$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: O5G7Y9YrgazEdCLWXn50VpM8FmNPT6Ri/oUF0sDXVvI= Subject key identifier: 13:01:F4:3A:60:6B:F4:D1:F2:F4:4A:38:2C:48:D7:8B:84:46:52:53 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 07AD Signing time: Sun 26 Jul 2026 22:12:12 +0000 Manifest this update: Sun 26 Jul 2026 22:12:12 +0000 Manifest next update: Sun 02 Aug 2026 22:12:12 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: oM4ePaBUVZUo+LILxbmET9FRPmIF1YBbp40owLA69zk=) 2: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=) 3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=) 4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Jul 26 22:12:12 2026 GMT Not After : Aug 2 22:12:12 2026 GMT Subject: CN=6a66863c-a611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9c:a8:c7:92:d1:e0:a7:4c:4b:cd:f6:d4:7f: ee:bc:75:26:77:af:9e:de:9f:27:ce:03:e3:ac:5f: bf:28:25:b6:cb:37:a3:1f:29:a6:1b:4b:45:a5:99: d6:e2:26:9a:b3:fc:4c:35:28:05:f4:be:29:78:de: 09:9b:f4:9e:19:ab:94:c3:e8:5c:49:f9:5b:d0:92: b6:5a:39:73:ef:44:22:f1:b4:1d:af:eb:39:2d:5c: 5f:d1:f2:8e:42:c0:74:66:d1:9d:6a:ba:98:82:cc: 4e:24:95:af:8d:f8:be:60:21:bb:d7:03:2d:13:86: d0:e5:3f:70:c3:00:40:74:dd:46:63:0a:b0:fa:7f: 3f:a4:70:62:bd:10:ff:a3:1f:7f:6d:48:a5:1f:55: 13:ba:b8:66:d5:d3:69:42:2d:04:00:97:3c:9f:1c: 7e:42:58:7b:e6:4c:f4:17:d2:74:49:ee:50:9f:46: d5:a9:75:34:bb:47:6e:53:2d:a8:11:8b:cb:38:5d: 5c:87:88:a4:b8:f0:cd:26:f5:2a:eb:0a:16:1a:94: a9:75:f7:51:f7:82:17:28:54:bd:a3:88:47:5c:ca: 3a:a9:a0:aa:05:10:3e:36:e0:ea:81:ce:35:59:f4: c9:e4:f7:22:01:94:44:9c:6f:dc:f0:c6:f4:6e:0d: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:F4:3A:60:6B:F4:D1:F2:F4:4A:38:2C:48:D7:8B:84:46:52:53 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8a:26:95:51:8f:28:22:17:1f:ca:be:a3:44:3b:17:07:14: 86:95:a9:a7:1b:51:f2:72:1d:68:67:83:f9:8d:37:60:6e:13: 3d:70:3e:ea:a0:16:10:c9:e3:c2:ab:b1:d3:8a:74:14:1e:6e: 6d:ba:4c:05:88:90:5a:c1:40:5e:77:48:cd:18:e9:62:db:8b: 1f:83:66:9b:2b:a8:73:0b:55:aa:34:9a:28:94:6c:80:7a:95: e1:ac:ee:1f:8f:dd:77:3e:9e:56:87:ec:15:85:0a:65:28:6f: c9:c9:4f:f4:69:9b:02:0b:de:7b:d0:f7:c7:e8:75:79:51:37: e8:02:28:83:95:2c:fc:2f:86:b1:14:30:00:33:05:32:a2:c4: ba:c8:c0:fb:a9:77:31:77:8d:a4:46:ea:87:6e:71:52:3b:2b: fd:cd:b7:8a:8f:c1:dc:cc:90:09:50:55:78:4f:af:d4:57:bd: f9:ba:c5:b5:42:c7:2c:dd:e6:7b:8b:0b:34:85:05:61:7c:27: 15:c6:be:42:ab:9f:df:13:ed:44:0b:6e:af:d9:a0:89:8a:c7: 12:b1:c4:10:ec:60:1a:13:db:b7:f1:3f:db:b9:5f:7a:17:84: 9f:c9:38:f0:71:77:a2:81:07:c0:b7:d3:f7:2e:26:6b:1b:77: 1b:19:45:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwNzI2MjIxMjEyWhcNMjYwODAyMjIxMjEyWjAYMRYwFAYD VQQDEw02YTY2ODYzYy1hNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Zyox5LR4KdMS8321H/uvHUmd6+e3p8nzgPjrF+/KCW2yzejHymmG0tFpZnW 4iaas/xMNSgF9L4peN4Jm/SeGauUw+hcSflb0JK2Wjlz70Qi8bQdr+s5LVxf0fKO QsB0ZtGdarqYgsxOJJWvjfi+YCG71wMtE4bQ5T9wwwBAdN1GYwqw+n8/pHBivRD/ ox9/bUilH1UTurhm1dNpQi0EAJc8nxx+Qlh75kz0F9J0Se5Qn0bVqXU0u0duUy2o EYvLOF1ch4ikuPDNJvUq6woWGpSpdfdR94IXKFS9o4hHXMo6qaCqBRA+NuDqgc41 WfTJ5PciAZREnG/c8Mb0bg10swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMB9Dpg a/TR8vRKOCxI14uERlJTMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf4omlVGPKCIXH8q+o0Q7FwcUhpWppxtR8nIdaGeD+Y03YG4TPXA+6qAWEMnj wqux04p0FB5ubbpMBYiQWsFAXndIzRjpYtuLH4NmmyuocwtVqjSaKJRsgHqV4azu H4/ddz6eVofsFYUKZShvyclP9GmbAgvee9D3x+h1eVE36AIog5Us/C+GsRQwADMF MqLEusjA+6l3MXeNpEbqh25xUjsr/c23io/B3MyQCVBVeE+v1Fe9+brFtULHLN3m e4sLNIUFYXwnFca+Qquf3xPtRAtur9mgiYrHErHEEOxgGhPbt/E/27lfeheEn8k4 8HF3ooEHwLfT9y4maxt3GxlF6A== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:24 2026 by rpki-client