$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: z6IqqufMw1O8wy0yCtxetrhl0u9/d3G6gS+7es4xaIE= Subject key identifier: 72:82:8D:E7:7B:F6:17:E2:20:03:C9:E6:85:17:ED:E1:96:9D:AE:D7 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: DB Signing time: Mon 27 Jul 2026 08:46:56 +0000 Manifest this update: Mon 27 Jul 2026 08:46:55 +0000 Manifest next update: Mon 03 Aug 2026 08:46:55 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: UdTKwZv4Af90cNZC2gu6dWLW8pq13vpM4mQnkvaYnrE=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Jul 27 08:46:55 2026 GMT Not After : Aug 3 08:46:55 2026 GMT Subject: CN=6a671b00-360a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:ae:cd:23:fb:b6:ae:e4:30:8a:03:0f:d9: 05:28:de:b5:05:6f:6b:03:31:51:2b:32:70:78:7c: 80:84:24:ba:d4:f4:f0:78:57:ca:22:19:be:c9:62: 4d:29:63:c8:6e:d0:11:fa:98:67:64:a3:de:7e:43: 9e:29:ee:b3:44:53:39:fd:cb:83:c9:8f:7e:9f:28: 4c:a3:5d:b6:d2:cf:9a:74:59:3a:53:fd:6c:c9:30: 1d:92:ba:73:9b:c2:50:9c:39:e0:a3:cd:fe:62:e1: a5:85:92:49:24:d9:a6:f9:3c:fb:f6:fe:e8:a3:d8: 9e:21:ab:34:ce:d4:89:f0:ad:c5:ba:80:93:55:79: 4a:5f:fe:c3:80:cc:8c:5f:0d:c9:cf:4b:64:95:c1: e3:ad:fb:38:16:2a:8e:de:f5:b8:7c:ca:40:40:b1: 1a:51:10:7e:ac:bb:42:93:1d:1e:c3:d5:cf:f5:af: fe:9b:5d:f9:9a:91:ff:4d:4c:0e:41:52:43:55:d8: fd:6e:34:38:16:ec:37:ce:c9:36:c2:ce:3d:d6:51: ef:00:19:f0:44:96:f1:32:ac:60:22:9a:f5:47:c0: 68:93:93:5f:32:d2:54:ab:35:d7:bd:7d:3a:9e:1c: 14:f1:14:4e:2b:0d:59:46:6f:f3:e7:d3:a9:a3:64: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:82:8D:E7:7B:F6:17:E2:20:03:C9:E6:85:17:ED:E1:96:9D:AE:D7 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0c:72:01:8f:03:2b:cd:23:47:ed:f0:cd:7b:fc:80:6a:e3: 44:6e:a1:fb:9f:75:06:fb:c2:0e:c8:08:8d:86:f2:f3:77:79: 44:bc:10:40:96:50:33:4e:5d:57:30:4e:63:ed:ab:d6:70:04: 0c:2a:f4:11:33:9a:24:bb:69:8d:59:27:c2:ab:02:c1:ab:68: 4b:ae:7a:01:b9:81:aa:eb:c1:9f:1a:7b:48:62:0f:f5:6a:70: 29:35:71:da:c6:ab:6a:3c:4a:ff:80:60:bc:e0:37:57:ac:cf: 22:27:9f:15:82:4f:96:69:54:5e:89:4a:a0:18:88:43:97:9e: 36:ab:cc:cc:2c:b6:ec:1a:b4:88:2c:7a:54:5f:f9:07:06:ce: 85:21:30:cf:f9:58:44:b8:67:72:4f:77:de:44:ee:33:dc:e4: 2e:b7:a0:43:76:c7:d2:b1:ee:9f:ff:8a:34:dd:01:57:ca:33: 0b:2b:2d:64:96:9d:97:62:9e:f8:fd:45:73:9e:28:8c:81:a7: 26:ae:a5:64:6c:c1:6e:ae:7b:83:52:51:52:05:39:f3:70:71: 4e:3c:1c:e6:11:06:e4:57:96:fb:4f:cb:ce:7b:a4:68:59:6c: 12:5d:cf:cd:17:d4:f5:f9:5c:6a:79:dc:f8:00:0d:08:bf:a1: c2:d2:d3:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwNzI3MDg0NjU1WhcNMjYwODAzMDg0NjU1WjAYMRYwFAYD VQQDEw02YTY3MWIwMC0zNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LmuzSP7tq7kMIoDD9kFKN61BW9rAzFRKzJweHyAhCS61PTweFfKIhm+yWJN KWPIbtAR+phnZKPefkOeKe6zRFM5/cuDyY9+nyhMo1220s+adFk6U/1syTAdkrpz m8JQnDngo83+YuGlhZJJJNmm+Tz79v7oo9ieIas0ztSJ8K3FuoCTVXlKX/7DgMyM Xw3Jz0tklcHjrfs4FiqO3vW4fMpAQLEaURB+rLtCkx0ew9XP9a/+m135mpH/TUwO QVJDVdj9bjQ4Fuw3zsk2ws491lHvABnwRJbxMqxgIpr1R8Bok5NfMtJUqzXXvX06 nhwU8RROKw1ZRm/z59Opo2QnyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKCjed7 9hfiIAPJ5oUX7eGWna7XMB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHAxyAY8DK80jR+3wzXv8gGrjRG6h+591BvvCDsgIjYby83d5RLwQQJZQM05d VzBOY+2r1nAEDCr0ETOaJLtpjVknwqsCwatoS656AbmBquvBnxp7SGIP9WpwKTVx 2sarajxK/4BgvOA3V6zPIiefFYJPlmlUXolKoBiIQ5eeNqvMzCy27Bq0iCx6VF/5 BwbOhSEwz/lYRLhnck933kTuM9zkLregQ3bH0rHun/+KNN0BV8ozCystZJadl2Ke +P1Fc54ojIGnJq6lZGzBbq57g1JRUgU583BxTjwc5hEG5FeW+0/LznukaFlsEl3P zRfU9flcannc+AANCL+hwtLTWQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:48:00 2026 by rpki-client