$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: MQhZSJNCf5e1gfHQmh48yM3/ScVWfNqdQlBKZ1RVyQE= Subject key identifier: 4C:CD:DB:6B:66:B7:69:A6:6E:FE:71:6A:76:B0:86:F7:F3:28:C3:F9 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0960 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0903 Signing time: Sun 26 Jul 2026 21:00:49 +0000 Manifest this update: Sun 26 Jul 2026 21:00:48 +0000 Manifest next update: Sun 02 Aug 2026 21:00:48 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: RkmxkmL+FQjgjQe8i6kQk8he5rUAkTMRdLesWu+JLho=) 2: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=) 3: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=) 4: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=) 5: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=) 6: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=) 7: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=) 8: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2400 (0x960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Jul 26 21:00:48 2026 GMT Not After : Aug 2 21:00:48 2026 GMT Subject: CN=6a667581-dbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:f7:c6:98:23:54:e9:2b:41:5d:a3:14:46: 04:19:fe:36:e0:8f:7b:c2:d0:c0:fa:99:06:81:56: c6:e5:f9:36:00:61:32:31:12:4b:aa:08:88:a3:87: f0:7b:2c:e8:51:80:c6:9e:32:3c:87:02:a1:88:ce: fe:00:e9:5b:2c:79:46:23:1c:fd:1f:5d:cb:f6:08: 47:12:13:e4:3f:ef:fa:c6:cb:63:bd:6c:1c:06:30: fe:8d:72:aa:29:74:7f:c5:12:70:67:59:36:94:31: 29:a9:be:a6:19:ae:9f:6d:a9:26:1c:db:43:0a:11: 05:f1:7b:7f:ae:cd:dd:cb:08:58:e3:c8:a6:1a:e9: 97:30:2d:ff:0d:9b:14:22:73:c1:63:08:bf:2e:b6: 2e:ba:0c:70:cd:f2:65:83:99:2e:ac:d6:66:d3:55: f3:04:2d:ce:60:73:7e:f9:80:55:7a:5b:ae:fc:22: b5:71:21:ae:40:7f:ee:52:9b:a1:77:fb:ff:f4:2c: 54:20:50:61:62:d9:34:07:34:62:92:86:68:f8:e3: c9:35:fc:39:41:1f:b6:0d:11:e9:d0:a8:c9:c7:a3: a9:d1:73:75:d9:9c:5e:73:c9:86:c4:93:52:02:e9: 0d:80:81:44:be:8e:59:0b:f3:c7:dc:26:9e:b5:99: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CD:DB:6B:66:B7:69:A6:6E:FE:71:6A:76:B0:86:F7:F3:28:C3:F9 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6c:1e:15:e2:5a:e6:26:2d:cd:ec:da:79:c2:87:34:d3:d8: e8:b1:ea:32:20:05:5e:45:4b:76:08:3c:dd:47:d1:e7:38:cc: e1:50:3b:54:72:cd:b6:3b:51:7e:06:c4:4c:43:4a:39:59:c3: 8f:23:ff:79:de:ab:f6:5c:6a:0a:6e:44:58:ce:ea:68:a7:63: 6c:57:28:7f:a4:76:6e:17:0f:6d:56:98:60:8c:9a:8a:97:dc: 44:fe:16:d9:da:13:b2:ca:aa:5b:84:ea:19:49:b8:7a:b4:78: dc:68:9b:95:9a:8a:15:54:10:d0:0f:2d:fb:38:b3:b0:c9:de: 6b:18:ca:fd:1c:a9:0e:81:ae:c7:4f:63:03:8a:a8:f3:3d:88: 9c:20:87:e5:0c:0e:ec:fa:00:e9:19:26:4e:98:65:ec:ba:18: fc:ea:b8:75:a0:af:6e:f7:53:87:4a:cb:17:05:29:9e:e5:db: 0a:fe:0b:70:f2:bc:08:7f:21:19:0a:2c:d2:ce:c8:87:31:d9: bc:21:bc:50:b2:3d:24:eb:1f:44:36:cf:fd:0f:9b:fb:74:ef: 00:8c:f2:74:0c:2a:b3:ed:9f:bc:51:8c:85:e1:31:d3:89:4f: b9:78:8a:30:de:83:b7:bc:70:f4:26:f9:ce:9a:8a:45:c0:39: 1b:f3:8f:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwNzI2MjEwMDQ4WhcNMjYwODAyMjEwMDQ4WjAYMRYwFAYD VQQDEw02YTY2NzU4MS1kYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlL33xpgjVOkrQV2jFEYEGf424I97wtDA+pkGgVbG5fk2AGEyMRJLqgiIo4fw eyzoUYDGnjI8hwKhiM7+AOlbLHlGIxz9H13L9ghHEhPkP+/6xstjvWwcBjD+jXKq KXR/xRJwZ1k2lDEpqb6mGa6fbakmHNtDChEF8Xt/rs3dywhY48imGumXMC3/DZsU InPBYwi/LrYuugxwzfJlg5kurNZm01XzBC3OYHN++YBVeluu/CK1cSGuQH/uUpuh d/v/9CxUIFBhYtk0BzRikoZo+OPJNfw5QR+2DRHp0KjJx6Op0XN12Zxec8mGxJNS AukNgIFEvo5ZC/PH3CaetZmT/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzN22tm t2mmbv5xanawhvfzKMP5MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsmweFeJa5iYtzezaecKHNNPY6LHqMiAFXkVLdgg83UfR5zjM4VA7VHLNtjtR fgbETENKOVnDjyP/ed6r9lxqCm5EWM7qaKdjbFcof6R2bhcPbVaYYIyaipfcRP4W 2doTssqqW4TqGUm4erR43GiblZqKFVQQ0A8t+zizsMneaxjK/RypDoGux09jA4qo 8z2InCCH5QwO7PoA6RkmTphl7LoY/Oq4daCvbvdTh0rLFwUpnuXbCv4LcPK8CH8h GQos0s7IhzHZvCG8ULI9JOsfRDbP/Q+b+3TvAIzydAwqs+2fvFGMheEx04lPuXiK MN6Dt7xw9Cb5zpqKRcA5G/OPVQ== -----END CERTIFICATE-----Generated at Mon Jul 27 15:11:23 2026 by rpki-client