$ rpki-client -vvf rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft File: IlQptnO9Vfmh-WM1JYIlrig2FP4.mft (raw, json) Hash identifier: dWSGEjFCDPvm99umH5Ezxbw18UGKi+nqpCFWQ7EDCtk= Subject key identifier: 42:F0:51:A4:21:D2:A4:94:5C:A1:0F:1E:63:BC:86:08:3E:DB:DA:B3 Authority key identifier: 22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE Certificate issuer: /CN=A914C9DC/serialNumber=225429B673BD55F9A1F96335258225AE283614FE Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft Manifest number: 04 Signing time: Mon 27 Jul 2026 11:39:19 +0000 Manifest this update: Mon 27 Jul 2026 11:39:19 +0000 Manifest next update: Mon 03 Aug 2026 11:39:19 +0000 Files and hashes: 1: IlQptnO9Vfmh-WM1JYIlrig2FP4.crl (hash: K44ICJAg7VY4wU+izeGBChLtx6zSzrfyqFcOSfOMYFY=) 2: 08F83F5486B011F190BA97A774A30FBC.roa (hash: 5ZwP0uuzMGdPfnCK53ANk2dVgUQ0cGc0yUoY7rusTi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C9DC, serialNumber=225429B673BD55F9A1F96335258225AE283614FE Validity Not Before: Jul 27 11:39:19 2026 GMT Not After : Aug 3 11:39:19 2026 GMT Subject: CN=6a674367-7d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:43:02:83:72:4e:63:4b:05:00:b9:7e:cf: ce:29:6c:04:aa:37:5f:58:38:3d:b0:7e:14:ca:84: 45:57:a9:77:4f:bb:9d:5d:b7:38:8e:02:6d:73:7b: 17:96:19:e0:0f:19:30:d6:6c:95:21:20:b4:de:fd: 28:71:a1:f7:d3:95:e3:2d:87:8a:28:84:bd:51:1b: d9:64:af:ae:a0:1b:5e:05:88:c8:d0:f9:68:5e:b5: 32:28:f5:e4:46:1f:9f:84:67:25:91:2f:e8:2d:f0: a9:7d:4c:30:de:2d:56:c3:b7:94:cc:01:98:f0:02: 95:94:f0:f2:5e:55:0d:f6:a0:19:49:19:4d:c6:1b: 9d:48:70:f2:41:6a:f2:46:ec:ce:49:e0:59:8e:1a: f6:de:c2:da:17:d9:96:39:67:2f:51:60:86:f7:13: 0c:d0:0b:42:96:f9:ad:16:e6:75:07:bd:03:43:f3: f0:16:36:81:f8:17:dd:b9:e1:4f:3e:7a:ca:49:44: ed:92:1c:6f:ba:cd:9d:50:07:a9:58:11:11:6f:39: 8a:d3:d5:a9:bb:ae:db:b5:8e:f9:2a:ed:10:49:f6: a8:c4:19:63:33:b8:00:8b:2f:42:16:29:7d:d9:a6: 57:a9:a4:11:54:10:06:3c:32:88:df:ac:c8:fa:3c: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F0:51:A4:21:D2:A4:94:5C:A1:0F:1E:63:BC:86:08:3E:DB:DA:B3 X509v3 Authority Key Identifier: keyid:22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:44:33:35:dd:3d:a8:92:dd:58:35:c2:8b:0d:f9:57:85:31: ca:c8:52:55:b8:82:7a:0e:ea:93:78:18:c6:48:df:24:7d:44: 93:b1:e9:65:09:65:ba:0d:24:76:84:40:5a:63:45:e6:a0:62: e9:3a:23:69:9d:d5:8a:f2:37:27:b9:09:fd:a3:0f:27:93:44: 7b:41:3f:7e:d8:49:92:0d:59:4e:2f:32:9f:68:91:d7:0d:81: a2:2f:37:03:42:43:52:89:5f:a6:ed:83:d6:f9:e5:54:17:bf: 5b:80:21:54:df:d0:53:e9:d6:80:05:23:06:ab:27:06:50:1d: 74:9e:d3:dd:91:9b:8b:4a:db:ae:95:04:ea:8c:7e:1a:a0:b6: ce:8a:b8:9a:6c:b9:39:c8:4b:75:14:d5:3c:65:13:7c:ed:3d: d0:cf:a3:12:17:e7:12:76:01:a2:ef:d2:eb:9a:8b:a5:a8:d7: 5d:63:43:12:a1:de:ef:25:94:e4:c1:2f:99:6f:60:1d:e3:2f: a5:ef:5b:4d:19:1f:57:c8:c1:4a:fb:08:72:88:24:92:da:23: f3:58:70:71:35:d4:34:09:fb:04:1f:4a:71:a7:32:12:b8:1f: 2b:9a:e9:18:b9:45:a5:db:d6:43:27:52:04:d8:27:ab:47:a2: f7:43:82:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzlEQzExMC8GA1UEBRMoMjI1NDI5QjY3M0JENTVGOUExRjk2MzM1MjU4MjI1QUUy ODM2MTRGRTAeFw0yNjA3MjcxMTM5MTlaFw0yNjA4MDMxMTM5MTlaMBgxFjAUBgNV BAMTDTZhNjc0MzY3LTdkNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9/EMCg3JOY0sFALl+z84pbASqN19YOD2wfhTKhEVXqXdPu51dtziOAm1zexeW GeAPGTDWbJUhILTe/ShxoffTleMth4oohL1RG9lkr66gG14FiMjQ+WhetTIo9eRG H5+EZyWRL+gt8Kl9TDDeLVbDt5TMAZjwApWU8PJeVQ32oBlJGU3GG51IcPJBavJG 7M5J4FmOGvbewtoX2ZY5Zy9RYIb3EwzQC0KW+a0W5nUHvQND8/AWNoH4F9254U8+ espJRO2SHG+6zZ1QB6lYERFvOYrT1am7rtu1jvkq7RBJ9qjEGWMzuACLL0IWKX3Z pleppBFUEAY8MojfrMj6PB3JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQvBRpCHS pJRcoQ8eY7yGCD7b2rMwHwYDVR0jBBgwFoAUIlQptnO9Vfmh+WM1JYIlrig2FP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOURDL0JERTRCMUQyODZB RjExRjE5QjI3QzQyQjc0QTMwRkJDL0lsUXB0bk85VmZtaC1XTTFKWUlscmlnMkZQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWxRcHRuTzlWZm1oLVdNMUpZSWxyaWcyRlA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD OURDL0JERTRCMUQyODZBRjExRjE5QjI3QzQyQjc0QTMwRkJDL0lsUXB0bk85VmZt aC1XTTFKWUlscmlnMkZQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQClRDM13T2okt1YNcKLDflXhTHKyFJVuIJ6DuqTeBjGSN8kfUSTsellCWW6DSR2 hEBaY0XmoGLpOiNpndWK8jcnuQn9ow8nk0R7QT9+2EmSDVlOLzKfaJHXDYGiLzcD QkNSiV+m7YPW+eVUF79bgCFU39BT6daABSMGqycGUB10ntPdkZuLStuulQTqjH4a oLbOiriabLk5yEt1FNU8ZRN87T3Qz6MSF+cSdgGi79LrmoulqNddY0MSod7vJZTk wS+Zb2Ad4y+l71tNGR9XyMFK+whyiCSS2iPzWHBxNdQ0CfsEH0pxpzISuB8rmukY uUWl29ZDJ1IE2CerR6L3Q4LR -----END CERTIFICATE-----Generated at Tue Jul 28 16:46:35 2026 by rpki-client