$ rpki-client -vvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft File: IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft (raw, json) Hash identifier: xh9WBx8stleeIZ+2JgIkNm1Jn7vBev6yNgB5qGN4lcM= Subject key identifier: 51:4E:3A:6D:90:C2:DE:57:D2:6E:8C:81:AF:89:69:C2:92:12:61:91 Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D Certificate issuer: /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft Manifest number: 04D7 Signing time: Mon 27 Jul 2026 00:48:00 +0000 Manifest this update: Mon 27 Jul 2026 00:47:59 +0000 Manifest next update: Mon 03 Aug 2026 00:47:59 +0000 Files and hashes: 1: IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl (hash: IBSSjbReOkaUKzanlPFLADrDXBN1HBeR9bMKS+Zl0Ag=) 2: E986DDEC979911ECB3B7CE39C4F9AE02.roa (hash: BfgbyrDUSPaDFbvmIvU+wE2M70H25WXoCbwhEXrv7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152DE4, serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Validity Not Before: Jul 27 00:47:59 2026 GMT Not After : Aug 3 00:47:59 2026 GMT Subject: CN=6a66aac0-ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c0:13:1e:99:d6:a0:b6:8f:e7:34:36:a5:a6: 90:19:f2:6a:77:56:d5:e6:44:62:9a:9b:bb:7c:0b: 52:b7:1d:35:f7:40:d9:2d:b3:40:96:7d:5b:ad:f9: 0b:cb:b0:d7:01:5b:27:f7:b9:df:b3:ed:f6:53:44: 04:65:fc:15:96:20:36:ca:e6:89:1b:45:39:6f:73: 0e:e2:16:fd:5d:77:ab:fc:a3:e5:48:17:11:90:5b: 77:9f:69:e5:fa:2d:0a:9b:ba:7f:a9:b1:af:42:b0: cd:17:24:7a:a3:cd:11:e2:73:37:c2:64:57:a6:86: 78:1d:af:7a:c3:59:84:05:88:46:a3:a1:83:f6:1c: 2b:f7:87:ce:2d:f3:7a:db:2a:b3:5a:ce:bb:3d:fd: 15:e9:4c:05:0c:0c:16:78:1c:c6:e3:e3:da:10:f2: 4a:87:dc:8a:31:56:60:83:94:5b:05:fd:20:42:82: ed:3b:bb:1a:3b:ef:2e:05:e0:12:4d:68:28:bc:14: cf:ca:eb:06:86:fb:fc:0b:9e:5f:7f:ff:fe:d0:67: 6e:45:de:89:7d:3c:57:64:c1:6f:90:03:72:62:ad: d4:00:0e:94:f3:71:67:ad:d2:ae:67:75:a5:98:92: d2:b6:87:e0:2b:63:5c:7d:8a:df:b7:71:0e:e3:21: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:3A:6D:90:C2:DE:57:D2:6E:8C:81:AF:89:69:C2:92:12:61:91 X509v3 Authority Key Identifier: keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c3:28:ac:bd:37:56:92:e2:a4:4d:02:4f:c2:e3:ff:3c:f3: e0:e1:0b:18:07:31:20:61:06:1b:01:f3:5c:7b:02:03:29:7f: 25:d8:13:64:85:ca:0f:b4:66:ad:14:12:ec:47:09:6e:4d:5b: eb:88:c0:e7:f1:1d:6e:a7:bc:07:b9:2c:bb:c7:02:50:77:87: eb:aa:a3:f5:8c:37:26:c2:91:98:75:2a:23:82:0e:e6:80:e0: 4d:b9:e5:8b:78:47:88:b1:3b:6d:b9:2d:73:e6:ef:aa:c3:db: 04:19:fb:f9:21:62:82:40:58:79:72:16:5c:8b:71:96:1b:a8: fb:b6:44:f6:04:43:2d:33:25:9d:6b:1d:d6:24:da:12:bf:20: 25:31:23:41:1e:b2:50:a7:cf:16:fc:05:53:42:44:4c:81:66: f8:07:5e:b5:f3:52:a6:3c:14:c0:fd:a8:27:d9:e8:c0:c3:ce: b7:d2:b0:53:db:37:d7:6a:a0:48:34:94:13:76:43:0e:9f:64: 3f:46:5e:80:05:1c:a7:f2:e3:e0:87:78:8c:16:95:07:9d:08: 13:ca:f8:e4:4b:f4:09:0a:a2:33:69:a5:07:67:f9:37:fa:4b: 0f:e3:95:92:09:b6:3b:be:0f:3b:ad:87:31:62:c7:ac:0e:71: e8:d0:67:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJERTQxMTAvBgNVBAUTKDIxN0MzRDhCRUQwQjQwQzBGQjA4OEI1OUVFNkU2NUFF NkM2NjFGMEQwHhcNMjYwNzI3MDA0NzU5WhcNMjYwODAzMDA0NzU5WjAYMRYwFAYD VQQDEw02YTY2YWFjMC1hZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg8ATHpnWoLaP5zQ2paaQGfJqd1bV5kRimpu7fAtStx0190DZLbNAln1brfkL y7DXAVsn97nfs+32U0QEZfwVliA2yuaJG0U5b3MO4hb9XXer/KPlSBcRkFt3n2nl +i0Km7p/qbGvQrDNFyR6o80R4nM3wmRXpoZ4Ha96w1mEBYhGo6GD9hwr94fOLfN6 2yqzWs67Pf0V6UwFDAwWeBzG4+PaEPJKh9yKMVZgg5RbBf0gQoLtO7saO+8uBeAS TWgovBTPyusGhvv8C55ff//+0GduRd6JfTxXZMFvkANyYq3UAA6U83FnrdKuZ3Wl mJLStofgK2NcfYrft3EO4yGgQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFOOm2Q wt5X0m6Mga+JacKSEmGRMB8GA1UdIwQYMBaAFCF8PYvtC0DA+wiLWe5uZa5sZh8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkRFNC80Q0NDQzMzMjc5 MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFNRDdDSXRaN201bHJteG1I dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYdzlpLTBMUU1EN0NJdFo3bTVscm14bUh3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkRFNC80Q0NDQzMzMjc5MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFN RDdDSXRaN201bHJteG1IdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmsMorL03VpLipE0CT8Lj/zzz4OELGAcxIGEGGwHzXHsCAyl/JdgTZIXKD7Rm rRQS7EcJbk1b64jA5/Edbqe8B7ksu8cCUHeH66qj9Yw3JsKRmHUqI4IO5oDgTbnl i3hHiLE7bbktc+bvqsPbBBn7+SFigkBYeXIWXItxlhuo+7ZE9gRDLTMlnWsd1iTa Er8gJTEjQR6yUKfPFvwFU0JETIFm+AdetfNSpjwUwP2oJ9nowMPOt9KwU9s312qg SDSUE3ZDDp9kP0ZegAUcp/Lj4Id4jBaVB50IE8r45Ev0CQqiM2mlB2f5N/pLD+OV kgm2O74PO62HMWLHrA5x6NBnww== -----END CERTIFICATE-----Generated at Tue Jul 28 20:17:35 2026 by rpki-client