$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft File: IKFf0591NMenolMf7YtaFwipP1I.mft (raw, json) Hash identifier: XuFsOGe/JV/TFYWAuzrJfTGH3ogl9iu2+mqKBmN8roI= Subject key identifier: D7:DE:F1:97:71:09:91:14:32:E8:B6:3C:26:BB:59:05:B1:05:15:12 Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52 Certificate issuer: /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft Manifest number: 26 Signing time: Mon 27 Jul 2026 11:12:23 +0000 Manifest this update: Mon 27 Jul 2026 11:12:23 +0000 Manifest next update: Mon 03 Aug 2026 11:12:23 +0000 Files and hashes: 1: IKFf0591NMenolMf7YtaFwipP1I.crl (hash: GXc/ElKeEI+fxuj4D6ALwELrnWRQuwnHiEeGTPuMeto=) 2: 01A09AD4529A11F1B2F4C97190833773.roa (hash: LeQAKpSHZPhzl/yDoMV2G62pZQxQb0sxO6TIaMOgO10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52 Validity Not Before: Jul 27 11:12:23 2026 GMT Not After : Aug 3 11:12:23 2026 GMT Subject: CN=6a673d17-e298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:56:6d:bd:a3:7c:43:5d:7b:2c:4c:96:2a: 70:db:de:4c:31:c2:c7:45:1e:f8:fc:e3:87:71:b8: f4:0c:b1:6b:cf:88:34:9e:7c:51:61:71:bf:f2:b3: f6:4e:04:9e:d3:76:e8:73:bf:b2:3e:58:a0:94:87: 44:1d:61:b3:54:2c:c3:32:d1:d4:ac:6f:c8:30:5d: 54:50:d0:15:50:49:7b:2e:13:f2:86:33:01:56:98: 73:36:60:9e:9c:b2:90:e1:bb:93:b5:f4:49:21:e9: c0:c6:48:c2:f4:c5:c2:12:d4:e4:9f:3c:fb:d0:b9: a4:3e:b1:2f:36:dd:34:5b:59:1d:e7:1c:f1:97:71: cd:e7:54:0a:84:19:a2:6c:dc:4d:76:c0:54:ec:c8: 57:0a:a4:cd:c9:aa:43:95:f3:ae:f5:f5:32:3f:16: 20:b1:7c:3c:ea:18:20:a3:19:bf:45:bc:00:2f:f8: 35:e2:fc:b8:8c:df:37:65:bb:b0:36:95:86:42:3d: ea:ec:5e:5b:e4:52:63:61:7c:13:e4:30:b7:ff:5d: dd:9b:1c:fa:24:c8:c8:cb:05:49:81:3c:88:58:66: 30:bf:4d:76:ec:7c:8a:f7:7d:99:d3:d4:d1:30:57: 3d:38:33:7f:02:8b:ea:52:57:01:d2:32:7d:38:ee: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DE:F1:97:71:09:91:14:32:E8:B6:3C:26:BB:59:05:B1:05:15:12 X509v3 Authority Key Identifier: keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:11:de:62:b7:60:5c:9c:6d:00:c0:5e:bf:c6:81:53:c6:ac: 06:9b:0e:97:9f:53:f9:19:e2:f4:51:fa:e7:4c:50:8a:cb:7f: 8b:ca:bd:d6:b6:a3:1a:21:39:c9:8c:9e:73:e8:95:12:f2:85: 36:3b:21:cb:b5:99:91:e9:45:8b:1f:f0:5a:4e:15:54:0c:4b: 75:f1:5e:d0:e3:71:1d:bd:33:1e:a5:b1:26:25:3a:f7:cf:2e: a2:9f:ab:60:2c:d9:a0:9d:d0:4e:25:3d:28:4f:31:59:2b:bd: 74:25:65:eb:61:47:9e:cd:dc:0b:ab:51:0c:1a:c4:57:7d:bc: 5a:f4:95:da:2f:f4:2d:81:f7:2f:62:90:9c:ea:6f:b6:c1:38: 0d:84:24:e5:bc:08:bd:73:a6:27:4a:7f:56:f1:4f:86:05:c0: 46:c4:20:db:b5:97:5d:b6:75:36:3c:2f:7e:31:33:45:52:1e: bc:f0:94:f9:ec:02:cf:6b:be:6a:d4:a3:2f:e7:ff:c5:f3:7c: da:15:54:6b:09:c8:d1:f4:b1:9d:9c:4d:75:a8:ae:c1:c0:b3: 12:f8:b2:fd:31:67:dd:90:31:2f:6e:9a:58:87:09:0e:50:17: e9:a8:c5:f8:17:ca:cb:a2:9c:81:a4:29:66:2d:89:0b:4a:e0: a0:94:99:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MUJCRTExMC8GA1UEBRMoMjBBMTVGRDM5Rjc1MzRDN0E3QTI1MzFGRUQ4QjVBMTcw OEE5M0Y1MjAeFw0yNjA3MjcxMTEyMjNaFw0yNjA4MDMxMTEyMjNaMBgxFjAUBgNV BAMTDTZhNjczZDE3LWUyOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbwlZtvaN8Q117LEyWKnDb3kwxwsdFHvj844dxuPQMsWvPiDSefFFhcb/ys/ZO BJ7Tduhzv7I+WKCUh0QdYbNULMMy0dSsb8gwXVRQ0BVQSXsuE/KGMwFWmHM2YJ6c spDhu5O19Ekh6cDGSML0xcIS1OSfPPvQuaQ+sS823TRbWR3nHPGXcc3nVAqEGaJs 3E12wFTsyFcKpM3JqkOV86719TI/FiCxfDzqGCCjGb9FvAAv+DXi/LiM3zdlu7A2 lYZCPersXlvkUmNhfBPkMLf/Xd2bHPokyMjLBUmBPIhYZjC/TXbsfIr3fZnT1NEw Vz04M38Ci+pSVwHSMn047tpHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU197xl3EJ kRQy6LY8JrtZBbEFFRIwHwYDVR0jBBgwFoAUIKFf0591NMenolMf7YtaFwipP1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxQkJFL0I3Qjk4RkFDNTI5 OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1lbm9sTWY3WXRhRndpcFAx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUtGZjA1OTFOTWVub2xNZjdZdGFGd2lwUDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx QkJFL0I3Qjk4RkFDNTI5OTExRjE4OTkxMTkzRDkwODMzNzczL0lLRmYwNTkxTk1l bm9sTWY3WXRhRndpcFAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5Ed5it2BcnG0AwF6/xoFTxqwGmw6Xn1P5GeL0UfrnTFCKy3+Lyr3WtqMaITnJ jJ5z6JUS8oU2OyHLtZmR6UWLH/BaThVUDEt18V7Q43EdvTMepbEmJTr3zy6in6tg LNmgndBOJT0oTzFZK710JWXrYUeezdwLq1EMGsRXfbxa9JXaL/QtgfcvYpCc6m+2 wTgNhCTlvAi9c6YnSn9W8U+GBcBGxCDbtZddtnU2PC9+MTNFUh688JT57ALPa75q 1KMv5//F83zaFVRrCcjR9LGdnE11qK7BwLMS+LL9MWfdkDEvbppYhwkOUBfpqMX4 F8rLopyBpClmLYkLSuCglJkK -----END CERTIFICATE-----Generated at Tue Jul 28 19:52:32 2026 by rpki-client