$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: +gHHvpvL+dCPOq7k5BKkTlfvAAQuqIGGMWFTrC1rEug= Subject key identifier: 01:BA:D6:85:23:A9:9B:F1:B7:71:43:B0:2E:8D:8E:F4:8C:9A:F7:85 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DB4 Signing time: Tue 28 Jul 2026 16:13:25 +0000 Manifest this update: Tue 28 Jul 2026 16:13:24 +0000 Manifest next update: Tue 04 Aug 2026 16:13:24 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: r7ZWiBO6OeZNVMP9/TjN90+3sUgCUzEqD1UVtKK4CJg=) 2: D1A879DA769011F18B30BBE765A30FBC.roa (hash: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=) 3: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=) 4: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: /vJS5mvYoaeQ7e5TPVVBx64c5yOqiYznmnqStY9GYWY=) 5: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: FZUA9ujh5y+qedLhZYHjBMCqwCiia7dWK5HBk6r/R3A=) 6: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=) 7: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: syfI5VBGCCOaxinq66/rQy0KiVO/nQZm82G8XJ0s/uQ=) 8: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: OyJ386kUL4gGWlM9zenD8Or9GBx/nawzJcbJiadjXEs=) 9: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: Ruxh9vs1IEEY8sUgeoqbiAjkOA3NIO1oE49c/aSiPyo=) 10: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7754 (0x1e4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Jul 28 16:13:24 2026 GMT Not After : Aug 4 16:13:24 2026 GMT Subject: CN=6a68d525-10ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:fd:7d:c5:8d:88:bf:ef:a5:ad:af:78:1f: 15:09:84:8b:f6:5f:39:cc:eb:ba:42:a8:0f:f4:90: 39:c7:af:d0:c5:e4:80:c3:34:75:84:af:0c:a3:30: 56:71:50:c3:bf:ab:ad:b3:88:87:cc:90:03:e4:c0: 66:c6:d8:7c:6e:0e:9b:b1:02:9b:b6:96:d3:ff:2c: af:18:7d:44:91:a9:61:54:ff:0f:a3:a3:f8:62:c0: 97:6e:5d:cd:c2:00:4f:a8:ff:2c:88:40:b9:b3:46: 77:f5:22:b5:32:25:f2:e6:ea:62:e6:a0:69:02:2d: 96:1d:91:0e:0e:ee:56:64:32:b8:b1:25:da:03:ce: 91:fa:05:e9:9e:03:47:c4:cc:6e:0c:40:78:1a:e7: 81:db:79:5a:70:be:79:89:e8:db:bb:5c:88:22:d3: 27:c5:e1:b3:f0:f9:b0:60:f4:53:cb:e4:41:b8:d9: 16:eb:19:d2:e7:37:14:09:61:4f:fb:2c:fb:9b:54: 8d:7d:d0:00:72:a2:11:21:62:e2:af:4c:17:f6:f8: 36:46:6c:b2:0b:dc:7c:a9:2c:c3:37:7c:8f:4e:ca: 4a:09:c6:07:41:90:91:20:e5:4d:c7:8e:f8:5c:2e: 0e:60:49:57:07:d2:85:39:7b:17:58:82:b4:7a:2d: d0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BA:D6:85:23:A9:9B:F1:B7:71:43:B0:2E:8D:8E:F4:8C:9A:F7:85 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:be:57:8f:24:05:b2:35:8d:4f:1b:66:43:d4:a2:48:40:c4: 6e:03:14:32:62:07:6f:73:d4:cb:72:d4:5b:eb:c4:2b:f4:e6: 3f:d9:1b:f3:13:f3:79:d9:fd:b2:a0:0f:4a:68:71:81:6e:9a: 6a:79:c1:9e:4d:88:76:31:0e:0d:52:6e:89:c3:98:98:1b:9e: b8:e4:dc:14:91:5a:41:a0:68:ca:f9:7e:71:c9:bc:4a:f0:0c: 11:6a:d1:7b:a7:97:c3:46:e6:c1:f2:4f:fe:c4:08:d6:f9:de: 3d:a3:f0:ac:26:31:ab:c8:f9:2e:81:60:cc:84:0e:ad:fb:2a: 95:f5:d4:66:c3:d1:fb:4c:60:71:0c:66:9e:be:bb:1b:c2:0a: 4b:57:df:5a:f4:1c:74:dd:5a:c0:18:dc:b4:d5:4a:9c:49:59: be:2e:a2:e7:bc:83:a9:49:8a:dd:d3:31:a4:ef:fb:bc:3a:80: e7:7f:c5:bd:05:68:80:33:7e:75:52:7c:7c:b2:f2:37:4d:04: af:b8:5a:05:e7:23:9c:41:6c:5e:a7:0e:63:9d:b9:ce:e8:88: ad:ce:42:d8:ef:e5:8f:50:a9:15:2e:ce:6c:07:bc:49:35:ca: 1a:8d:17:0b:7a:44:02:e8:15:82:d1:08:de:e6:7a:81:e8:50: 02:7f:1a:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwNzI4MTYxMzI0WhcNMjYwODA0MTYxMzI0WjAYMRYwFAYD VQQDEw02YTY4ZDUyNS0xMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufD9fcWNiL/vpa2veB8VCYSL9l85zOu6QqgP9JA5x6/QxeSAwzR1hK8MozBW cVDDv6uts4iHzJAD5MBmxth8bg6bsQKbtpbT/yyvGH1EkalhVP8Po6P4YsCXbl3N wgBPqP8siEC5s0Z39SK1MiXy5upi5qBpAi2WHZEODu5WZDK4sSXaA86R+gXpngNH xMxuDEB4GueB23lacL55iejbu1yIItMnxeGz8PmwYPRTy+RBuNkW6xnS5zcUCWFP +yz7m1SNfdAAcqIRIWLir0wX9vg2RmyyC9x8qSzDN3yPTspKCcYHQZCRIOVNx474 XC4OYElXB9KFOXsXWIK0ei3QAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAG61oUj qZvxt3FDsC6NjvSMmveFMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAur5XjyQFsjWNTxtmQ9SiSEDEbgMUMmIHb3PUy3LUW+vEK/TmP9kb8xPzedn9 sqAPSmhxgW6aannBnk2IdjEODVJuicOYmBueuOTcFJFaQaBoyvl+ccm8SvAMEWrR e6eXw0bmwfJP/sQI1vnePaPwrCYxq8j5LoFgzIQOrfsqlfXUZsPR+0xgcQxmnr67 G8IKS1ffWvQcdN1awBjctNVKnElZvi6i57yDqUmK3dMxpO/7vDqA53/FvQVogDN+ dVJ8fLLyN00Er7haBecjnEFsXqcOY525zuiIrc5C2O/lj1CpFS7ObAe8STXKGo0X C3pEAugVgtEI3uZ6gehQAn8aCA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:52:56 2026 by rpki-client