$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: ywv0oDjv2QsC+8NZ0wphLaQC1a9NofjVj0pf0ojx3wA= Subject key identifier: 8F:96:BE:FF:53:23:44:49:07:D1:45:78:66:17:7E:DB:BD:07:EF:B3 Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 71 Signing time: Mon 27 Jul 2026 10:11:02 +0000 Manifest this update: Mon 27 Jul 2026 10:11:01 +0000 Manifest next update: Mon 03 Aug 2026 10:11:01 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: QRrWRYgRjUfnTvUuQtn94YdNX6dXsx3orUGQ0/xmqM0=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: Jul 27 10:11:01 2026 GMT Not After : Aug 3 10:11:01 2026 GMT Subject: CN=6a672eb6-4eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:44:56:05:08:89:d4:3a:5b:19:fa:97:2f: a9:87:9d:b8:13:8a:22:8d:45:c2:16:5a:74:ab:8a: d3:48:3d:df:f0:c3:44:1a:38:1c:4e:45:38:26:86: c2:fd:4a:63:fb:9c:d4:33:0d:f6:97:ee:d4:02:39: 6d:12:d1:38:8f:b1:26:e0:da:96:92:84:0a:ca:c0: 35:09:0d:9a:3e:15:9c:77:94:9a:6c:53:8c:b7:a1: 5e:8e:f8:e4:91:d7:91:26:99:73:0d:9c:30:ce:ab: 49:1c:86:5c:f8:aa:b2:17:ea:ea:2a:89:09:c3:95: 2f:4c:0e:9d:1e:4e:f3:db:6e:23:18:17:8e:b4:09: a1:39:fa:89:88:8f:26:3c:98:f0:92:c0:ed:be:ba: c5:aa:10:0a:f2:fb:bf:70:91:04:15:be:91:4d:da: d2:21:6d:5f:1f:3a:ad:1f:e4:9c:90:e1:30:72:4a: e6:9e:91:08:0d:a4:a4:b2:bf:99:cc:97:c1:51:e0: e8:10:0f:8a:d1:77:b9:7a:b5:a9:31:19:f4:65:d3: 76:cd:bf:5e:c3:26:37:50:57:1a:42:f4:03:46:01: 38:51:c6:47:00:ad:3c:04:5a:2c:fb:e2:ab:12:0a: df:4b:2e:7c:2c:e9:68:e9:a8:cc:1f:ad:52:b4:4c: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:96:BE:FF:53:23:44:49:07:D1:45:78:66:17:7E:DB:BD:07:EF:B3 X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:bf:53:54:d0:de:4f:35:aa:0b:fe:41:b0:0e:e8:8b:ab:2b: fa:ba:10:8a:06:83:cc:05:06:dd:b2:7b:5c:3a:39:25:5d:3d: e5:c8:b3:3d:d9:15:05:0a:76:a1:47:e8:ea:fa:04:d0:72:4c: 2e:81:6f:42:69:56:32:37:6d:21:c1:28:95:26:09:19:63:17: 3e:16:38:3e:1c:cf:60:f9:f0:21:ec:bb:9e:78:08:7d:45:6e: e2:72:09:fb:5f:0f:2f:03:73:8e:f5:ac:9c:72:cd:45:2d:a5: 95:7e:69:66:91:53:b6:ae:5f:aa:67:c6:60:d9:62:b0:19:de: 2d:72:02:b7:83:a3:b4:3b:74:4e:5b:a3:7d:95:76:e8:cb:75: f3:55:ff:ac:73:7f:25:9f:eb:e2:61:80:3a:d6:43:ce:6f:9d: b5:3c:1c:57:13:ca:88:ff:28:25:e0:82:88:b1:e5:83:e9:86: 22:65:b0:2b:5c:22:f3:ef:cb:3b:00:01:3a:b8:d1:f5:53:b5: 6f:16:58:b4:ff:92:9c:30:54:72:99:b6:6a:39:cc:d0:c1:20: ce:0b:83:16:70:3b:65:40:e1:ee:21:e7:c3:d5:5a:0b:45:eb: cb:0e:be:2a:c5:b9:48:40:ef:a4:14:d8:c0:50:c0:ef:a6:da: 98:de:08:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzJFQjExMC8GA1UEBRMoMjAwM0VFNDA1MjI5RDg4Qzk0OEI3NkRDMTk1RDQzMEJD MDIwQUYxRTAeFw0yNjA3MjcxMDExMDFaFw0yNjA4MDMxMDExMDFaMBgxFjAUBgNV BAMTDTZhNjcyZWI2LTRlZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoT0RWBQiJ1DpbGfqXL6mHnbgTiiKNRcIWWnSritNIPd/ww0QaOBxORTgmhsL9 SmP7nNQzDfaX7tQCOW0S0TiPsSbg2paShArKwDUJDZo+FZx3lJpsU4y3oV6O+OSR 15EmmXMNnDDOq0kchlz4qrIX6uoqiQnDlS9MDp0eTvPbbiMYF460CaE5+omIjyY8 mPCSwO2+usWqEAry+79wkQQVvpFN2tIhbV8fOq0f5JyQ4TBySuaekQgNpKSyv5nM l8FR4OgQD4rRd7l6takxGfRl03bNv17DJjdQVxpC9ANGAThRxkcArTwEWiz74qsS Ct9LLnws6WjpqMwfrVK0TFeVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj5a+/1Mj REkH0UV4Zhd+270H77MwHwYDVR0jBBgwFoAUIAPuQFIp2IyUi3bcGV1DC8Agrx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzg5OTcyNTEyRTUz NDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSUFQdVFGSXAySXlVaTNiY0dWMURDOEFncng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MkVCLzg5OTcyNTEyRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5 VWkzYmNHVjFEQzhBZ3J4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAv1NU0N5PNaoL/kGwDuiLqyv6uhCKBoPMBQbdsntcOjklXT3lyLM92RUFCnah R+jq+gTQckwugW9CaVYyN20hwSiVJgkZYxc+Fjg+HM9g+fAh7LueeAh9RW7icgn7 Xw8vA3OO9ayccs1FLaWVfmlmkVO2rl+qZ8Zg2WKwGd4tcgK3g6O0O3ROW6N9lXbo y3XzVf+sc38ln+viYYA61kPOb521PBxXE8qI/ygl4IKIseWD6YYiZbArXCLz78s7 AAE6uNH1U7VvFli0/5KcMFRymbZqOczQwSDOC4MWcDtlQOHuIefD1VoLRevLDr4q xblIQO+kFNjAUMDvptqY3gib -----END CERTIFICATE-----Generated at Wed Jul 29 06:43:06 2026 by rpki-client