$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: O3BejOxrwg0MtY5biacWPzyscHRZ+BOAdCvQUuYuD1M= Subject key identifier: 25:6A:80:DC:C2:33:1A:70:4F:DB:A3:D0:E1:25:1B:BD:47:D3:11:2B Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 1461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 1423 Signing time: Tue 28 Jul 2026 17:01:42 +0000 Manifest this update: Tue 28 Jul 2026 17:01:41 +0000 Manifest next update: Tue 04 Aug 2026 17:01:41 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: jg882PC8px01eHCdstaAVz5qDjw/MPHyrz6Co2km1ug=) 2: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=) 3: qyLwIBj-Wx6AmSM1hxcj9vJ-hvc.asa (hash: 5ab75aSGsxcPedNr8xBXYZisce1dTfJNawoGkCK2fWU=) 4: zSE0GmBxc2vuy2NqhgpEC2PZSVM.asa (hash: S0SNtYzstV/TE3XHy8x7+BvtycgWeW73p6rfD0JzYgg=) 5: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=) 6: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=) 7: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5217 (0x1461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Jul 28 17:01:41 2026 GMT Not After : Aug 4 17:01:41 2026 GMT Subject: CN=6a68e076-fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:c0:e7:c1:4b:9a:8b:f9:76:95:f9:aa:44: f9:1a:79:9b:28:b5:b8:15:7b:6d:5c:bf:72:8d:6a: f7:3e:e7:a7:cf:7c:39:2b:6a:34:5b:fa:16:73:47: a9:30:c5:b3:3e:e8:c8:6d:fc:45:3e:fe:51:2b:b1: 42:b1:c8:da:7e:8f:58:8f:fc:21:bf:b5:5b:fd:47: 4b:77:77:02:91:09:8d:51:73:34:3d:1a:f6:4b:6f: 5c:1d:7c:24:13:05:05:9c:4b:27:9a:85:6f:fd:cd: a0:b9:5b:9b:4c:da:18:87:1e:10:3c:3f:f4:e2:2a: f9:b5:5b:d2:55:cb:00:33:03:b5:26:7e:f8:12:d2: f7:c4:45:85:b7:ad:c9:07:32:92:f8:b3:63:6e:13: 57:76:92:c6:e1:3a:4c:85:7a:c2:53:4d:3b:4f:3e: bb:fc:c2:62:e4:8d:8a:b6:4a:8e:c4:78:61:a1:84: 3a:70:f5:b8:07:fc:e7:9b:2d:7b:bb:c7:65:41:fb: 29:01:88:93:4c:cc:a4:96:9d:24:02:cc:f2:84:88: 52:60:2a:52:a4:29:7c:41:dc:16:5d:06:c9:50:25: 06:2d:d6:9d:3a:8c:f2:ea:9a:e8:2a:78:a0:cc:e2: f4:1c:ca:dc:14:95:43:c5:73:cb:73:04:2c:be:e6: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:80:DC:C2:33:1A:70:4F:DB:A3:D0:E1:25:1B:BD:47:D3:11:2B X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:34:03:42:03:c0:f3:03:69:c6:6d:61:1f:d4:b6:fc:7e:48: ef:cd:72:af:4c:c3:11:fd:5c:0e:3f:1a:8f:d8:63:a4:f8:32: e0:77:dc:88:76:d4:cd:80:5c:1e:6e:68:cd:ab:ad:43:ac:8c: 13:04:d8:83:a9:72:80:1c:40:16:55:42:54:f2:d3:6a:6e:c5: 8a:93:74:26:f6:13:4e:91:c4:9b:36:eb:d2:ab:ff:56:83:a3: 2b:da:b8:7b:71:85:3d:c2:b0:5c:3c:00:47:5d:de:d7:1c:5e: 58:e9:ca:7b:22:41:7e:cf:bd:9a:6c:3b:50:0f:55:18:a4:f1: 46:1a:8b:cc:c2:77:60:22:7d:44:db:f1:11:a0:83:a2:7a:76: 28:71:ca:2e:29:ca:e7:9b:4d:86:a2:5b:14:36:fc:56:e6:c5: 09:04:ad:ce:9f:9e:8d:24:ab:dd:e9:8e:ea:a4:13:b5:21:26: d9:e2:8c:20:af:05:5e:9d:dc:ff:88:4d:b6:2a:75:16:73:06: 2c:c1:44:b6:0f:f0:b6:a5:f0:a9:36:57:b4:29:62:9e:a3:db: 56:bf:a4:5b:62:72:6c:0c:ba:cb:3f:ff:c4:99:d3:a6:69:b6: e0:9b:37:fe:d9:f5:40:60:c2:9a:0c:a7:8f:66:2e:de:93:3a: f6:2f:28:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjYwNzI4MTcwMTQxWhcNMjYwODA0MTcwMTQxWjAYMRYwFAYD VQQDEw02YTY4ZTA3Ni1mZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzArA58FLmov5dpX5qkT5GnmbKLW4FXttXL9yjWr3Puenz3w5K2o0W/oWc0ep MMWzPujIbfxFPv5RK7FCscjafo9Yj/whv7Vb/UdLd3cCkQmNUXM0PRr2S29cHXwk EwUFnEsnmoVv/c2guVubTNoYhx4QPD/04ir5tVvSVcsAMwO1Jn74EtL3xEWFt63J BzKS+LNjbhNXdpLG4TpMhXrCU007Tz67/MJi5I2KtkqOxHhhoYQ6cPW4B/znmy17 u8dlQfspAYiTTMyklp0kAszyhIhSYCpSpCl8QdwWXQbJUCUGLdadOozy6proKnig zOL0HMrcFJVDxXPLcwQsvuYvJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVqgNzC MxpwT9uj0OElG71H0xErMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbzQDQgPA8wNpxm1hH9S2/H5I781yr0zDEf1cDj8aj9hjpPgy4HfciHbUzYBc Hm5ozautQ6yMEwTYg6lygBxAFlVCVPLTam7FipN0JvYTTpHEmzbr0qv/VoOjK9q4 e3GFPcKwXDwAR13e1xxeWOnKeyJBfs+9mmw7UA9VGKTxRhqLzMJ3YCJ9RNvxEaCD onp2KHHKLinK55tNhqJbFDb8VubFCQStzp+ejSSr3emO6qQTtSEm2eKMIK8FXp3c /4hNtip1FnMGLMFEtg/wtqXwqTZXtClinqPbVr+kW2JybAy6yz//xJnTpmm24Js3 /tn1QGDCmgynj2Yu3pM69i8oRQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:59:41 2026 by rpki-client