$ rpki-client -vvf rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft File: CIaR8feL2c7-2A021lDWd2emvbA.mft (raw, json) Hash identifier: KuS98zJlnzqksUHs0WoWGHDkT/Fpd4+dLiBhfRo7eP4= Subject key identifier: 5D:A7:24:78:7E:F5:37:B1:C1:05:97:03:F7:6A:53:E4:5B:02:7C:79 Authority key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 Certificate issuer: /CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft Manifest number: 0865 Signing time: Sun 26 Jul 2026 21:28:21 +0000 Manifest this update: Sun 26 Jul 2026 21:28:20 +0000 Manifest next update: Sun 02 Aug 2026 21:28:20 +0000 Files and hashes: 1: CIaR8feL2c7-2A021lDWd2emvbA.crl (hash: oiKQMoaVKGAgtumZ43jnNenlF5Qh1iO5Cw5km50ewhw=) 2: F126F04A11A911EBB5A4DD83C4F9AE02.roa (hash: gKg5HfquJDWxf6FguB+IjVE9zWcFlZAOKarqs8xULuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Validity Not Before: Jul 26 21:28:20 2026 GMT Not After : Aug 2 21:28:20 2026 GMT Subject: CN=6a667bf5-48be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:94:f6:11:96:aa:b9:2b:61:fa:e7:ce:fe: 85:53:f8:a2:bb:7f:49:d6:b6:6f:bd:72:f5:00:b6: 8e:7f:4b:cf:08:a6:c4:54:b8:b1:b5:e6:e4:1e:16: ce:d0:c1:ed:fe:4d:b7:b4:1b:54:41:12:87:8a:ec: 27:72:f2:37:33:b8:43:7c:6b:83:f6:c8:06:e3:35: 0b:17:00:0d:de:49:d2:c3:24:40:0c:de:c9:f5:3f: 3b:0d:a9:92:95:f4:5e:46:5b:d5:5d:3f:5b:f8:59: 36:3f:31:1f:42:61:a1:e4:02:5b:75:4c:46:db:b2: 5b:7d:8d:a6:e2:d9:93:8b:9f:0d:2c:f6:56:8f:92: a2:62:f1:0c:d6:36:bd:a9:24:2f:5b:83:1e:26:f3: 2f:d4:af:33:94:4d:ae:a4:66:2b:b6:3d:2b:b2:70: 56:1b:e2:5e:ec:79:77:4c:01:db:72:67:30:d9:a2: 8e:3e:a4:4d:67:19:1e:34:03:28:b2:29:f9:c2:c8: 04:1b:33:a9:89:18:5e:cf:19:b1:5a:63:83:30:c7: 58:e9:5a:a7:26:be:d4:d0:05:dc:10:d4:88:55:6b: 81:be:3d:1b:b5:23:54:d8:5b:71:17:11:9a:28:bf: 16:e6:84:26:0c:ab:02:30:20:d0:57:a7:d6:c7:f5: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:24:78:7E:F5:37:B1:C1:05:97:03:F7:6A:53:E4:5B:02:7C:79 X509v3 Authority Key Identifier: keyid:08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8b:09:05:48:fc:4b:97:f0:a5:a1:7a:16:aa:43:96:f8:ee: 5a:ae:6a:97:5f:3e:e3:f8:d5:54:75:e5:a5:d6:e2:8f:b2:f9: df:78:d5:42:6a:f2:77:c7:ae:fd:4b:cb:d8:fa:bb:74:d4:bc: b2:f9:07:b1:49:0c:ca:62:7f:e2:6a:61:69:9c:89:4e:35:12: 02:e7:ad:cf:9f:5b:b3:42:9f:be:7e:f1:a3:04:81:49:6e:50: 99:74:53:8a:7c:0f:0e:71:6c:e2:d8:45:50:b5:e4:f2:5c:00: c9:54:77:d5:e5:35:7e:9f:89:b0:c0:fb:00:f2:94:d0:9d:77: fb:f3:1e:db:9e:66:c7:4f:fe:c3:37:4a:9c:c5:f2:a7:2a:a6: 4a:6e:e2:a7:43:84:cc:31:e0:3d:c2:54:64:f1:2f:6d:4c:61: d0:b0:b1:42:1c:79:77:88:21:05:19:3e:8a:3c:06:61:c0:39: 5f:57:40:a2:ce:9c:a6:96:87:f5:69:54:36:0b:3c:1c:c6:35: d0:e5:f1:a4:76:36:c2:e1:64:75:f3:58:ae:58:51:6d:ce:99: ae:34:30:f1:c8:fb:82:ae:a0:10:8e:31:d0:57:60:93:de:d5: cc:00:2e:b2:b2:a6:ef:e3:f4:d5:93:3f:5b:dd:42:44:79:97: 52:92:fa:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RBNEExMTAvBgNVBAUTKDA4ODY5MUYxRjc4QkQ5Q0VGRUQ4MEQzNkQ2NTBENjc3 NjdBNkJEQjAwHhcNMjYwNzI2MjEyODIwWhcNMjYwODAyMjEyODIwWjAYMRYwFAYD VQQDEw02YTY2N2JmNS00OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqraU9hGWqrkrYfrnzv6FU/iiu39J1rZvvXL1ALaOf0vPCKbEVLixtebkHhbO 0MHt/k23tBtUQRKHiuwncvI3M7hDfGuD9sgG4zULFwAN3knSwyRADN7J9T87DamS lfReRlvVXT9b+Fk2PzEfQmGh5AJbdUxG27JbfY2m4tmTi58NLPZWj5KiYvEM1ja9 qSQvW4MeJvMv1K8zlE2upGYrtj0rsnBWG+Je7Hl3TAHbcmcw2aKOPqRNZxkeNAMo sin5wsgEGzOpiRhezxmxWmODMMdY6VqnJr7U0AXcENSIVWuBvj0btSNU2FtxFxGa KL8W5oQmDKsCMCDQV6fWx/WmHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2nJHh+ 9TexwQWXA/dqU+RbAnx5MB8GA1UdIwQYMBaAFAiGkfH3i9nO/tgNNtZQ1ndnpr2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REE0QS8wNTFEQUY1QTBE QzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJjNy0yQTAyMWxEV2QyZW12 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NJYVI4ZmVMMmM3LTJBMDIxbERXZDJlbXZiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REE0QS8wNTFEQUY1QTBEQzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJj Ny0yQTAyMWxEV2QyZW12YkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWosJBUj8S5fwpaF6FqpDlvjuWq5ql18+4/jVVHXlpdbij7L533jVQmryd8eu /UvL2Pq7dNS8svkHsUkMymJ/4mphaZyJTjUSAuetz59bs0Kfvn7xowSBSW5QmXRT inwPDnFs4thFULXk8lwAyVR31eU1fp+JsMD7APKU0J13+/Me255mx0/+wzdKnMXy pyqmSm7ip0OEzDHgPcJUZPEvbUxh0LCxQhx5d4ghBRk+ijwGYcA5X1dAos6cppaH 9WlUNgs8HMY10OXxpHY2wuFkdfNYrlhRbc6ZrjQw8cj7gq6gEI4x0Fdgk97VzAAu srKm7+P01ZM/W91CRHmXUpL6Pw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:00 2026 by rpki-client