$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft File: i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json) Hash identifier: aNzL5Ns4/oJGeSqYOGje3e18f5ANCaFafgUr9aQExZg= Subject key identifier: 3E:C0:17:EA:5F:51:74:7A:7C:96:CD:8D:7B:71:19:23:05:EF:90:B0 Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft Manifest number: 0162 Signing time: Wed 29 Jul 2026 06:15:53 +0000 Manifest this update: Wed 29 Jul 2026 06:15:53 +0000 Manifest next update: Wed 05 Aug 2026 06:15:53 +0000 Files and hashes: 1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: BXMs42GZ4lFMBWyNcFVVVIz7L+cHUbJtL8pwVkejenc=) 2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: /pgTpJCeELO0vx7ey0ylXFhJZdDNJrts1Zcttp5czrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 06:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Validity Not Before: Jul 29 06:15:53 2026 GMT Not After : Aug 5 06:15:53 2026 GMT Subject: CN=6a699a99-3b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:80:56:57:9d:25:f3:ac:35:c4:97:51:51: e0:ff:5c:08:c5:5e:03:42:7c:5a:86:8d:3a:4e:16: e2:66:34:bb:d2:b2:27:ee:d8:8f:ed:f7:9c:db:6e: 1f:c2:39:b8:d6:60:d9:d3:75:24:b9:72:e6:af:85: 81:14:7e:da:5a:1a:af:15:0d:eb:bd:48:6f:ed:c7: 1a:a6:4a:14:9f:a0:d1:3e:8f:8f:ee:b4:a6:21:d2: 41:d2:4d:da:cc:ca:c4:dd:9e:85:2a:0c:b3:f8:5f: c3:7c:93:e0:2c:d6:44:db:97:bb:d5:65:0c:7d:55: af:b9:8f:49:a2:35:fb:1d:ab:cc:d8:a1:a0:5a:a7: e3:83:a0:ee:6e:bb:d3:51:cd:4c:70:79:e1:a2:b9: 67:86:92:71:9e:ac:ea:2f:a8:c5:b0:2a:dc:08:d2: 56:4d:48:9b:0d:7d:e6:3e:7e:0d:1d:aa:a4:12:44: 50:f3:98:a4:75:21:60:3e:90:d9:48:9a:ef:70:1b: f5:da:2f:3e:03:63:68:d0:b9:be:63:2d:90:9f:65: f3:9e:ae:d2:c9:3c:69:c0:2f:3f:d5:d5:e3:41:01: e6:63:50:d3:22:22:ad:ea:22:4f:43:ff:bd:66:b3: 4d:81:9b:f3:45:58:56:15:c0:f1:5c:90:71:22:d6: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C0:17:EA:5F:51:74:7A:7C:96:CD:8D:7B:71:19:23:05:EF:90:B0 X509v3 Authority Key Identifier: keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8e:01:1c:f5:bc:c9:6b:13:f4:63:bd:3d:6a:3e:4c:a8:d6: ee:61:b8:3a:8b:d3:5b:2e:19:6c:46:d0:8e:d7:c2:f4:de:32: c7:a5:ee:bb:45:66:a3:be:25:9d:d2:df:1a:c9:29:38:92:96: bb:03:8c:ea:4e:0b:a3:01:c7:12:4c:37:80:d5:27:5c:15:54: 93:07:2a:e2:0e:4d:77:74:0c:4d:00:33:d2:ed:eb:72:fc:16: f9:8f:86:d4:b9:ad:12:bc:c5:e4:98:50:00:06:03:cd:85:25: 11:b3:56:f0:20:7b:17:51:2b:de:bd:f6:d5:34:61:6a:86:b8: 00:6a:7c:78:f8:51:4f:ac:26:0e:bc:fe:5b:9e:c0:dd:4e:29: b6:03:0a:48:30:eb:f0:a0:9e:b9:7d:73:89:d0:4d:62:c4:aa: 00:44:0e:27:46:8d:21:77:36:59:2d:c5:2c:cc:a6:25:04:99: 1a:da:bf:c2:71:a6:6d:e1:67:34:ae:0a:4e:99:ad:1c:d3:f0: 93:8b:46:d9:b4:bd:41:53:f9:de:10:83:ed:3a:11:31:45:c3: e0:7d:5a:78:3e:c9:2c:40:04:1f:10:c8:79:09:a3:2a:75:47: f6:ee:e4:4f:6a:33:b5:f4:6e:41:ba:3c:54:2f:f4:ee:f2:e2: 61:76:74:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKDhCNDg2QUNDQUYxMkE2N0E5NTY4OEU4RDExQkQ2NThD MDQxQzEyNUEwHhcNMjYwNzI5MDYxNTUzWhcNMjYwODA1MDYxNTUzWjAYMRYwFAYD VQQDEw02YTY5OWE5OS0zYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYWAVledJfOsNcSXUVHg/1wIxV4DQnxaho06ThbiZjS70rIn7tiP7fec224f wjm41mDZ03UkuXLmr4WBFH7aWhqvFQ3rvUhv7ccapkoUn6DRPo+P7rSmIdJB0k3a zMrE3Z6FKgyz+F/DfJPgLNZE25e71WUMfVWvuY9JojX7HavM2KGgWqfjg6DubrvT Uc1McHnhorlnhpJxnqzqL6jFsCrcCNJWTUibDX3mPn4NHaqkEkRQ85ikdSFgPpDZ SJrvcBv12i8+A2No0Lm+Yy2Qn2Xznq7SyTxpwC8/1dXjQQHmY1DTIiKt6iJPQ/+9 ZrNNgZvzRVhWFcDxXJBxItZCpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7AF+pf UXR6fJbNjXtxGSMF75CwMB8GA1UdIwQYMBaAFItIasyvEqZ6lWiOjRG9ZYwEHBJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi80RDdDRTY2QTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi9pMGhxeks4U3BucVZhSTZORWIxbGpBUWNF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2kwaHF6SzhTcG5xVmFJNk5FYjFsakFRY0Vsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi80RDdDRTY2QTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi9pMGhxeks4U3Bu cVZhSTZORWIxbGpBUWNFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoI4BHPW8yWsT9GO9PWo+TKjW7mG4OovTWy4ZbEbQjtfC9N4yx6Xuu0Vmo74l ndLfGskpOJKWuwOM6k4LowHHEkw3gNUnXBVUkwcq4g5Nd3QMTQAz0u3rcvwW+Y+G 1LmtErzF5JhQAAYDzYUlEbNW8CB7F1Er3r321TRhaoa4AGp8ePhRT6wmDrz+W57A 3U4ptgMKSDDr8KCeuX1zidBNYsSqAEQOJ0aNIXc2WS3FLMymJQSZGtq/wnGmbeFn NK4KTpmtHNPwk4tG2bS9QVP53hCD7ToRMUXD4H1aeD7JLEAEHxDIeQmjKnVH9u7k T2oztfRuQbo8VC/07vLiYXZ0+A== -----END CERTIFICATE-----Generated at Wed Jul 29 09:10:26 2026 by rpki-client