$ rpki-client -vvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft File: -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json) Hash identifier: RWyWo9swCCEWHyMxfWB6OFxRTSrnWhlE5ipAtIds8XQ= Subject key identifier: 0E:61:B9:06:D2:24:E0:E4:A8:7C:1D:D8:CB:F0:A5:54:9C:A7:AE:3C Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft Manifest number: 0421 Signing time: Mon 27 Jul 2026 01:23:02 +0000 Manifest this update: Mon 27 Jul 2026 01:23:01 +0000 Manifest next update: Mon 03 Aug 2026 01:23:01 +0000 Files and hashes: 1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: Ga/tWw0ht88C5ZtzHAjkELP7s9IMUWFE/AXYoZ8rdzI=) 2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: 67LlS2Q1Ll84dJ+nyUpzM3AprVCuS78sQpZWBwZl53s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914711C, serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Validity Not Before: Jul 27 01:23:01 2026 GMT Not After : Aug 3 01:23:01 2026 GMT Subject: CN=6a66b2f6-089e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:10:88:c5:bc:e2:59:f7:d1:11:6b:34:be: 7b:4e:f0:c8:a9:45:e6:69:2d:52:74:07:4a:e3:2f: 7e:15:42:5e:4c:81:f5:7c:1f:e9:20:cd:d0:4c:ba: bb:5d:13:d8:54:e6:5a:fb:35:b8:a9:82:a9:4e:e7: d9:3a:c5:ed:ae:c2:17:eb:0d:b3:bc:77:4e:13:f6: ca:22:a6:50:12:0a:02:bb:a6:fa:79:9e:b5:9c:b5: 30:94:3b:50:87:db:03:49:2c:d5:f5:2a:37:15:a1: ec:59:b2:b6:dc:b9:29:39:e7:4b:7d:99:f6:14:60: b5:d6:63:e0:08:7a:bd:83:d8:07:23:97:7e:1e:a9: 8b:7f:b2:7f:e0:38:a3:77:76:c5:ce:e0:df:88:a0: bf:df:d4:03:2a:90:31:34:9c:da:24:af:f5:0b:7f: 96:e3:30:4e:7e:eb:b6:f8:76:d3:bb:da:2c:56:c9: a3:8f:5f:05:70:1b:26:8e:30:6f:1b:1f:a9:ee:da: dd:84:92:5c:5e:8f:23:d6:20:ff:50:fd:88:13:87: 52:c0:fb:c1:c8:35:04:b3:f2:f1:68:71:5e:d8:62: 99:a7:81:61:84:99:7f:84:bd:3c:7f:af:47:6b:ad: 4f:da:ae:9e:8e:92:0e:9e:e6:7c:6b:37:43:fe:9b: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:61:B9:06:D2:24:E0:E4:A8:7C:1D:D8:CB:F0:A5:54:9C:A7:AE:3C X509v3 Authority Key Identifier: keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:09:9f:b5:b6:e1:40:d1:c0:bf:01:32:ef:6e:d5:b5:7a: c3:8d:5b:2c:4c:a7:9c:4f:ef:9c:80:87:78:86:2c:db:0f:71: 10:33:9d:e7:c2:45:74:a0:0f:08:94:8e:c1:a0:97:71:79:3d: 02:f5:e6:81:87:70:53:b9:a1:2e:ae:aa:57:ff:13:0c:7c:44: 65:4f:30:cd:c1:b8:1d:df:52:f9:29:b7:c7:31:38:d1:b2:f4: b1:68:44:fd:6c:dc:1c:84:b9:bb:dd:f1:2f:29:d7:6a:67:8d: 50:e4:c9:15:b7:da:55:20:33:46:3c:a8:73:f5:9b:39:c8:7f: e3:18:98:fa:3c:d4:d4:50:10:58:6f:84:87:06:50:71:b4:b0: 9d:a0:19:04:7c:20:3b:c9:d7:26:59:6b:70:20:76:69:8a:a1: ab:2d:bb:1f:e2:76:d9:28:87:87:73:cb:f1:ef:29:eb:e8:f0: ac:a7:21:d2:89:98:38:b8:e5:a3:cc:5f:e5:d0:cb:69:0f:a9: bd:d0:b5:cd:3e:cb:e4:64:f1:1c:f0:4d:5b:c7:b9:90:5d:15: 25:9e:fe:8b:49:2d:46:03:7d:b9:da:de:cb:2c:9e:95:26:4a: 8e:1e:ac:4d:28:45:27:6f:be:a8:15:4e:80:01:27:f2:62:c5: 29:61:3d:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxMUMxMTAvBgNVBAUTKEZBMjZGMzRBODMzOUIxREYzNkRDOUMxMTkxMjA1N0Mz QTU4M0Y2NzMwHhcNMjYwNzI3MDEyMzAxWhcNMjYwODAzMDEyMzAxWjAYMRYwFAYD VQQDEw02YTY2YjJmNi0wODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw4QiMW84ln30RFrNL57TvDIqUXmaS1SdAdK4y9+FUJeTIH1fB/pIM3QTLq7 XRPYVOZa+zW4qYKpTufZOsXtrsIX6w2zvHdOE/bKIqZQEgoCu6b6eZ61nLUwlDtQ h9sDSSzV9So3FaHsWbK23LkpOedLfZn2FGC11mPgCHq9g9gHI5d+HqmLf7J/4Dij d3bFzuDfiKC/39QDKpAxNJzaJK/1C3+W4zBOfuu2+HbTu9osVsmjj18FcBsmjjBv Gx+p7trdhJJcXo8j1iD/UP2IE4dSwPvByDUEs/LxaHFe2GKZp4FhhJl/hL08f69H a61P2q6ejpIOnuZ8azdD/pvS1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5huQbS JODkqHwd2MvwpVScp648MB8GA1UdIwQYMBaAFPom80qDObHfNtycEZEgV8Olg/Zz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzExQy9BOEFDNzI1MEJC QTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNkODIzSndSa1NCWHc2V0Q5 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1pYnpTb001c2Q4MjNKd1JrU0JYdzZXRDluTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzExQy9BOEFDNzI1MEJCQTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNk ODIzSndSa1NCWHc2V0Q5bk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgJYJn7W24UDRwL8BMu9u1bV6w41bLEynnE/vnICHeIYs2w9xEDOd58JFdKAP CJSOwaCXcXk9AvXmgYdwU7mhLq6qV/8TDHxEZU8wzcG4Hd9S+Sm3xzE40bL0sWhE /WzcHIS5u93xLynXameNUOTJFbfaVSAzRjyoc/WbOch/4xiY+jzU1FAQWG+EhwZQ cbSwnaAZBHwgO8nXJllrcCB2aYqhqy27H+J22SiHh3PL8e8p6+jwrKch0omYOLjl o8xf5dDLaQ+pvdC1zT7L5GTxHPBNW8e5kF0VJZ7+i0ktRgN9udreyyyelSZKjh6s TShFJ2++qBVOgAEn8mLFKWE9VA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:54:16 2026 by rpki-client