$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: yNfHgBCpexsDLj1+aJsDzyjd016g60srwtfUX9Qe4Z8= Subject key identifier: 90:83:BD:1A:FF:21:BA:4F:CB:85:CC:27:4C:4C:DF:32:92:45:77:5F Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 02AD Signing time: Mon 27 Jul 2026 02:49:09 +0000 Manifest this update: Mon 27 Jul 2026 02:49:08 +0000 Manifest next update: Mon 03 Aug 2026 02:49:08 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: Yv7uNq/PbbyqrDU434xrrOlouoWivOh0L5+eJA+MFuM=) 2: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) 3: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 4: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Jul 27 02:49:08 2026 GMT Not After : Aug 3 02:49:08 2026 GMT Subject: CN=6a66c724-de89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:5f:24:66:53:15:0a:41:77:b8:01:3c:43: ec:a7:12:bb:41:7f:34:58:95:c2:4f:5e:44:3f:cd: 7a:20:df:99:03:d2:f8:99:dc:71:bf:4f:dc:92:68: a3:43:8e:1d:89:4d:8a:85:b2:88:4d:df:ff:e4:4a: a3:7b:6d:6e:c7:d4:99:8d:55:ca:23:d2:c2:48:5e: 6e:1f:12:52:1d:1d:de:96:91:76:f6:ae:38:31:e0: ce:7b:3c:07:08:5d:a4:71:4a:96:42:63:db:5a:59: 05:7b:d5:3e:4b:8c:2d:38:db:41:08:b7:8d:5d:5a: f5:6f:51:03:a1:ef:4e:7a:94:b5:6c:73:6f:ac:42: 9f:4b:42:00:e6:bb:fd:4b:66:ec:ff:10:ee:6f:d2: 1c:a5:ed:4a:b5:8f:11:27:b4:6e:0c:5d:29:61:4d: a5:3f:a8:8d:ae:99:67:3b:77:4e:62:9d:85:22:e3: c5:40:5f:be:7e:bb:05:e0:c7:5a:97:4a:be:0b:c8: ac:fb:e3:ef:9d:7e:75:c6:c2:ab:d7:2b:22:ae:99: 20:7d:0d:68:09:0c:a5:07:76:55:41:37:56:d3:ba: 33:9a:73:e4:2a:77:f7:11:7e:18:e6:c7:34:9c:76: 82:ea:f4:68:6a:6a:d9:4c:b0:f8:59:68:bb:b9:44: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:83:BD:1A:FF:21:BA:4F:CB:85:CC:27:4C:4C:DF:32:92:45:77:5F X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0a:01:5c:e3:e7:bb:67:11:d6:61:bd:01:91:f9:cd:cc:cb: b9:2b:95:34:78:5a:3e:5e:69:88:ee:6c:a9:bd:5b:0f:c8:5a: 05:18:2b:9c:15:b2:6d:ef:ae:cb:22:9b:6b:c1:1b:42:13:2c: f9:bb:b2:38:43:b0:90:66:d9:b2:ce:f6:cd:97:5c:07:af:34: 56:4d:91:15:95:f8:5d:1f:f6:b3:87:1f:5b:13:de:64:b2:c3: 1c:b2:50:89:74:47:a9:ef:8a:22:af:01:b6:5f:7b:1b:e6:46: cf:60:d1:b7:77:06:2b:1f:cc:8d:49:49:d5:58:ea:29:74:33: 15:31:f2:c4:5f:1a:10:19:25:7d:46:f6:80:22:f5:1a:3a:d9: 69:01:93:4b:f4:ef:9d:c5:be:16:96:f7:31:cf:eb:93:7d:63: 08:5b:10:cd:64:3e:e8:90:27:82:ce:b8:3e:ff:93:7e:a7:66: d3:2a:15:40:71:50:d3:99:d3:59:15:0c:c6:cf:a8:13:ea:0e: 0f:2b:c8:ab:e8:8f:f0:3f:5e:47:14:45:87:89:b8:90:09:d1: 38:94:0c:30:4f:5a:4e:85:22:ab:91:67:6d:bf:48:5a:6a:7b: 28:ec:8c:2d:91:2e:d9:05:8e:cb:2b:03:8b:59:17:8f:16:72: ec:88:3a:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwNzI3MDI0OTA4WhcNMjYwODAzMDI0OTA4WjAYMRYwFAYD VQQDEw02YTY2YzcyNC1kZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0BfJGZTFQpBd7gBPEPspxK7QX80WJXCT15EP816IN+ZA9L4mdxxv0/ckmij Q44diU2KhbKITd//5Eqje21ux9SZjVXKI9LCSF5uHxJSHR3elpF29q44MeDOezwH CF2kcUqWQmPbWlkFe9U+S4wtONtBCLeNXVr1b1EDoe9OepS1bHNvrEKfS0IA5rv9 S2bs/xDub9Icpe1KtY8RJ7RuDF0pYU2lP6iNrplnO3dOYp2FIuPFQF++frsF4Mda l0q+C8is++PvnX51xsKr1ysirpkgfQ1oCQylB3ZVQTdW07ozmnPkKnf3EX4Y5sc0 nHaC6vRoamrZTLD4WWi7uUQp9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCDvRr/ IbpPy4XMJ0xM3zKSRXdfMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOgoBXOPnu2cR1mG9AZH5zczLuSuVNHhaPl5piO5sqb1bD8haBRgrnBWybe+u yyKba8EbQhMs+buyOEOwkGbZss72zZdcB680Vk2RFZX4XR/2s4cfWxPeZLLDHLJQ iXRHqe+KIq8Btl97G+ZGz2DRt3cGKx/MjUlJ1VjqKXQzFTHyxF8aEBklfUb2gCL1 GjrZaQGTS/TvncW+Fpb3Mc/rk31jCFsQzWQ+6JAngs64Pv+Tfqdm0yoVQHFQ05nT WRUMxs+oE+oODyvIq+iP8D9eRxRFh4m4kAnROJQMME9aToUiq5Fnbb9IWmp7KOyM LZEu2QWOyysDi1kXjxZy7Ig6tw== -----END CERTIFICATE-----Generated at Wed Jul 29 02:14:03 2026 by rpki-client