$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json) Hash identifier: crU1vYmrkcOXLZCzVlysujn9jCCK984mmk9B+EgYwWc= Subject key identifier: 36:D7:96:69:8B:A1:7F:0C:78:8B:54:94:EE:1F:D1:DA:06:61:95:70 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft Manifest number: 075B Signing time: Tue 28 Jul 2026 22:26:11 +0000 Manifest this update: Tue 28 Jul 2026 22:26:10 +0000 Manifest next update: Tue 04 Aug 2026 22:26:10 +0000 Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: 1eReKlwbyG/uqKvPWq0KY69yGiFac6yu//LrvlMr2I0=) 2: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=) 3: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=) 4: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=) 5: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=) 6: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=) 7: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=) 8: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=) 9: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=) 10: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=) 11: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=) 12: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Jul 28 22:26:10 2026 GMT Not After : Aug 4 22:26:10 2026 GMT Subject: CN=6a692c83-a82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:2f:cc:f4:dc:58:ce:ef:96:ed:ea:43:85: 8c:2e:cb:9f:7b:2d:ed:0f:bb:55:97:2c:dc:2c:b5: db:63:07:f3:58:30:f7:22:5f:f4:45:24:72:2f:3d: 0d:ed:6a:8e:c2:9a:e7:1e:e3:4a:44:29:68:32:4f: 65:de:87:cc:8b:82:7f:63:f8:d3:42:f3:34:12:a0: 08:09:06:14:b0:2e:56:b4:b4:b6:a2:fb:23:ab:83: c9:aa:0d:9c:32:7b:fe:f3:4f:81:37:48:59:4d:ae: 00:d9:16:c8:32:9d:b6:de:e2:03:6c:73:8a:1f:90: c2:34:18:48:18:0f:7e:e3:8f:43:5a:67:41:28:05: 1c:1f:85:57:e7:89:6a:3d:04:df:2f:10:f9:23:0d: 08:f1:75:75:71:e9:13:7a:b4:72:9e:f6:8d:58:42: 0a:8a:ed:31:ab:07:ab:55:b4:1f:40:29:8d:c6:a5: 40:dc:bd:77:02:03:91:2c:86:9a:ec:50:35:f2:e5: f2:ce:91:f0:78:c8:be:16:e1:15:7f:2a:8f:62:0c: 8a:3c:03:cd:17:95:27:01:d9:ca:81:cb:e7:a1:b6: 07:88:f0:39:0a:c0:e8:f8:a0:4c:a4:a0:c2:43:87: 3c:c3:ce:82:d1:dd:0d:c8:34:e2:e7:50:af:3b:1a: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D7:96:69:8B:A1:7F:0C:78:8B:54:94:EE:1F:D1:DA:06:61:95:70 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ba:33:f6:04:75:f2:19:e1:57:09:f8:f6:62:f3:83:b7:2a: bb:9b:51:59:be:13:89:ff:8c:a4:f4:91:66:75:f4:33:54:bf: 09:e2:7e:41:a7:e8:4e:a4:b5:4c:aa:a3:ec:a5:a4:1c:74:fe: cc:2a:f9:ff:db:0a:16:94:43:d2:e9:90:50:4d:e3:db:60:e1: 2e:c6:cc:13:a2:b1:09:30:d2:b5:ea:89:e8:88:be:44:37:c7: e3:a1:17:1d:d5:5e:85:2d:5a:f9:7d:a6:aa:e2:e2:1b:e0:78: 37:a6:4a:ce:98:c4:74:a9:91:dc:ee:74:8f:9c:44:29:12:28: 89:56:4b:6e:6a:1a:d5:cf:c9:bb:4a:99:e4:72:ea:9c:b7:ea: 39:ff:8b:38:5f:1e:2c:73:95:a9:d8:34:97:95:ac:31:2a:27: 4c:d1:70:61:92:61:11:68:80:2b:43:02:67:1d:9e:b5:58:72: 5d:c8:07:03:04:7b:e0:a6:6b:55:41:3f:b7:4e:9c:7a:e1:46: 56:85:ed:4c:4a:82:50:1b:7c:1f:a6:de:2e:e2:e2:fb:07:b2: 4d:35:aa:e6:f8:58:82:1f:e9:c2:67:97:2f:d5:86:f1:94:1d: 96:cd:ae:25:57:6a:06:6f:48:21:04:c0:6a:72:b3:e4:84:62: b0:83:9f:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYwNzI4MjIyNjEwWhcNMjYwODA0MjIyNjEwWjAYMRYwFAYD VQQDEw02YTY5MmM4My1hODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj44vzPTcWM7vlu3qQ4WMLsufey3tD7tVlyzcLLXbYwfzWDD3Il/0RSRyLz0N 7WqOwprnHuNKRCloMk9l3ofMi4J/Y/jTQvM0EqAICQYUsC5WtLS2ovsjq4PJqg2c Mnv+80+BN0hZTa4A2RbIMp223uIDbHOKH5DCNBhIGA9+449DWmdBKAUcH4VX54lq PQTfLxD5Iw0I8XV1cekTerRynvaNWEIKiu0xqwerVbQfQCmNxqVA3L13AgORLIaa 7FA18uXyzpHweMi+FuEVfyqPYgyKPAPNF5UnAdnKgcvnobYHiPA5CsDo+KBMpKDC Q4c8w86C0d0NyDTi51CvOxrhCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbXlmmL oX8MeItUlO4f0doGYZVwMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3 Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIboz9gR18hnhVwn49mLzg7cqu5tRWb4Tif+MpPSRZnX0M1S/CeJ+QafoTqS1 TKqj7KWkHHT+zCr5/9sKFpRD0umQUE3j22DhLsbME6KxCTDSteqJ6Ii+RDfH46EX HdVehS1a+X2mquLiG+B4N6ZKzpjEdKmR3O50j5xEKRIoiVZLbmoa1c/Ju0qZ5HLq nLfqOf+LOF8eLHOVqdg0l5WsMSonTNFwYZJhEWiAK0MCZx2etVhyXcgHAwR74KZr VUE/t06ceuFGVoXtTEqCUBt8H6beLuLi+weyTTWq5vhYgh/pwmeXL9WG8ZQdls2u JVdqBm9IIQTAanKz5IRisIOf0g== -----END CERTIFICATE-----Generated at Wed Jul 29 07:36:46 2026 by rpki-client