$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: 586cY9tqPMvVxxtRUvyL0Dgb6R/nyCZMQ6tKau4Bnuw= Subject key identifier: 2C:34:9F:16:73:69:92:4C:54:A2:85:5A:75:E2:82:33:DC:42:B6:AD Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 02C2 Signing time: Mon 27 Jul 2026 02:37:05 +0000 Manifest this update: Mon 27 Jul 2026 02:37:05 +0000 Manifest next update: Mon 03 Aug 2026 02:37:05 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: L9mTIoyZsTiY0MqIIO3lZPVSE4wDxcNqPXkjktltqEI=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Jul 27 02:37:05 2026 GMT Not After : Aug 3 02:37:05 2026 GMT Subject: CN=6a66c451-303e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:fa:64:ac:6c:6e:2c:3c:b1:9d:6c:bc:c4: 12:7e:32:f2:20:1d:ae:83:ef:f0:6d:7f:16:ad:7a: 0c:81:5d:11:a8:7c:a7:2e:b6:c7:4d:bc:ad:27:75: 50:6e:f2:8c:89:72:8d:6a:d0:b5:dd:e0:39:16:f3: 96:e9:9f:e6:50:67:49:66:06:77:1f:4e:62:8b:b8: cc:b4:d7:96:a1:28:d3:dd:09:90:b6:f9:36:df:7d: 45:84:3f:c6:2d:4b:b9:28:71:b3:db:02:55:6e:81: 0e:f9:b1:45:1c:da:97:ec:c5:d7:ad:ff:80:9c:b1: 63:35:7f:10:e2:b1:f1:b5:eb:db:bf:5c:1f:4a:8a: d3:84:c8:89:63:28:2e:40:36:4a:0a:81:c6:30:36: e0:e2:38:0a:d9:83:01:56:ce:23:b9:36:03:fe:e5: 20:e5:b1:a5:01:02:fb:4c:da:05:a2:a1:c0:84:07: e0:a4:7b:54:ed:3d:44:1d:07:1b:95:c9:ed:65:c7: 49:cc:ee:60:66:e9:f3:e1:0f:a4:9c:c7:05:ae:0e: 24:06:b8:5a:cf:f2:4d:a0:66:4a:d6:8d:47:62:7b: 23:19:87:38:94:60:5d:4d:7d:85:e5:db:74:20:f7: 79:03:05:da:e2:c3:e1:48:46:9e:45:65:c0:d7:71: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:34:9F:16:73:69:92:4C:54:A2:85:5A:75:E2:82:33:DC:42:B6:AD X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ca:79:8f:5d:da:e6:85:b3:b3:13:18:fb:a2:14:df:fc:2d: 70:bf:02:cb:d0:cf:b9:82:ed:cf:87:b7:6c:3d:b6:61:48:d2: d3:54:3a:67:5e:ad:83:8f:a4:8b:8c:f4:85:19:bb:af:01:19: f3:3c:86:ef:4e:94:a3:7c:d6:1f:37:28:e8:25:2d:50:c7:1b: 16:65:ee:47:ab:5b:97:9e:74:c3:0f:36:57:97:3b:fe:3e:fb: 3e:b5:8a:9e:66:09:06:a2:87:7a:ce:af:f9:d8:4a:f0:d4:36: 1d:36:75:66:32:9e:b2:1f:eb:fe:29:1f:4a:96:55:9f:1e:49: ab:d8:1e:61:9d:3a:f5:d4:cc:bd:fa:50:29:24:52:90:db:54: 68:97:19:55:5d:9f:aa:7e:df:b5:62:6b:18:ba:df:99:5f:50: 38:3d:80:5a:0d:b8:a8:6b:8e:27:ac:6c:92:00:6b:30:dc:cf: a9:b7:e8:d6:56:b2:c4:f3:00:fe:44:7b:3a:3e:34:4f:e0:bb: 40:20:43:89:6c:69:d0:3c:32:39:15:f8:45:b4:a2:71:7f:36: 4f:4a:13:dc:01:7e:ac:07:2a:5b:13:3a:e1:96:54:9a:46:63: 65:b4:48:01:e5:e9:5c:bf:c9:d6:d9:fe:20:13:1c:45:56:3c: 75:2b:08:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjYwNzI3MDIzNzA1WhcNMjYwODAzMDIzNzA1WjAYMRYwFAYD VQQDEw02YTY2YzQ1MS0zMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1X6ZKxsbiw8sZ1svMQSfjLyIB2ug+/wbX8WrXoMgV0RqHynLrbHTbytJ3VQ bvKMiXKNatC13eA5FvOW6Z/mUGdJZgZ3H05ii7jMtNeWoSjT3QmQtvk2331FhD/G LUu5KHGz2wJVboEO+bFFHNqX7MXXrf+AnLFjNX8Q4rHxtevbv1wfSorThMiJYygu QDZKCoHGMDbg4jgK2YMBVs4juTYD/uUg5bGlAQL7TNoFoqHAhAfgpHtU7T1EHQcb lcntZcdJzO5gZunz4Q+knMcFrg4kBrhaz/JNoGZK1o1HYnsjGYc4lGBdTX2F5dt0 IPd5AwXa4sPhSEaeRWXA13GMmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCw0nxZz aZJMVKKFWnXigjPcQratMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAscp5j13a5oWzsxMY+6IU3/wtcL8Cy9DPuYLtz4e3bD22YUjS01Q6Z16tg4+k i4z0hRm7rwEZ8zyG706Uo3zWHzco6CUtUMcbFmXuR6tbl550ww82V5c7/j77PrWK nmYJBqKHes6v+dhK8NQ2HTZ1ZjKesh/r/ikfSpZVnx5Jq9geYZ069dTMvfpQKSRS kNtUaJcZVV2fqn7ftWJrGLrfmV9QOD2AWg24qGuOJ6xskgBrMNzPqbfo1layxPMA /kR7Oj40T+C7QCBDiWxp0DwyORX4RbSicX82T0oT3AF+rAcqWxM64ZZUmkZjZbRI AeXpXL/J1tn+IBMcRVY8dSsIjA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:33:32 2026 by rpki-client