$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: LtNrEH512+uJcPRM+/gQL/WpB9nlxuJte3rLvoCWhAY= Subject key identifier: 87:2E:BA:D3:CC:51:B7:A7:F4:FF:B8:AF:5A:07:E1:3A:84:C7:6F:94 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 02B5 Signing time: Mon 27 Jul 2026 02:46:03 +0000 Manifest this update: Mon 27 Jul 2026 02:46:02 +0000 Manifest next update: Mon 03 Aug 2026 02:46:02 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: gRQxsOJxtXRf5QFPBGRW/yfcb9Yc9q1uAsJAYuLrJ10=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: 0C9mx4bIr2S3KsrxXmmh+6ZkoQeTAaGyUsfLf68eqPo=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 63Mc6PfxkqkDwQtpOI9U8lomk1Cxh7mzQMzSOn5gi4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Jul 27 02:46:02 2026 GMT Not After : Aug 3 02:46:02 2026 GMT Subject: CN=6a66c66a-a18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:23:7a:eb:8a:61:17:ec:6f:8b:66:7f:ad: 02:66:2b:49:26:fe:57:12:e9:73:a5:2b:a5:bc:e4: 77:e4:a1:5c:66:e7:92:1f:78:0a:ab:56:48:38:95: 17:06:d3:31:f5:63:5f:9b:1d:af:c4:2c:5a:db:6b: a8:a6:9d:86:fb:5e:ef:0c:82:ee:42:b7:bf:35:be: fb:90:50:51:ea:20:dd:b3:e6:77:c9:c2:68:32:78: 4b:c8:de:ab:9a:8e:55:d1:41:cf:96:c1:79:d8:d0: 1c:e0:58:7a:23:4b:76:19:fa:07:62:c9:16:86:21: 2b:99:06:73:ba:d5:cc:2f:a3:16:73:7c:51:1e:39: c1:29:96:22:26:15:7f:cb:88:d3:89:ac:15:31:d8: d2:df:69:61:62:f8:82:08:54:22:39:e9:60:65:9a: fa:28:89:8b:3b:e1:f3:28:e2:58:17:38:c1:f0:fc: 99:05:a3:b0:cb:1c:53:2e:39:04:df:c0:55:41:71: 5f:68:4a:60:d8:9a:45:47:37:5d:5b:5f:1f:02:36: 5a:fd:bf:c3:7a:39:51:45:fa:cd:d5:16:ce:8b:0e: 26:1b:1d:e2:f5:ae:a8:ee:a3:41:c9:4c:28:bc:a6: e7:be:2e:c6:f0:29:d5:e0:f3:d2:36:79:e1:82:90: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2E:BA:D3:CC:51:B7:A7:F4:FF:B8:AF:5A:07:E1:3A:84:C7:6F:94 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9c:26:72:46:3b:5a:f3:85:fc:69:04:c9:26:52:ab:03:13: 6d:72:9e:62:92:bb:02:63:dc:b6:7e:c3:81:ba:f6:95:c5:3b: 7a:e1:4e:30:c4:91:f2:81:bb:40:bc:a8:ad:11:38:f7:d4:15: 4c:31:9f:94:90:78:61:69:dc:f3:c7:01:26:fd:da:d2:09:b1: ff:7e:82:c7:02:4a:4d:ae:51:f7:bc:fe:b7:0b:38:e0:bc:06: ae:8e:97:ab:48:3d:d6:96:7b:03:f0:8e:8d:3c:53:10:b6:18: fc:22:54:58:ce:76:49:96:d5:6b:19:fe:88:94:f5:ad:e2:13: 6f:85:85:34:cd:48:8a:2b:10:16:9f:6e:03:99:b9:63:d7:73: 94:be:02:02:26:63:f4:53:82:98:4e:6b:2d:29:ba:4b:6d:c0: 08:3a:94:f0:1c:99:87:35:3f:6d:8e:cb:b6:cc:19:e1:45:1b: f7:a2:89:c1:80:8f:36:c4:40:bd:7e:98:f2:04:7e:55:81:ad: 88:41:ad:ae:fc:8e:fc:47:78:9f:61:36:bb:35:ee:58:14:32: 31:30:cf:53:e1:b7:73:57:7d:bc:5c:25:3e:ea:52:a2:72:75: 96:c7:2c:57:d1:e5:f9:f3:71:48:03:e8:65:7c:8e:2d:38:bf: 38:b7:95:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjYwNzI3MDI0NjAyWhcNMjYwODAzMDI0NjAyWjAYMRYwFAYD VQQDEw02YTY2YzY2YS1hMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYYjeuuKYRfsb4tmf60CZitJJv5XEulzpSulvOR35KFcZueSH3gKq1ZIOJUX BtMx9WNfmx2vxCxa22uopp2G+17vDILuQre/Nb77kFBR6iDds+Z3ycJoMnhLyN6r mo5V0UHPlsF52NAc4Fh6I0t2GfoHYskWhiErmQZzutXML6MWc3xRHjnBKZYiJhV/ y4jTiawVMdjS32lhYviCCFQiOelgZZr6KImLO+HzKOJYFzjB8PyZBaOwyxxTLjkE 38BVQXFfaEpg2JpFRzddW18fAjZa/b/DejlRRfrN1RbOiw4mGx3i9a6o7qNByUwo vKbnvi7G8CnV4PPSNnnhgpC0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcuutPM Uben9P+4r1oH4TqEx2+UMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpwmckY7WvOF/GkEySZSqwMTbXKeYpK7AmPctn7Dgbr2lcU7euFOMMSR8oG7 QLyorRE499QVTDGflJB4YWnc88cBJv3a0gmx/36CxwJKTa5R97z+tws44LwGro6X q0g91pZ7A/COjTxTELYY/CJUWM52SZbVaxn+iJT1reITb4WFNM1IiisQFp9uA5m5 Y9dzlL4CAiZj9FOCmE5rLSm6S23ACDqU8ByZhzU/bY7LtswZ4UUb96KJwYCPNsRA vX6Y8gR+VYGtiEGtrvyO/Ed4n2E2uzXuWBQyMTDPU+G3c1d9vFwlPupSonJ1lscs V9Hl+fNxSAPoZXyOLTi/OLeVrA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:57:18 2026 by rpki-client