$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json) Hash identifier: WfiGgpTUb4dAk2iHvfo/8EnCpxkYaW193Fd8dW1aI2Y= Subject key identifier: EB:DC:D6:5D:D4:73:8A:B4:80:3E:83:1E:E6:EE:59:DB:21:07:B2:F3 Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Certificate serial: 1041 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft Manifest number: 1004 Signing time: Tue 28 Jul 2026 17:36:35 +0000 Manifest this update: Tue 28 Jul 2026 17:36:35 +0000 Manifest next update: Tue 04 Aug 2026 17:36:35 +0000 Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: leeeNgZuIBuckkSVN19vQ4Vv3QfnPsEmYsd+6pnH+II=) 2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: thWs/wjgTce2OH8uRbqin2U/9yRfT0t37bg0yz1umNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4161 (0x1041) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Validity Not Before: Jul 28 17:36:35 2026 GMT Not After : Aug 4 17:36:35 2026 GMT Subject: CN=6a68e8a3-0a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:38:ff:2d:2c:7d:92:20:66:7e:34:6e:d2: df:37:7b:7d:f3:91:26:aa:be:82:c6:0e:27:e8:23: 59:e9:94:c7:36:56:df:da:08:6a:0b:eb:11:59:47: 96:24:68:da:71:9f:31:ab:b3:42:31:ac:53:48:e7: 3e:ae:9f:bb:95:8a:cd:b8:f9:1d:a4:d6:48:b7:8a: ba:d9:e4:9e:1e:02:d8:62:78:5d:df:aa:d8:b6:87: e3:f9:24:3f:62:55:b7:2c:b0:1b:86:47:59:8c:f5: 42:36:56:05:30:c9:fd:55:f1:66:de:d6:c5:8c:02: 08:c4:31:2d:69:1c:76:5b:87:f4:1e:a8:37:f3:08: e2:4f:91:f9:0b:ae:2e:e8:f2:8a:1f:d4:22:59:3f: b2:8f:4c:95:46:b9:0d:0b:73:fc:14:1c:9b:78:bb: 9c:5f:dd:42:0a:89:f1:4b:d3:90:eb:4f:93:d2:d8: 42:19:b3:d4:27:52:39:6b:6a:a7:71:1d:49:f8:97: f6:b5:91:0e:7d:87:aa:a4:36:45:1f:9b:a5:0b:46: c5:41:74:f6:39:92:d4:e2:2a:7c:a9:3f:6c:5d:00: e5:f1:1d:9d:92:4f:c0:77:2e:69:ea:7c:2b:68:7b: 9e:10:40:b9:16:af:99:03:06:f1:87:e6:d7:4d:0a: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DC:D6:5D:D4:73:8A:B4:80:3E:83:1E:E6:EE:59:DB:21:07:B2:F3 X509v3 Authority Key Identifier: keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:6e:45:23:cd:83:ac:7a:b4:67:82:4b:9b:3b:dc:39:c7:40: 5c:b9:29:48:2a:3c:d2:78:90:e0:cf:ca:c1:51:74:c1:a6:bf: d9:40:0a:d0:db:72:76:ab:c7:e4:8d:a0:31:b3:f5:06:52:6a: af:c0:93:c6:9a:42:d8:04:6f:ca:22:06:5c:4a:a5:90:55:3f: 66:95:bd:de:5a:b5:dc:54:8a:13:42:7a:c5:4c:d9:07:50:46: f3:91:8a:6d:10:fb:8f:7e:f3:ae:99:6e:cb:1e:02:59:cf:7b: 13:7c:56:79:b3:d8:cb:49:9b:6c:7f:4b:e0:79:a8:7c:da:a2: cd:6d:50:36:ab:90:a6:b3:d0:36:e6:1d:3c:f6:2b:aa:4f:b2: c3:54:38:c6:32:89:ac:47:fc:70:c6:40:1c:98:3f:b3:7b:27: 2b:fc:18:2e:c1:29:99:76:b3:c2:ca:f4:5d:04:31:f7:33:91: e7:cf:a2:b0:71:6b:ff:db:0e:83:14:e6:bc:3b:2e:8a:7a:f5: 3c:9b:5f:4a:94:42:a0:56:4e:69:69:6c:6e:8f:60:cb:fa:78: f7:a7:59:c4:7e:b4:bf:1c:99:75:06:81:21:93:90:49:46:80: 93:64:fe:2a:35:77:fa:36:ed:8b:c9:a9:aa:58:79:35:18:c4: 27:ec:d5:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND MUNDMUY1QTIwHhcNMjYwNzI4MTczNjM1WhcNMjYwODA0MTczNjM1WjAYMRYwFAYD VQQDEw02YTY4ZThhMy0wYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziE4/y0sfZIgZn40btLfN3t985Emqr6Cxg4n6CNZ6ZTHNlbf2ghqC+sRWUeW JGjacZ8xq7NCMaxTSOc+rp+7lYrNuPkdpNZIt4q62eSeHgLYYnhd36rYtofj+SQ/ YlW3LLAbhkdZjPVCNlYFMMn9VfFm3tbFjAIIxDEtaRx2W4f0Hqg38wjiT5H5C64u 6PKKH9QiWT+yj0yVRrkNC3P8FBybeLucX91CConxS9OQ60+T0thCGbPUJ1I5a2qn cR1J+Jf2tZEOfYeqpDZFH5ulC0bFQXT2OZLU4ip8qT9sXQDl8R2dkk/Ady5p6nwr aHueEEC5Fq+ZAwbxh+bXTQo3ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvc1l3U c4q0gD6DHubuWdshB7LzMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5 YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUQwRi83NEJFMzhENjgwQ0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1O YnB0UlpkbGxKR3pCekI5YUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGG5FI82DrHq0Z4JLmzvcOcdAXLkpSCo80niQ4M/KwVF0waa/2UAK0NtydqvH 5I2gMbP1BlJqr8CTxppC2ARvyiIGXEqlkFU/ZpW93lq13FSKE0J6xUzZB1BG85GK bRD7j37zrpluyx4CWc97E3xWebPYy0mbbH9L4HmofNqizW1QNquQprPQNuYdPPYr qk+yw1Q4xjKJrEf8cMZAHJg/s3snK/wYLsEpmXazwsr0XQQx9zOR58+isHFr/9sO gxTmvDsuinr1PJtfSpRCoFZOaWlsbo9gy/p496dZxH60vxyZdQaBIZOQSUaAk2T+ KjV3+jbti8mpqlh5NRjEJ+zV4A== -----END CERTIFICATE-----Generated at Wed Jul 29 01:18:01 2026 by rpki-client