$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: pI7kmAVTrL9N34a1OurS5E143osH3FswUM7aQZxdX8k= Subject key identifier: 3D:31:B9:2D:BD:08:52:70:3B:55:57:8E:07:94:6E:5B:70:2B:B4:E5 Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 041C Signing time: Mon 27 Jul 2026 01:24:19 +0000 Manifest this update: Mon 27 Jul 2026 01:24:19 +0000 Manifest next update: Mon 03 Aug 2026 01:24:19 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: 7q6nlHl14fTzz13ZObMqRzdx0OOjx9HiuRIer4wpW0s=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: kBFUh+A5t0uG5ToonKBS8JyMqqztNI0BDIiwYVryoTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: Jul 27 01:24:19 2026 GMT Not After : Aug 3 01:24:19 2026 GMT Subject: CN=6a66b343-0d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:7d:f2:0b:6e:d1:75:80:01:25:dc:9f:18: 37:54:41:4a:27:27:9b:46:dc:9d:74:e2:f4:49:6d: 5c:3e:1e:9c:dd:aa:7c:f2:dd:88:3e:2c:cf:c7:1d: 1d:0c:00:6f:91:91:e7:0c:b8:9e:ef:78:4c:18:a0: d3:fd:20:1d:31:7a:3e:c8:2f:6f:04:a5:6d:74:e6: 82:08:3e:fa:c7:45:5c:c3:f4:39:a0:06:75:75:44: 0d:58:f2:d7:a5:c7:3d:37:71:1b:9a:5f:9a:d5:38: 66:bf:3b:22:1a:0f:c5:73:d4:1a:0f:44:8f:6c:95: b2:1f:61:f8:a1:5d:9f:93:31:3c:03:c5:e5:5a:7c: d8:ed:8e:37:d1:4f:4d:e7:e2:28:8d:ea:f0:75:89: 70:fa:15:a5:21:d9:2f:57:7a:ca:fb:f5:cc:a8:3a: 99:71:2a:dc:24:5d:5f:eb:ef:5f:a0:bf:a6:50:a8: cd:9c:ab:ea:ff:f8:b5:c8:99:37:1a:bd:7a:b1:b6: 92:95:98:fd:c7:bc:f6:21:2a:4d:36:b9:01:17:48: f3:f3:4b:fd:1e:dc:fd:ad:75:28:26:a1:16:a3:4b: 82:9f:ed:95:66:c7:26:46:aa:fd:27:84:52:25:63: ae:3d:16:5c:a6:76:b2:10:b3:a3:a7:45:e2:3b:9d: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:B9:2D:BD:08:52:70:3B:55:57:8E:07:94:6E:5B:70:2B:B4:E5 X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d2:62:f4:26:6d:f2:a0:b2:e7:ca:69:82:e9:23:90:06:96: 7c:b6:2d:23:c8:3c:69:cc:34:0f:77:a1:03:70:cc:70:60:ed: dc:e2:25:77:60:a1:a5:da:83:dd:70:fb:0a:9d:eb:3c:96:7c: 37:f3:91:20:6b:50:22:eb:e7:9b:a4:37:36:97:1c:16:31:f2: 43:a0:0c:f5:0a:3c:ac:9c:26:c1:84:8e:8f:af:31:bc:ac:fb: e1:f0:9c:08:f7:3d:5a:cf:78:04:0a:be:9d:c7:da:84:4e:1f: 27:fe:ac:02:bd:de:69:e0:cc:14:e2:7e:36:bd:b2:c8:de:5d: b8:d3:0b:a3:0a:da:2e:9d:41:be:29:90:22:63:91:e0:70:57: c0:e4:dd:c6:10:65:2d:27:9c:5b:fd:e3:16:04:62:8f:c9:30: 38:d5:81:66:d1:0d:fe:60:19:58:c2:87:3a:78:69:bd:8d:e3: a4:4a:bb:f0:49:ee:ce:75:fb:dd:b7:c2:e2:30:15:5c:42:58: b6:eb:58:dd:b0:92:e3:f9:e0:4a:3a:2d:df:ed:c3:5d:85:97: 2b:ee:71:e3:e0:3a:e5:07:28:40:5c:ec:c6:ae:a0:8c:5b:a9: ba:d0:e9:3f:4b:80:2b:01:bb:29:8d:05:24:fd:88:c3:60:73: 30:dc:c7:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjYwNzI3MDEyNDE5WhcNMjYwODAzMDEyNDE5WjAYMRYwFAYD VQQDEw02YTY2YjM0My0wZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlC198gtu0XWAASXcnxg3VEFKJyebRtyddOL0SW1cPh6c3ap88t2IPizPxx0d DABvkZHnDLie73hMGKDT/SAdMXo+yC9vBKVtdOaCCD76x0Vcw/Q5oAZ1dUQNWPLX pcc9N3Ebml+a1ThmvzsiGg/Fc9QaD0SPbJWyH2H4oV2fkzE8A8XlWnzY7Y430U9N 5+IojerwdYlw+hWlIdkvV3rK+/XMqDqZcSrcJF1f6+9foL+mUKjNnKvq//i1yJk3 Gr16sbaSlZj9x7z2ISpNNrkBF0jz80v9Htz9rXUoJqEWo0uCn+2VZscmRqr9J4RS JWOuPRZcpnayELOjp0XiO50URQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0xuS29 CFJwO1VXjgeUbltwK7TlMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAdJi9CZt8qCy58ppgukjkAaWfLYtI8g8acw0D3ehA3DMcGDt3OIld2ChpdqD 3XD7Cp3rPJZ8N/ORIGtQIuvnm6Q3NpccFjHyQ6AM9Qo8rJwmwYSOj68xvKz74fCc CPc9Ws94BAq+ncfahE4fJ/6sAr3eaeDMFOJ+Nr2yyN5duNMLowraLp1BvimQImOR 4HBXwOTdxhBlLSecW/3jFgRij8kwONWBZtEN/mAZWMKHOnhpvY3jpEq78EnuznX7 3bfC4jAVXEJYtutY3bCS4/ngSjot3+3DXYWXK+5x4+A65QcoQFzsxq6gjFuputDp P0uAKwG7KY0FJP2Iw2BzMNzH+Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:11 2026 by rpki-client