$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: FZAF/z78ycxXigKpTRHe9jShOUyZou3FfnQ8B1cdLEM= Subject key identifier: 4C:1E:1E:06:B7:64:C3:D7:F4:EB:59:5F:C2:77:B9:FC:EC:8B:E4:89 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 08D5 Signing time: Tue 28 Jul 2026 20:47:26 +0000 Manifest this update: Tue 28 Jul 2026 20:47:26 +0000 Manifest next update: Tue 04 Aug 2026 20:47:26 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: tVbiAZss/2le9zoqOqxZRCMzHpIAEk+Lc7pKPPdzKfs=) 2: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=) 3: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=) 4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Jul 28 20:47:26 2026 GMT Not After : Aug 4 20:47:26 2026 GMT Subject: CN=6a69155e-33c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:40:38:0a:22:2c:27:1d:91:e0:a1:96:fc: 67:3a:b8:16:41:1c:fe:61:bf:54:55:6d:a5:f1:5d: ed:a9:35:5b:dc:24:15:5b:29:ce:6a:37:ee:15:6e: a0:e1:e1:b0:b8:54:b7:7d:9a:1e:85:4d:fa:86:2a: e1:d8:da:72:95:b6:0b:83:62:93:d8:3a:c1:4e:18: f9:4a:b5:b9:ba:8c:86:66:25:83:ec:64:b0:d4:76: 60:85:c5:ff:8b:85:4a:b6:33:1b:81:94:21:d2:35: 5e:21:3a:bf:33:c3:24:4d:e2:70:50:90:07:7a:35: 08:9d:be:97:de:ed:8e:93:15:8c:f4:14:b8:c2:f1: b3:6b:33:51:83:5c:0c:51:f2:53:01:96:eb:16:e8: 27:21:38:a9:3e:11:43:4d:1d:6d:85:08:c5:c9:47: 90:58:e1:76:c1:7a:43:0e:43:f3:b3:ad:0c:cd:f6: 30:9f:5f:5e:6a:37:1b:29:6d:af:79:b4:25:a4:0f: 2a:9b:b7:f0:d4:8a:d0:69:90:94:dd:45:cc:e5:51: 24:bf:c3:af:53:04:d9:4c:42:15:98:5b:86:7a:2d: fe:32:2a:5a:72:a8:4c:0c:d7:0f:c0:b6:42:d3:19: 9a:09:b7:97:4d:92:1a:c0:0e:a0:14:7a:e6:49:b8: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:1E:06:B7:64:C3:D7:F4:EB:59:5F:C2:77:B9:FC:EC:8B:E4:89 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:dc:7a:1f:ef:b7:a5:71:be:61:cf:db:5e:3c:24:b9:43:68: 5d:88:7d:ef:58:16:c1:f4:d1:2d:5d:a5:ea:87:0b:08:0a:2a: 08:4c:b8:01:11:9b:6b:46:91:b8:67:9e:8b:3a:7b:e9:95:48: 4e:c8:da:69:c2:38:fd:aa:5f:52:ed:79:5a:eb:30:56:b2:92: 11:9c:c8:e2:25:df:ea:44:1c:34:b7:46:79:d1:fe:ca:e3:7f: f2:9c:ce:fa:e3:6b:38:8e:c1:bc:d6:2e:f6:47:d0:4b:a8:a7: c8:a1:4f:fc:a3:52:c0:7b:f9:fc:f6:cc:0b:a6:01:35:d8:f6: 25:26:b6:2a:87:5c:20:9b:34:a5:3f:f8:69:a5:95:fb:cc:66: a8:71:ed:7d:22:c5:7f:18:63:57:39:cc:d1:58:17:33:fb:9a: 7d:18:1c:48:13:b2:a7:57:62:cc:2c:7c:b1:d2:2f:26:ca:f0: 49:a4:a0:92:4c:3e:0f:70:4b:19:41:9f:eb:cb:05:49:69:45: 74:dd:93:83:fb:7a:84:cb:89:f5:2a:16:a0:5c:cb:ae:dd:9c: dd:91:de:34:3e:7e:45:ab:b1:42:66:4d:93:ef:a5:82:49:b6: 85:96:c1:12:dc:cb:c1:aa:d2:86:18:5b:fd:ae:98:03:ec:fa: ea:20:27:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjYwNzI4MjA0NzI2WhcNMjYwODA0MjA0NzI2WjAYMRYwFAYD VQQDEw02YTY5MTU1ZS0zM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynZAOAoiLCcdkeChlvxnOrgWQRz+Yb9UVW2l8V3tqTVb3CQVWynOajfuFW6g 4eGwuFS3fZoehU36hirh2NpylbYLg2KT2DrBThj5SrW5uoyGZiWD7GSw1HZghcX/ i4VKtjMbgZQh0jVeITq/M8MkTeJwUJAHejUInb6X3u2OkxWM9BS4wvGzazNRg1wM UfJTAZbrFugnITipPhFDTR1thQjFyUeQWOF2wXpDDkPzs60MzfYwn19eajcbKW2v ebQlpA8qm7fw1IrQaZCU3UXM5VEkv8OvUwTZTEIVmFuGei3+MipacqhMDNcPwLZC 0xmaCbeXTZIawA6gFHrmSbgqZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEweHga3 ZMPX9OtZX8J3ufzsi+SJMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdx6H++3pXG+Yc/bXjwkuUNoXYh971gWwfTRLV2l6ocLCAoqCEy4ARGba0aR uGeeizp76ZVITsjaacI4/apfUu15WuswVrKSEZzI4iXf6kQcNLdGedH+yuN/8pzO +uNrOI7BvNYu9kfQS6inyKFP/KNSwHv5/PbMC6YBNdj2JSa2KodcIJs0pT/4aaWV +8xmqHHtfSLFfxhjVznM0VgXM/uafRgcSBOyp1dizCx8sdIvJsrwSaSgkkw+D3BL GUGf68sFSWlFdN2Tg/t6hMuJ9SoWoFzLrt2c3ZHeND5+RauxQmZNk++lgkm2hZbB EtzLwarShhhb/a6YA+z66iAnbQ== -----END CERTIFICATE-----Generated at Wed Jul 29 06:58:14 2026 by rpki-client