$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: I0Rkc/hHWFGCKF0Bv3VpOYNFy/PKAQsnVdb1GqbywiA= Subject key identifier: 46:3E:53:45:7B:AF:7B:2D:62:FC:FC:5F:2B:90:12:D5:C3:80:36:C5 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 162C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 161D Signing time: Tue 28 Jul 2026 16:47:53 +0000 Manifest this update: Tue 28 Jul 2026 16:47:52 +0000 Manifest next update: Tue 04 Aug 2026 16:47:52 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: KOSJ0p1E4qrO+ExQuYmoqwQXYoYGK87GyKfFilDh6+U=) 2: 85CB3A8A4A9D11F1A2093B779BEE528E.roa (hash: HPg54/GUrW2e3ZBjByhQdgJ3W185EITXukQZc69O0IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5676 (0x162c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Jul 28 16:47:52 2026 GMT Not After : Aug 4 16:47:52 2026 GMT Subject: CN=6a68dd38-1277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:a8:b6:3f:f6:60:3e:ca:a5:b0:3c:11:62: da:46:47:e6:57:9f:83:cf:0e:58:32:0a:aa:d7:70: 7c:43:61:ec:5a:1c:68:74:b6:09:9c:bc:2d:c5:db: d1:55:aa:a4:bf:a6:a0:9e:ca:b9:93:16:29:06:04: 54:11:d2:a9:43:6c:23:34:41:3b:b9:ce:c4:47:a2: 6c:a8:3d:31:cf:c3:6f:a0:92:6c:d7:18:a9:ea:97: 0c:42:12:6a:95:91:be:e6:e2:c0:f1:63:68:c8:5c: 69:fb:de:55:c8:2a:15:f2:9e:16:7f:2d:78:94:75: cd:2a:0a:8a:f6:de:1f:fe:f2:a5:ee:e0:ef:f4:86: 99:1b:ec:24:03:34:24:fe:7d:3c:8b:76:14:64:0f: 08:40:79:c9:8c:46:05:25:50:eb:c9:24:8b:24:50: 08:82:0f:df:ea:43:68:24:a5:de:10:28:33:08:68: 79:60:30:d6:9a:e7:89:f8:fa:8e:83:26:9b:49:a1: 56:e0:06:dd:bc:1a:54:d7:3b:5f:dc:08:5d:90:f7: 20:ca:94:c8:43:5f:08:71:46:bf:14:53:03:a0:77: c3:0a:a5:78:34:14:64:c8:dd:ef:d2:1b:b3:2c:d1: 74:b1:ea:2d:b1:29:a6:3c:95:cf:92:ed:d8:95:26: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3E:53:45:7B:AF:7B:2D:62:FC:FC:5F:2B:90:12:D5:C3:80:36:C5 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:58:79:b1:15:27:9c:df:fa:86:ef:03:2f:b1:3e:0a:6f: 8a:19:5f:1d:8a:df:3c:fd:9c:50:e6:68:10:af:41:b8:f0:5f: 52:78:12:ad:48:9e:2a:5b:56:0c:08:c1:50:f0:09:8e:e8:2b: 56:81:ec:41:81:16:9d:a8:28:b4:53:93:d9:80:82:37:28:56: a3:a7:6f:e1:95:4b:24:0c:84:58:4c:3a:10:2f:c2:fe:9f:d4: ca:62:b1:db:0c:42:cf:f9:a3:7f:31:13:51:11:59:b8:93:3e: a0:00:7d:2e:38:78:51:6f:39:80:c4:2b:42:72:50:bc:dc:2e: af:eb:ba:b4:19:ee:9e:81:7d:cc:d9:c9:d6:6e:0e:17:07:27: 46:d5:d9:c1:66:ed:a0:95:b3:82:39:5e:f5:a4:a2:ea:60:d1: 84:b9:56:e8:f9:35:3f:83:75:b9:51:e5:fb:0e:6f:c8:a8:a3: 20:b1:63:e4:72:6b:85:ba:0d:e7:9f:25:77:e8:ba:53:f0:ed: 46:1c:f4:18:fb:43:96:52:ef:8d:f9:49:8f:e7:d7:27:33:62: 56:95:a6:32:f1:95:59:e5:42:62:4b:ed:21:aa:e4:3d:08:54: e6:67:69:c3:d6:0f:42:31:38:ae:23:c0:dd:75:ef:ce:da:b5: 33:66:55:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjYwNzI4MTY0NzUyWhcNMjYwODA0MTY0NzUyWjAYMRYwFAYD VQQDEw02YTY4ZGQzOC0xMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkIGotj/2YD7KpbA8EWLaRkfmV5+Dzw5YMgqq13B8Q2HsWhxodLYJnLwtxdvR Vaqkv6agnsq5kxYpBgRUEdKpQ2wjNEE7uc7ER6JsqD0xz8NvoJJs1xip6pcMQhJq lZG+5uLA8WNoyFxp+95VyCoV8p4Wfy14lHXNKgqK9t4f/vKl7uDv9IaZG+wkAzQk /n08i3YUZA8IQHnJjEYFJVDrySSLJFAIgg/f6kNoJKXeECgzCGh5YDDWmueJ+PqO gyabSaFW4AbdvBpU1ztf3AhdkPcgypTIQ18IcUa/FFMDoHfDCqV4NBRkyN3v0huz LNF0seotsSmmPJXPku3YlSbu+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEY+U0V7 r3stYvz8XyuQEtXDgDbFMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuxYebEVJ5zf+obvAy+xPgpvihlfHYrfPP2cUOZoEK9BuPBfUngSrUieKltW DAjBUPAJjugrVoHsQYEWnagotFOT2YCCNyhWo6dv4ZVLJAyEWEw6EC/C/p/UymKx 2wxCz/mjfzETURFZuJM+oAB9Ljh4UW85gMQrQnJQvNwur+u6tBnunoF9zNnJ1m4O FwcnRtXZwWbtoJWzgjle9aSi6mDRhLlW6Pk1P4N1uVHl+w5vyKijILFj5HJrhboN 558ld+i6U/DtRhz0GPtDllLvjflJj+fXJzNiVpWmMvGVWeVCYkvtIarkPQhU5mdp w9YPQjE4riPA3XXvztq1M2ZVLw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:42:12 2026 by rpki-client