$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: rQg2geg4l//pRJd/Evax+Kxdsv9KqepQlbTOHSxrCfg= Subject key identifier: D9:13:06:EE:04:F9:69:BA:3E:20:35:78:14:86:3B:DD:E3:3F:7D:B0 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 1391 Signing time: Tue 28 Jul 2026 17:03:29 +0000 Manifest this update: Tue 28 Jul 2026 17:03:29 +0000 Manifest next update: Tue 04 Aug 2026 17:03:29 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: 1xI6umoRfB/n4CAtP0qfyVnDRlzpNSwCzCKNRbuoN+U=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: Y5k6Nh1K8NNS0hPh5WTEjL7DqnEuLThuhCaWRqICeaE=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: k+p0xtu7l+Ym0EwSnutl9VlQ16P8ym/648o14VPC7t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5034 (0x13aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Jul 28 17:03:29 2026 GMT Not After : Aug 4 17:03:29 2026 GMT Subject: CN=6a68e0e1-4457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:61:c8:ec:47:65:49:41:75:59:fa:1b:04: 7a:92:43:5d:81:f0:80:8f:65:bb:d9:44:68:ab:ed: ae:23:e1:97:33:d6:38:92:23:58:a1:d5:5b:2a:9e: 13:cb:13:54:e9:a7:ca:b8:1b:96:64:4a:31:be:1f: 4a:41:0d:4e:0f:c3:dc:2c:8c:41:d4:2d:3c:d4:95: f2:ad:c5:e3:49:99:91:3f:c4:06:58:06:93:3e:35: ec:04:4b:f5:7d:fe:d1:28:14:6c:7e:7d:6c:a0:76: ed:2d:8a:63:67:b8:e9:7c:77:d0:3b:f9:e7:02:31: 49:c0:4c:ec:f3:00:31:c1:4a:d4:26:bd:aa:38:3c: b8:06:cb:81:ae:0c:68:ae:d8:e2:f7:31:ab:49:27: a0:a4:8f:12:c0:94:b0:1c:45:81:20:70:aa:16:c4: ed:20:f7:e6:49:41:e5:5b:41:01:7d:ad:0e:c7:f5: db:23:2e:d6:84:39:1a:fd:b0:eb:0e:90:cd:c0:03: c3:52:24:6b:52:d4:54:f9:6a:53:f1:1d:54:9d:a9: c2:f5:24:fb:b3:d9:3a:f2:bf:d3:00:f9:39:ea:bb: 5e:6f:10:a3:f9:6c:d4:8e:3e:90:08:04:ba:f4:5b: b3:6e:f3:8e:47:7f:b5:61:1b:00:08:35:18:a4:42: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:06:EE:04:F9:69:BA:3E:20:35:78:14:86:3B:DD:E3:3F:7D:B0 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c8:97:01:10:67:e4:19:0f:c7:d6:19:7c:0d:2d:9b:e4:b3: 0a:66:d1:25:a5:da:b1:ef:d6:c2:4b:e4:a9:35:20:2b:65:d0: 21:77:f9:44:15:d9:e6:41:ad:00:a0:f5:3a:ce:a4:51:0b:95: d4:a6:38:f0:e9:25:1d:aa:04:b8:e1:17:f9:c9:1a:51:33:eb: 59:24:f5:06:eb:da:20:a9:ca:10:bd:f9:06:30:f5:c7:0c:a0: a9:80:24:b6:83:83:fd:af:84:e3:d4:3d:ea:4e:08:c5:50:c3: fc:a3:fb:9c:3f:d9:e0:e7:2a:aa:4a:56:39:7c:08:b1:8c:e6: 4d:b3:58:fc:27:19:ec:21:db:98:f8:bc:33:a1:04:3c:82:35: e8:9f:17:07:45:ff:42:5b:a8:4a:98:b0:fe:a3:35:57:0c:12: 58:bd:1a:0d:65:bd:f4:df:c7:35:82:bb:a6:12:c3:15:92:aa: e6:56:11:86:de:d4:3f:ec:c8:3f:8f:3a:00:e5:66:6b:11:b1: ac:47:6d:41:55:87:a9:85:2c:d9:bb:18:e1:3e:6a:3b:52:32: 12:1d:5c:74:19:82:2f:a8:b4:30:91:8b:57:74:1d:e7:ae:52: 1b:8c:e9:c4:9e:30:20:19:fd:d2:0e:b0:76:98:ee:c2:cb:06: c0:76:7f:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYwNzI4MTcwMzI5WhcNMjYwODA0MTcwMzI5WjAYMRYwFAYD VQQDEw02YTY4ZTBlMS00NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPxhyOxHZUlBdVn6GwR6kkNdgfCAj2W72URoq+2uI+GXM9Y4kiNYodVbKp4T yxNU6afKuBuWZEoxvh9KQQ1OD8PcLIxB1C081JXyrcXjSZmRP8QGWAaTPjXsBEv1 ff7RKBRsfn1soHbtLYpjZ7jpfHfQO/nnAjFJwEzs8wAxwUrUJr2qODy4BsuBrgxo rtji9zGrSSegpI8SwJSwHEWBIHCqFsTtIPfmSUHlW0EBfa0Ox/XbIy7WhDka/bDr DpDNwAPDUiRrUtRU+WpT8R1UnanC9ST7s9k68r/TAPk56rtebxCj+WzUjj6QCAS6 9FuzbvOOR3+1YRsACDUYpEJQ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkTBu4E +Wm6PiA1eBSGO93jP32wMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYsiXARBn5BkPx9YZfA0tm+SzCmbRJaXase/WwkvkqTUgK2XQIXf5RBXZ5kGt AKD1Os6kUQuV1KY48OklHaoEuOEX+ckaUTPrWST1BuvaIKnKEL35BjD1xwygqYAk toOD/a+E49Q96k4IxVDD/KP7nD/Z4OcqqkpWOXwIsYzmTbNY/CcZ7CHbmPi8M6EE PII16J8XB0X/QluoSpiw/qM1VwwSWL0aDWW99N/HNYK7phLDFZKq5lYRht7UP+zI P486AOVmaxGxrEdtQVWHqYUs2bsY4T5qO1IyEh1cdBmCL6i0MJGLV3Qd565SG4zp xJ4wIBn90g6wdpjuwssGwHZ/EA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:45:13 2026 by rpki-client