2f: 9b:7c:d2:bb:bc:13:fe:eb:ae:1a:dd:25:0d:8c:5d:c3:35:e3: 27:d0:7e:61:1b:56:6b:12:75:80:ef:98:9c:3a:02:6d:08:83: f4:a4:db:2a:8b:07:73:67:44:6b:0b:f7:cb:14:9f:0e:2b:bf: 39:af:00:01:eb:58:de:30:04:76:b6:4a:b8:f2:d4:2a:8b:6f: ff:c8:cc:9f:30:81:47:b8:cc:0a:f9:27:93:b2:2d:4b:b9:e3: df:a5:94:bc:7f:f6:e6:8c:7d:bc:85:cb:43:7a:1c:a4:29:31: 5e:f2:0d:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjYwODA1MDEwMDU4WhcNMjYwODEyMDEwMDU4WjAYMRYwFAYD VQQDEw02YTcyOGI0YS1mMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfwOW9HXGcT1IGh/K3M4MyCHrLATVpl5V8sXLyLvA5nh3QYuB+IvrfYprrx4 b6W+oNoHVkhPsks4ntr8kZi06m3Fmb63O2se9+XLIsAt/6lT11Q/a9PHz5/L0S8F 0rbyyfEYpoIgGrdiewMLhQJwJdA3MN6cJPoL9JQ5fG8HC655yEO7v/FUtdzVkhb9 qV2ptKwmm6U42cM7W+B+tF+y/qWJOcbdyKZ8mekbWffm/EkpkZ6dsH3Yesu71MsQ X6LyKJDzZvXnJ2caZCezhABJxM5NsSQpr41bN4ZiWjVm3i+XwVH8yuUENxxIhrvX WHgrbH2IO55PnE7citEeWP2t8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYsebRY Fi1k30o82ZMcxEJcOO/hMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAVVVDCeHRL6Olqa0xQmtARuT+/FTmkolg7As0wVOAreo9x1txNgP3Y96geCo VKIcigQVYypqLLCZkArsBhrMm1ZQifwrd9PmHPGICJmn8S4OsWcAoFG0tsUxC9+c MmmZyRB6wRaHobx7iXJM7jIU/xcQq9BKMXBvI0oz0A6KnAf/k3oKdcz09JVF49Lx F9cvm3zSu7wT/uuuGt0lDYxdwzXjJ9B+YRtWaxJ1gO+YnDoCbQiD9KTbKosHc2dE awv3yxSfDiu/Oa8AAetY3jAEdrZKuPLUKotv/8jMnzCBR7jMCvknk7ItS7nj36WU vH/25ox9vIXLQ3ocpCkxXvINOg== -----END CERTIFICATE-----Generated at Wed Aug 5 22:35:37 2026 by rpki-client