$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: 5ZUSeveZ5s52voTNThrjXkF6vH/7lVbI0XYyHrCM9u4= Subject key identifier: EE:6B:0C:21:F6:43:95:E7:66:4F:8B:A1:43:21:F6:3D:EE:C6:AE:4A Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 013A Signing time: Wed 29 Jul 2026 06:48:51 +0000 Manifest this update: Wed 29 Jul 2026 06:48:51 +0000 Manifest next update: Wed 05 Aug 2026 06:48:51 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: Cf92uX5Y6VZKO40qKtEL+2mI58Zh+wen6J1FxSs8Eks=) 2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ILuNQjwNhW0PKN+i94dgKZ8uTmGwmDnJT50xUUvXJAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 06:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Jul 29 06:48:51 2026 GMT Not After : Aug 5 06:48:51 2026 GMT Subject: CN=6a69a253-8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:04:10:2f:43:6c:2e:c7:c0:88:a9:8b:d4: f6:37:b1:99:ef:a7:78:7a:cd:2c:04:ff:f6:fd:89: 1f:18:d8:d4:6d:c6:3c:28:29:31:c1:c4:17:86:fd: e8:68:f6:c4:fd:fd:dc:60:bb:df:e1:04:64:bc:8c: 11:c6:39:ae:f2:7c:75:73:3f:7c:62:88:d0:97:f5: fa:fb:10:86:2c:cf:85:a8:6d:8a:93:b7:b5:a2:63: de:4c:3e:9c:1b:a6:e4:04:4b:7b:96:08:f9:4a:1f: 08:c5:73:9e:52:0a:29:3c:ce:3c:02:2e:63:a8:06: 3f:02:9d:56:13:9a:c9:7d:ad:c1:b2:d7:91:ef:6e: 72:c8:69:54:06:1a:01:d4:69:32:56:db:4d:83:d0: c8:3b:ba:f6:d5:a4:18:11:a3:4a:74:50:a1:7b:f5: ee:cd:4a:72:2e:75:9a:74:21:a5:05:83:ba:6c:a9: e6:ec:3f:5f:fd:4c:2c:6b:49:68:91:c9:2c:12:7b: 09:ab:eb:c6:fe:4a:a0:a3:9b:30:0d:70:53:0a:59: 91:13:b4:ea:ca:e5:8d:1b:ea:61:04:1e:e1:26:d3: 2d:b5:8c:19:75:de:10:8a:ad:9e:ea:9f:1c:56:46: 63:40:d8:2e:a6:b4:23:2c:11:6e:f4:7d:ce:02:a6: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:0C:21:F6:43:95:E7:66:4F:8B:A1:43:21:F6:3D:EE:C6:AE:4A X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:a3:74:0f:35:1a:12:95:20:89:b3:41:4e:44:43:d2:3d: dc:e8:49:c4:55:01:3b:cc:07:8d:d1:85:68:19:5d:f0:9f:66: 44:53:ee:a4:8f:1b:63:37:41:e3:c0:63:e6:23:39:89:1a:8e: c5:de:4f:86:6c:93:b0:d0:8f:e4:31:87:98:77:87:40:d0:e4: 48:b8:4e:ef:a6:da:4d:38:df:bd:40:a5:64:f9:15:75:de:f2: e6:53:9a:36:ca:47:fc:06:32:80:e1:28:5b:16:ae:3d:4a:b2: e8:87:35:ed:b9:c9:76:6b:e7:79:c6:7a:99:9f:a5:da:1e:a8: f9:48:02:83:5d:a3:1d:fa:ca:3d:53:df:11:cb:f0:12:d7:bb: aa:35:3d:52:cd:39:35:0f:29:99:62:0f:90:04:2d:ef:52:c7: fe:d5:c4:cf:5f:4e:b9:04:15:86:c0:2c:8c:e8:84:e6:f4:63: da:60:68:05:df:f6:e5:1f:c4:c8:b0:ac:c2:5d:e1:e8:bd:ec: b9:21:14:0e:50:f5:35:86:07:8f:07:23:d8:c0:74:7f:1e:9b: c8:b7:8c:a9:25:44:c3:d8:7c:24:8b:ba:ea:ad:58:75:cb:b6: 25:c7:0a:dc:50:b4:bc:71:11:c9:13:c1:6c:61:ed:ec:78:13: ff:d7:82:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwNzI5MDY0ODUxWhcNMjYwODA1MDY0ODUxWjAYMRYwFAYD VQQDEw02YTY5YTI1My04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosYEEC9DbC7HwIipi9T2N7GZ76d4es0sBP/2/YkfGNjUbcY8KCkxwcQXhv3o aPbE/f3cYLvf4QRkvIwRxjmu8nx1cz98YojQl/X6+xCGLM+FqG2Kk7e1omPeTD6c G6bkBEt7lgj5Sh8IxXOeUgopPM48Ai5jqAY/Ap1WE5rJfa3BsteR725yyGlUBhoB 1GkyVttNg9DIO7r21aQYEaNKdFChe/XuzUpyLnWadCGlBYO6bKnm7D9f/Uwsa0lo kcksEnsJq+vG/kqgo5swDXBTClmRE7TqyuWNG+phBB7hJtMttYwZdd4Qiq2e6p8c VkZjQNguprQjLBFu9H3OAqYQ5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5rDCH2 Q5XnZk+LoUMh9j3uxq5KMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkYajdA81GhKVIImzQU5EQ9I93OhJxFUBO8wHjdGFaBld8J9mRFPupI8bYzdB 48Bj5iM5iRqOxd5PhmyTsNCP5DGHmHeHQNDkSLhO76baTTjfvUClZPkVdd7y5lOa NspH/AYygOEoWxauPUqy6Ic17bnJdmvnecZ6mZ+l2h6o+UgCg12jHfrKPVPfEcvw Ete7qjU9Us05NQ8pmWIPkAQt71LH/tXEz19OuQQVhsAsjOiE5vRj2mBoBd/25R/E yLCswl3h6L3suSEUDlD1NYYHjwcj2MB0fx6byLeMqSVEw9h8JIu66q1Ydcu2JccK 3FC0vHERyRPBbGHt7HgT/9eC0w== -----END CERTIFICATE-----Generated at Wed Jul 29 09:58:43 2026 by rpki-client