$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: UFqGzhzjMrnaffDK5eeSVZ4LQxBY0X5KCIY89Ytx7Jg= Subject key identifier: BF:B8:C4:85:74:1F:AA:12:B8:94:96:71:F6:5A:66:64:F9:EE:8E:ED Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0B9A Signing time: Sun 26 Jul 2026 19:30:44 +0000 Manifest this update: Sun 26 Jul 2026 19:30:44 +0000 Manifest next update: Sun 02 Aug 2026 19:30:44 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: Sdf3H5k4TSs9aQq0kdnihtFtp9/oGC50UAe2lKcdkCY=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: ShVKBDsZHucxua11jITqEB/zC8bAit+Mc5m8VG1vvj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Jul 26 19:30:44 2026 GMT Not After : Aug 2 19:30:44 2026 GMT Subject: CN=6a666064-5696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:da:5d:7c:6c:26:29:58:f9:95:27:24:b4: e3:2a:e5:cf:13:9e:82:23:03:33:52:5a:7c:f6:a4: e5:e7:9a:ce:4d:5b:4b:02:bc:3f:9e:d6:d0:7a:75: 40:0e:b3:72:7d:ca:96:94:36:94:07:2e:59:c8:73: 7f:dd:67:d9:1b:cf:16:ea:e3:2e:65:cd:22:b8:c1: c1:7a:e6:86:2b:90:f1:95:d4:49:b0:9f:00:63:21: d3:9f:2a:5a:ff:4b:8e:5c:d9:ba:89:1a:a1:20:a3: d6:52:9f:2d:a1:f0:97:e6:c4:ad:6e:dd:a7:36:a4: 0e:9a:ba:96:97:bd:37:f8:bc:42:30:3f:9c:77:f0: fb:7a:46:3a:59:ae:11:7e:9a:a4:9a:75:7b:09:a7: 5b:e8:4e:b1:6e:63:26:11:ba:b8:2d:c2:b5:78:b1: 57:c7:c3:20:40:51:30:05:11:da:ab:f9:29:9b:4e: c2:3a:49:ba:0d:66:70:62:1c:ce:36:c6:76:2b:51: b4:0a:a5:d1:96:a6:8e:23:da:8e:79:e5:c6:02:4b: d2:77:10:0a:fc:9d:50:c1:7e:59:82:91:1f:0a:b0: 80:dc:c5:d6:c6:85:c8:fe:3a:0b:53:42:7a:88:45: 71:94:12:b0:cf:53:81:7a:c1:97:ae:8b:4b:12:b6: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:C4:85:74:1F:AA:12:B8:94:96:71:F6:5A:66:64:F9:EE:8E:ED X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ac:0b:7a:1f:88:9d:0f:46:c6:06:2e:e1:a0:41:09:1e:9c: 45:b3:f3:53:a3:bc:68:da:39:b7:92:c1:7c:a9:24:ec:52:fa: 23:60:35:31:95:09:9c:c1:7b:22:9c:31:cf:02:4d:d5:7c:87: db:20:e2:0f:b5:55:95:73:64:87:d9:7c:a3:62:21:6a:03:7d: d9:d7:43:76:1f:6b:82:32:bd:85:3d:c6:cd:85:5c:a5:f6:73: 09:4d:f0:53:d0:2b:f4:89:1a:8b:9c:89:33:1a:10:d4:ba:0b: 8d:e0:f3:07:ae:5e:a9:ec:13:f5:68:ca:4b:12:69:74:12:6d: 33:5d:35:b6:03:a9:28:3c:9e:13:02:2e:38:c7:15:b4:58:4f: 62:e4:88:ed:50:30:20:70:1f:95:a7:a8:cb:c5:5c:4b:83:79: 87:cb:13:37:c3:15:92:62:39:cc:e6:b2:87:a8:80:3f:59:94: 0e:bf:ce:cc:1b:cd:29:54:5f:f2:2b:69:ed:b1:e4:20:0d:fd: af:e4:a7:65:1d:d7:0c:e4:7b:fd:42:0b:e6:67:a4:c9:72:2b: ca:1f:a5:a4:eb:c7:c9:d0:c1:42:ad:9a:d5:2b:02:7a:b2:52: ce:11:ae:4e:a9:61:fd:63:1e:af:7e:bf:8b:02:43:2e:52:66: e6:58:cf:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjYwNzI2MTkzMDQ0WhcNMjYwODAyMTkzMDQ0WjAYMRYwFAYD VQQDEw02YTY2NjA2NC01Njk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIzaXXxsJilY+ZUnJLTjKuXPE56CIwMzUlp89qTl55rOTVtLArw/ntbQenVA DrNyfcqWlDaUBy5ZyHN/3WfZG88W6uMuZc0iuMHBeuaGK5DxldRJsJ8AYyHTnypa /0uOXNm6iRqhIKPWUp8tofCX5sStbt2nNqQOmrqWl703+LxCMD+cd/D7ekY6Wa4R fpqkmnV7Cadb6E6xbmMmEbq4LcK1eLFXx8MgQFEwBRHaq/kpm07COkm6DWZwYhzO NsZ2K1G0CqXRlqaOI9qOeeXGAkvSdxAK/J1QwX5ZgpEfCrCA3MXWxoXI/joLU0J6 iEVxlBKwz1OBesGXrotLErbPSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+4xIV0 H6oSuJSWcfZaZmT57o7tMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ6wLeh+InQ9GxgYu4aBBCR6cRbPzU6O8aNo5t5LBfKkk7FL6I2A1MZUJnMF7 IpwxzwJN1XyH2yDiD7VVlXNkh9l8o2IhagN92ddDdh9rgjK9hT3GzYVcpfZzCU3w U9Ar9Ikai5yJMxoQ1LoLjeDzB65eqewT9WjKSxJpdBJtM101tgOpKDyeEwIuOMcV tFhPYuSI7VAwIHAflaeoy8VcS4N5h8sTN8MVkmI5zOayh6iAP1mUDr/OzBvNKVRf 8itp7bHkIA39r+SnZR3XDOR7/UIL5mekyXIryh+lpOvHydDBQq2a1SsCerJSzhGu Tqlh/WMer36/iwJDLlJm5ljPjA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:39:56 2026 by rpki-client