$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: 2DcROB13H+Yzbe2mQuXVClevtvYTuIjZw9UfZGYAjnE= Subject key identifier: 25:D1:76:43:3C:BA:7D:98:F1:34:92:9B:06:7A:A6:06:7D:C0:76:9A Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 07C0 Signing time: Sun 26 Jul 2026 22:08:00 +0000 Manifest this update: Sun 26 Jul 2026 22:07:59 +0000 Manifest next update: Sun 02 Aug 2026 22:07:59 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: 8/KkW9luOgxxprlRt7146RFllSz+oIdfVrLzrbM73PM=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ekCf+qkgQjsCTS/hD3kgERoIA8Bx5WAn9/u0BBY+k1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Jul 26 22:07:59 2026 GMT Not After : Aug 2 22:07:59 2026 GMT Subject: CN=6a668540-5ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:76:56:d6:17:96:3e:d9:8a:a7:c9:eb:e7: 74:e8:08:e7:0f:0d:be:78:6e:fc:5d:0f:94:7e:e8: 52:b2:59:bc:67:49:3a:b0:14:d5:4b:fd:fe:bc:c3: df:f3:76:53:e6:21:2e:0d:6e:e0:f0:fa:cc:f1:34: ca:79:06:2a:28:c9:71:a4:f4:85:9b:e3:ae:76:a7: e2:24:e9:46:39:6d:ec:ca:21:9b:a6:55:83:63:94: 24:26:10:2d:55:b9:82:08:32:7e:57:a7:93:1a:d6: e3:c7:b2:5c:a1:26:23:aa:e1:cf:b0:60:7a:45:56: 14:8b:d4:66:aa:57:e1:f6:e6:a2:9e:93:45:75:10: 11:e4:c2:d9:5e:1f:fa:e0:60:b6:d0:53:91:53:d9: b6:55:2a:0b:72:f3:31:de:23:fb:bb:cc:18:e4:c9: 7d:ab:72:4c:f3:81:18:a4:94:74:dc:59:de:ca:6c: 7e:62:a7:e0:30:04:cc:80:d2:26:ba:1d:88:59:24: 51:23:2f:25:4e:3e:1b:e0:43:88:f2:69:61:ff:9a: 99:98:53:d9:b5:c4:29:52:c4:8b:7a:76:60:0f:57: 7f:44:22:f7:09:0c:80:c7:d6:9c:ee:57:95:77:dd: 52:ed:b5:bd:4b:60:3f:25:b6:89:eb:1f:0c:cd:50: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:76:43:3C:BA:7D:98:F1:34:92:9B:06:7A:A6:06:7D:C0:76:9A X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:77:b0:db:9f:35:d5:04:a8:ae:14:3f:19:6d:87:12:06:ca: 06:47:43:f0:94:68:0e:d8:f7:50:ce:dd:23:81:9f:9d:f1:9c: cb:17:46:4f:35:7a:97:53:bb:86:f2:1f:5f:cd:82:78:53:db: 38:91:21:b9:91:0d:7f:e3:91:32:1a:4e:0e:1e:67:83:f4:df: 16:7a:2c:1e:eb:f8:fd:1f:eb:ef:d0:ce:22:23:ad:a5:a2:d3: 48:2b:13:a1:13:4d:8b:4c:fb:39:aa:a5:5a:fc:4f:e8:ce:5b: 36:0e:4e:f1:e8:d1:3d:a7:4c:20:5d:59:79:91:36:2d:2f:1a: c9:49:8d:9a:25:e5:67:40:25:b9:04:89:76:68:84:da:b9:d4: ee:0b:07:8f:0e:08:af:bc:6f:3c:07:f6:b7:e2:ad:da:16:13: c1:c5:94:ba:90:c9:6d:b1:53:89:0a:7a:0b:36:87:75:94:47: bc:62:18:02:76:56:f9:71:7b:30:47:97:44:ca:4a:a9:e8:8a: 66:25:28:0d:a1:3f:1a:19:9f:4e:5e:df:44:97:69:46:3f:65: 9d:e1:bf:75:ea:9d:44:3a:d4:4b:47:a4:b3:22:10:be:c3:0a: 35:74:e8:2e:10:b1:ee:7c:06:c9:58:91:cb:b3:78:00:b0:ac: 68:ec:cc:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjYwNzI2MjIwNzU5WhcNMjYwODAyMjIwNzU5WjAYMRYwFAYD VQQDEw02YTY2ODU0MC01YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskp2VtYXlj7ZiqfJ6+d06AjnDw2+eG78XQ+UfuhSslm8Z0k6sBTVS/3+vMPf 83ZT5iEuDW7g8PrM8TTKeQYqKMlxpPSFm+OudqfiJOlGOW3syiGbplWDY5QkJhAt VbmCCDJ+V6eTGtbjx7JcoSYjquHPsGB6RVYUi9Rmqlfh9uainpNFdRAR5MLZXh/6 4GC20FORU9m2VSoLcvMx3iP7u8wY5Ml9q3JM84EYpJR03Fneymx+YqfgMATMgNIm uh2IWSRRIy8lTj4b4EOI8mlh/5qZmFPZtcQpUsSLenZgD1d/RCL3CQyAx9ac7leV d91S7bW9S2A/JbaJ6x8MzVAk/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXRdkM8 un2Y8TSSmwZ6pgZ9wHaaMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3ew25811QSorhQ/GW2HEgbKBkdD8JRoDtj3UM7dI4GfnfGcyxdGTzV6l1O7 hvIfX82CeFPbOJEhuZENf+ORMhpODh5ng/TfFnosHuv4/R/r79DOIiOtpaLTSCsT oRNNi0z7OaqlWvxP6M5bNg5O8ejRPadMIF1ZeZE2LS8ayUmNmiXlZ0AluQSJdmiE 2rnU7gsHjw4Ir7xvPAf2t+Kt2hYTwcWUupDJbbFTiQp6CzaHdZRHvGIYAnZW+XF7 MEeXRMpKqeiKZiUoDaE/GhmfTl7fRJdpRj9lneG/deqdRDrUS0eksyIQvsMKNXTo LhCx7nwGyViRy7N4ALCsaOzMfg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:42 2026 by rpki-client