$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: Ouyn6F7GXPbGZL2cBD8PTfeqXvmB/ICW16BLWPv5lz4= Subject key identifier: 4F:1D:F8:7D:5F:02:39:5A:7C:A9:43:83:DC:F6:8D:9F:EC:D1:77:E1 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0D0B Signing time: Tue 28 Jul 2026 18:26:21 +0000 Manifest this update: Tue 28 Jul 2026 18:26:20 +0000 Manifest next update: Tue 04 Aug 2026 18:26:20 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: nS0kaYhPkIewSwzHY2bgbp0jkH+Rna2wnMHpf1r4K+U=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Jul 28 18:26:20 2026 GMT Not After : Aug 4 18:26:20 2026 GMT Subject: CN=6a68f44d-c45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:c3:8e:9f:cf:8a:c0:32:b5:6b:ad:14:cf: 24:65:fa:27:1d:05:ba:2c:96:7e:6a:ee:52:b0:d6: 18:05:57:b7:b4:54:b0:d4:20:cb:b6:9b:8f:91:e0: b7:c9:d4:5d:71:5e:0f:e2:ab:07:9f:72:dc:c5:ef: ad:12:b8:fc:65:d6:d5:78:3c:1e:9a:07:d3:01:77: 2a:77:d1:d8:7e:64:b4:c9:66:b2:fe:53:8c:f6:59: 65:49:2d:71:43:51:b1:c3:b3:a1:50:a0:08:bc:32: 3c:1b:17:70:07:ac:e2:98:e7:c8:64:0a:0e:e3:ca: 6e:6a:95:43:ad:36:96:30:f7:5c:df:e3:56:ea:5b: 5d:6a:79:59:96:19:84:a1:c2:0b:c2:bc:f5:4d:c2: 6d:88:f9:01:3c:d4:32:22:2f:58:3f:79:a3:76:bf: b3:46:c5:2b:5e:52:47:64:0f:da:71:45:b9:d0:e4: b1:5e:3b:ec:17:8d:19:32:97:aa:20:73:15:41:a7: c6:f9:8e:94:ea:05:90:41:04:48:d8:b6:14:bb:dc: c4:ca:94:27:38:13:f1:aa:96:be:a0:55:7e:2d:cf: 4a:b2:37:c6:39:32:63:ca:d5:b5:8e:e9:ee:54:6d: 3d:7f:64:05:b6:9c:7f:02:d8:ea:78:24:b9:50:b6: 2f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1D:F8:7D:5F:02:39:5A:7C:A9:43:83:DC:F6:8D:9F:EC:D1:77:E1 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:11:a5:10:54:1a:d6:f5:ff:47:04:8e:3e:ee:39:86:d7: 6f:f4:cc:1a:89:2b:a9:66:4d:30:1f:e8:cc:e8:9c:f3:e6:f8: af:06:1f:79:a9:51:75:2d:03:0a:ce:4f:25:46:d9:27:4a:32: f4:bb:36:06:41:ed:c2:7d:ad:3e:8a:43:40:bb:c9:1c:2c:7b: 58:b4:11:e8:13:15:f5:00:15:29:80:ca:0e:20:71:52:21:3a: fa:20:d4:07:93:8d:3b:2f:ea:d7:02:63:40:e4:3d:a2:f9:2c: 9c:78:1e:d2:35:6c:78:01:ec:3d:72:7e:68:9c:bd:0f:5d:58: 4a:4c:05:51:63:58:52:ec:2b:35:67:3e:b1:bc:2f:f9:5f:c7: 30:34:af:37:7c:db:de:c8:c4:88:82:0c:36:64:60:89:35:bc: 51:9a:29:a3:c8:9b:d3:1e:70:94:35:0a:08:03:1d:37:46:5f: be:31:1e:37:1c:fb:31:82:f9:7e:8e:f7:6a:a9:47:6e:c9:b5: f4:37:62:2c:c6:aa:c0:d9:a3:45:ed:e9:d7:d5:f2:5b:a3:0d: 0a:0c:19:78:48:37:26:9d:f8:2e:d0:d2:61:49:db:91:82:f7: 73:14:25:c0:93:87:20:8b:95:38:10:85:f5:5e:d5:81:a9:28: d6:e4:8f:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwNzI4MTgyNjIwWhcNMjYwODA0MTgyNjIwWjAYMRYwFAYD VQQDEw02YTY4ZjQ0ZC1jNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE/Djp/PisAytWutFM8kZfonHQW6LJZ+au5SsNYYBVe3tFSw1CDLtpuPkeC3 ydRdcV4P4qsHn3Lcxe+tErj8ZdbVeDwemgfTAXcqd9HYfmS0yWay/lOM9lllSS1x Q1Gxw7OhUKAIvDI8GxdwB6zimOfIZAoO48puapVDrTaWMPdc3+NW6ltdanlZlhmE ocILwrz1TcJtiPkBPNQyIi9YP3mjdr+zRsUrXlJHZA/acUW50OSxXjvsF40ZMpeq IHMVQafG+Y6U6gWQQQRI2LYUu9zEypQnOBPxqpa+oFV+Lc9KsjfGOTJjytW1junu VG09f2QFtpx/AtjqeCS5ULYvMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8d+H1f AjlafKlDg9z2jZ/s0XfhMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGA0RpRBUGtb1/0cEjj7uOYbXb/TMGokrqWZNMB/ozOic8+b4rwYfealRdS0D Cs5PJUbZJ0oy9Ls2BkHtwn2tPopDQLvJHCx7WLQR6BMV9QAVKYDKDiBxUiE6+iDU B5ONOy/q1wJjQOQ9ovksnHge0jVseAHsPXJ+aJy9D11YSkwFUWNYUuwrNWc+sbwv +V/HMDSvN3zb3sjEiIIMNmRgiTW8UZopo8ib0x5wlDUKCAMdN0ZfvjEeNxz7MYL5 fo73aqlHbsm19DdiLMaqwNmjRe3p19XyW6MNCgwZeEg3Jp34LtDSYUnbkYL3cxQl wJOHIIuVOBCF9V7Vgako1uSPZg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:30:35 2026 by rpki-client