$ rpki-client -vvf rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft File: cIW1tFSazbW2wnBMhbp4h2D4iic.mft (raw, json) Hash identifier: tXhCWeJLXpFGMreWn0oswl+js7bYDTsxmnJdpWgl3do= Subject key identifier: 40:DE:D2:2E:E1:60:EA:CB:01:8E:E6:FA:FD:70:BE:4F:25:BA:7B:9D Authority key identifier: 70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27 Certificate issuer: /CN=A91722A3/serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft Manifest number: 0C5A Signing time: Sun 26 Jul 2026 19:04:24 +0000 Manifest this update: Sun 26 Jul 2026 19:04:23 +0000 Manifest next update: Sun 02 Aug 2026 19:04:23 +0000 Files and hashes: 1: cIW1tFSazbW2wnBMhbp4h2D4iic.crl (hash: d7v/g03KsOO88wF6MO0fYUAs3n7Whe/EhgolBIB5i44=) 2: 002DDDC22B9D11EA92F3094CC4F9AE02.roa (hash: bcFMpQtRC/rqeGP9esVeD25xYCU2sXQbGEoW2r6Fpqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722A3, serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27 Validity Not Before: Jul 26 19:04:23 2026 GMT Not After : Aug 2 19:04:23 2026 GMT Subject: CN=6a665a38-6831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:b0:de:bc:1d:2e:a0:a5:e3:e5:96:f8:88: f2:e0:81:7c:da:32:0d:2f:47:71:dc:49:a9:16:68: 30:8a:0b:52:37:9c:81:cb:01:28:a9:d6:7a:7a:d8: 42:dc:b8:3b:c6:fa:c6:10:24:da:02:33:99:f3:0f: 22:a7:67:2b:c6:33:94:dd:9f:42:d0:62:30:6a:1e: 05:de:23:90:84:91:95:b5:01:62:83:22:0f:87:3b: 38:0e:ac:a4:47:90:49:fd:03:d9:c1:e8:3e:71:2f: 48:6e:52:4a:7a:57:dc:52:d7:54:ff:04:70:56:fb: 99:11:db:1d:4e:7a:88:27:27:95:c6:f8:1f:82:35: 94:80:70:26:2d:1a:67:ab:27:35:0a:7f:37:e3:11: a1:61:a5:2d:7c:7c:b4:be:d7:0c:17:97:0c:0b:d5: d8:68:29:9a:95:92:bb:a7:62:dc:f1:69:40:b3:f0: 77:a2:97:fa:74:13:e7:32:cb:04:93:ab:e1:24:68: 16:41:ce:70:d5:bd:af:5c:54:f7:4b:23:c7:e1:28: 2f:1c:d8:e6:f7:ff:c7:e5:d6:46:03:48:bd:7f:8c: bc:54:7f:f0:7f:09:d2:85:d9:4f:e5:28:64:5a:7a: bf:45:7c:45:cc:e6:92:dc:23:ce:97:25:38:f0:45: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:D2:2E:E1:60:EA:CB:01:8E:E6:FA:FD:70:BE:4F:25:BA:7B:9D X509v3 Authority Key Identifier: keyid:70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:af:38:1f:c2:19:b3:6a:b8:0f:b7:17:44:26:72:20:be:5b: c3:fe:69:55:4a:0d:da:43:07:69:63:90:2f:ea:6f:de:13:cb: 5b:8c:94:c5:62:0a:ea:10:be:b8:ef:38:9b:84:29:b9:9b:c1: 5d:3b:8e:e3:a0:22:be:a1:2b:53:86:c2:67:ef:00:42:db:48: 66:f5:17:1f:ba:88:4c:dd:09:1f:d7:3a:d4:a8:bc:b5:cd:8d: f7:7b:9d:32:33:6e:22:7c:49:32:fe:9a:0f:8c:09:d5:49:fd: 2e:58:84:c4:4e:b3:89:45:a4:c8:9e:d7:58:0d:01:4e:c1:26: 8b:01:87:35:f9:3a:7c:88:97:b1:22:52:8e:a6:98:de:40:45: a1:a2:a8:dc:15:74:63:55:65:ad:28:1f:53:a8:e5:4a:63:f1: 76:0f:1c:8e:d5:45:f2:ca:dc:ca:67:f2:34:84:71:ab:7e:b3: 1d:a9:66:60:50:52:7f:54:36:fd:01:01:f3:78:a4:e2:9d:f8: da:63:8d:38:e5:90:8b:27:8a:7a:3f:ae:58:23:47:d7:cb:3c: bd:0b:4b:99:5f:85:c7:b2:4d:c3:d9:11:bc:ee:18:fc:eb:67: 84:a4:0f:e8:5f:be:61:a1:9f:9c:43:7e:7a:ca:d7:ad:71:72: 25:f2:80:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQTMxMTAvBgNVBAUTKDcwODVCNUI0NTQ5QUNEQjVCNkMyNzA0Qzg1QkE3ODg3 NjBGODhBMjcwHhcNMjYwNzI2MTkwNDIzWhcNMjYwODAyMTkwNDIzWjAYMRYwFAYD VQQDEw02YTY2NWEzOC02ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy56w3rwdLqCl4+WW+Ijy4IF82jINL0dx3EmpFmgwigtSN5yBywEoqdZ6ethC 3Lg7xvrGECTaAjOZ8w8ip2crxjOU3Z9C0GIwah4F3iOQhJGVtQFigyIPhzs4Dqyk R5BJ/QPZweg+cS9IblJKelfcUtdU/wRwVvuZEdsdTnqIJyeVxvgfgjWUgHAmLRpn qyc1Cn834xGhYaUtfHy0vtcMF5cMC9XYaCmalZK7p2Lc8WlAs/B3opf6dBPnMssE k6vhJGgWQc5w1b2vXFT3SyPH4SgvHNjm9//H5dZGA0i9f4y8VH/wfwnShdlP5Shk Wnq/RXxFzOaS3CPOlyU48EXNQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDe0i7h YOrLAY7m+v1wvk8lunudMB8GA1UdIwQYMBaAFHCFtbRUms21tsJwTIW6eIdg+Ion MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJBMy9DMDJEODVERTJC OUIxMUVBOTcyQ0RGNDZDNEY5QUUwMi9jSVcxdEZTYXpiVzJ3bkJNaGJwNGgyRDRp aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NJVzF0RlNhemJXMnduQk1oYnA0aDJENGlpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjJBMy9DMDJEODVERTJCOUIxMUVBOTcyQ0RGNDZDNEY5QUUwMi9jSVcxdEZTYXpi VzJ3bkJNaGJwNGgyRDRpaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ684H8IZs2q4D7cXRCZyIL5bw/5pVUoN2kMHaWOQL+pv3hPLW4yUxWIK6hC+ uO84m4QpuZvBXTuO46AivqErU4bCZ+8AQttIZvUXH7qITN0JH9c61Ki8tc2N93ud MjNuInxJMv6aD4wJ1Un9LliExE6ziUWkyJ7XWA0BTsEmiwGHNfk6fIiXsSJSjqaY 3kBFoaKo3BV0Y1VlrSgfU6jlSmPxdg8cjtVF8srcymfyNIRxq36zHalmYFBSf1Q2 /QEB83ik4p342mONOOWQiyeKej+uWCNH18s8vQtLmV+Fx7JNw9kRvO4Y/OtnhKQP 6F++YaGfnEN+esrXrXFyJfKAeA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:54 2026 by rpki-client