$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: pKs9fWiPjCg5BUFgvYRQdyp7svxnMoAbK8tw84KQbYU= Subject key identifier: E4:FF:70:13:99:9F:40:2C:C4:6F:99:13:96:2A:A5:82:96:BD:6F:A8 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0CCA Signing time: Sun 26 Jul 2026 18:49:01 +0000 Manifest this update: Sun 26 Jul 2026 18:49:01 +0000 Manifest next update: Sun 02 Aug 2026 18:49:01 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: 4LB0aMg7RPWEJaPsxNkVqsZKYlZHTP4WjQ8uXKHrTi8=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Jul 26 18:49:01 2026 GMT Not After : Aug 2 18:49:01 2026 GMT Subject: CN=6a66569d-d296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:f4:65:c0:02:ce:fa:65:15:be:10:19:ec: 5c:21:ea:4a:b4:d6:7b:e0:3e:99:4e:3d:b5:e7:cf: 17:79:bb:ef:11:e6:75:e6:62:4b:55:a5:91:7a:a7: 49:10:e7:31:13:06:7d:ca:6a:19:ad:22:8c:54:b6: 88:62:b0:2f:5b:5f:2c:b1:ed:ef:b4:68:70:f0:11: 41:d6:6e:4a:c0:6d:8e:1a:b5:05:c5:4d:c9:88:45: 4f:b3:f6:e6:be:58:f7:7f:44:95:fa:5f:a2:c7:f3: 1f:46:46:06:58:d8:72:09:eb:b0:f6:41:d2:ed:25: 51:be:b6:0e:40:ec:fb:e7:3e:bc:b3:d0:1d:b4:a7: 38:3c:54:d7:d9:56:6d:79:a2:00:60:1b:f0:fa:a3: a7:20:5f:4c:65:0b:be:46:66:fb:27:5a:db:73:9e: 39:83:4f:50:ef:74:6a:c2:88:93:97:54:37:24:94: 38:56:b1:8c:14:d9:19:c2:68:49:b9:c2:6f:27:97: 5b:32:29:73:69:e1:a1:fd:e9:7f:49:0b:8d:f5:ce: 7b:21:8d:e2:d1:8a:6f:b9:78:16:c7:35:94:f0:69: a6:d7:6f:09:c1:f5:42:3f:bc:b1:8e:03:72:7a:1d: 20:f6:d0:9b:37:49:60:8c:58:08:e2:c7:0e:33:9b: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FF:70:13:99:9F:40:2C:C4:6F:99:13:96:2A:A5:82:96:BD:6F:A8 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d2:ce:54:93:59:d3:ea:4d:16:36:47:66:7d:da:33:f4:07: 02:24:e7:6e:f9:37:a7:54:8e:2c:f5:d8:6e:91:d6:c4:2a:8f: 70:13:f6:ec:bd:f6:fe:5b:cc:d5:18:c9:aa:30:20:51:80:af: c2:6f:e4:80:35:57:c1:93:b2:ea:66:8d:bf:0d:9f:54:f5:6b: 11:56:f2:7b:2f:6e:a5:31:91:1a:f0:9e:00:dd:64:66:e0:4f: d3:b4:79:b5:d4:3e:0a:66:ed:00:73:79:dc:92:82:df:20:f5: a7:7d:c8:86:65:d7:f5:6f:09:da:a3:9c:5b:6f:81:57:da:95: fb:2c:ab:8f:91:2a:40:fb:e7:7f:62:59:73:2a:7d:e0:12:1e: b8:66:08:f0:be:c9:7d:68:97:00:2c:09:c4:0f:58:b8:c0:5f: 04:14:52:7e:3f:03:8b:62:e3:79:ae:b3:f0:6a:18:81:f8:c2: 38:6b:14:be:b8:5c:5b:41:ad:41:e4:a2:c6:d2:bd:93:8f:77: 12:07:c4:fb:1b:d5:08:ab:82:14:6f:ad:c0:ac:bb:24:f5:6f: 7c:3f:93:0a:a4:5e:82:4b:9f:c0:52:e1:a5:32:15:e4:01:67: 98:ed:19:90:d6:8a:05:7d:bd:b4:bb:f6:8a:bb:90:38:f6:cd: e0:7b:ed:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjYwNzI2MTg0OTAxWhcNMjYwODAyMTg0OTAxWjAYMRYwFAYD VQQDEw02YTY2NTY5ZC1kMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnT0ZcACzvplFb4QGexcIepKtNZ74D6ZTj21588XebvvEeZ15mJLVaWReqdJ EOcxEwZ9ymoZrSKMVLaIYrAvW18sse3vtGhw8BFB1m5KwG2OGrUFxU3JiEVPs/bm vlj3f0SV+l+ix/MfRkYGWNhyCeuw9kHS7SVRvrYOQOz75z68s9AdtKc4PFTX2VZt eaIAYBvw+qOnIF9MZQu+Rmb7J1rbc545g09Q73RqwoiTl1Q3JJQ4VrGMFNkZwmhJ ucJvJ5dbMilzaeGh/el/SQuN9c57IY3i0YpvuXgWxzWU8Gmm128JwfVCP7yxjgNy eh0g9tCbN0lgjFgI4scOM5tBOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOT/cBOZ n0AsxG+ZE5YqpYKWvW+oMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtLOVJNZ0+pNFjZHZn3aM/QHAiTnbvk3p1SOLPXYbpHWxCqPcBP27L32/lvM 1RjJqjAgUYCvwm/kgDVXwZOy6maNvw2fVPVrEVbyey9upTGRGvCeAN1kZuBP07R5 tdQ+CmbtAHN53JKC3yD1p33IhmXX9W8J2qOcW2+BV9qV+yyrj5EqQPvnf2JZcyp9 4BIeuGYI8L7JfWiXACwJxA9YuMBfBBRSfj8Di2Ljea6z8GoYgfjCOGsUvrhcW0Gt QeSixtK9k493EgfE+xvVCKuCFG+twKy7JPVvfD+TCqRegkufwFLhpTIV5AFnmO0Z kNaKBX29tLv2iruQOPbN4HvtRQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:23:48 2026 by rpki-client