$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: L68qT52n7HTZkq2lOCTLf/fC0h2q+WGyyjjJD1/gSmM= Subject key identifier: CB:A9:1D:68:CE:60:32:4B:1E:EF:7F:B9:0E:7D:29:D7:E6:70:20:3C Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 022F Signing time: Mon 27 Jul 2026 04:14:00 +0000 Manifest this update: Mon 27 Jul 2026 04:13:59 +0000 Manifest next update: Mon 03 Aug 2026 04:13:59 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: d4SaPSDx+UcJdrsG74M+uznlXWvh0w97Av33WPVe6Cs=) 2: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) 3: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 4: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Jul 27 04:13:59 2026 GMT Not After : Aug 3 04:13:59 2026 GMT Subject: CN=6a66db08-488a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:2a:a1:30:ad:6b:56:63:3c:49:26:a2:52: cd:f7:50:fe:46:ba:1c:09:92:6b:57:72:86:af:e1: fd:15:1e:36:14:a3:c0:88:0c:f7:e5:be:6b:44:85: 1f:82:5d:70:df:0e:23:c1:d3:71:4c:63:e0:26:8c: e2:ab:44:00:5f:89:14:82:9f:ab:75:19:01:f0:9e: 68:43:87:f0:a8:bf:ac:ba:7a:48:8d:ce:eb:ed:02: de:23:b4:2f:ef:74:c5:8d:10:ff:a0:ed:f2:6a:f7: 2d:23:85:b0:38:d6:ea:f8:5f:f1:4c:8a:02:ba:84: 95:12:ef:3d:f3:8c:38:b7:d8:9f:1a:d2:2f:2b:bb: df:05:29:1a:ab:6a:9a:57:da:af:77:ce:7f:e4:00: 67:f4:71:96:66:dc:0f:0c:3a:26:e5:73:3b:ff:34: 74:a2:42:5b:04:9a:5e:76:e7:50:2a:47:5a:f8:2d: 5b:35:ee:3c:4f:0b:21:aa:4e:70:8b:8e:d4:6e:f8: a2:50:51:0c:a9:1f:60:bf:d8:51:58:d3:fc:7f:ca: b0:d8:73:ae:00:25:83:98:29:5e:a3:09:13:a4:30: 85:c5:a3:7f:04:ad:af:97:83:ac:cf:66:ef:46:3a: a6:6b:f2:34:07:09:ac:65:98:a3:2a:ec:5d:88:01: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A9:1D:68:CE:60:32:4B:1E:EF:7F:B9:0E:7D:29:D7:E6:70:20:3C X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:75:10:16:2f:69:21:fa:c0:70:19:ed:88:92:05:94:f9:bb: ba:4f:38:e2:f6:49:81:82:54:78:91:40:58:15:e3:d6:1e:38: 0d:7f:17:f7:53:9d:ba:3f:13:75:78:ba:87:bf:53:01:fa:2d: f0:aa:9c:5a:5b:fe:b8:58:9e:68:ee:60:8a:a3:fb:de:cd:5b: f1:06:0c:a2:27:3a:95:cf:79:6b:5d:9f:f4:aa:dc:6e:25:57: 6b:f4:fd:c6:f3:40:3c:8d:1f:d1:67:87:8f:5a:5a:01:11:4a: 70:56:41:49:03:61:6a:6b:e6:2d:77:3f:33:4d:4c:40:4d:dd: 03:7a:e3:70:e1:43:3f:36:56:af:19:75:f9:a0:28:ac:98:5f: 22:b0:98:47:8e:14:75:33:e4:5d:4f:5b:a5:d6:b1:05:97:c3: d6:ac:8f:19:0b:60:66:32:bf:87:21:09:45:24:10:59:71:98: 3e:f3:b1:78:87:67:a9:39:06:e9:8e:cc:18:2b:06:30:7b:9a: 78:5c:7d:90:c5:9f:d7:5a:ed:4c:5d:b8:8b:17:10:a7:75:88: da:7f:9d:ac:b9:53:b1:0d:1e:87:d8:3e:0f:db:0a:b6:37:45: 32:e7:ba:2f:b4:ba:80:f5:d3:a6:f4:cf:55:ec:77:5a:9d:75: f5:f0:1a:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwNzI3MDQxMzU5WhcNMjYwODAzMDQxMzU5WjAYMRYwFAYD VQQDEw02YTY2ZGIwOC00ODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnf4qoTCta1ZjPEkmolLN91D+RrocCZJrV3KGr+H9FR42FKPAiAz35b5rRIUf gl1w3w4jwdNxTGPgJoziq0QAX4kUgp+rdRkB8J5oQ4fwqL+sunpIjc7r7QLeI7Qv 73TFjRD/oO3yavctI4WwONbq+F/xTIoCuoSVEu8984w4t9ifGtIvK7vfBSkaq2qa V9qvd85/5ABn9HGWZtwPDDom5XM7/zR0okJbBJpedudQKkda+C1bNe48Twshqk5w i47UbviiUFEMqR9gv9hRWNP8f8qw2HOuACWDmCleowkTpDCFxaN/BK2vl4Osz2bv Rjqma/I0BwmsZZijKuxdiAHs5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMupHWjO YDJLHu9/uQ59KdfmcCA8MB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ3UQFi9pIfrAcBntiJIFlPm7uk844vZJgYJUeJFAWBXj1h44DX8X91Oduj8T dXi6h79TAfot8KqcWlv+uFieaO5giqP73s1b8QYMoic6lc95a12f9KrcbiVXa/T9 xvNAPI0f0WeHj1paARFKcFZBSQNhamvmLXc/M01MQE3dA3rjcOFDPzZWrxl1+aAo rJhfIrCYR44UdTPkXU9bpdaxBZfD1qyPGQtgZjK/hyEJRSQQWXGYPvOxeIdnqTkG 6Y7MGCsGMHuaeFx9kMWf11rtTF24ixcQp3WI2n+drLlTsQ0eh9g+D9sKtjdFMue6 L7S6gPXTpvTPVex3Wp119fAapw== -----END CERTIFICATE-----Generated at Mon Jul 27 14:23:29 2026 by rpki-client