$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: nqGG3p4wid/gbysY0hdxW5SJthcl+QLuBqg3j6+/D58= Subject key identifier: E0:03:2B:EC:95:E7:3A:2F:48:F0:01:49:BD:67:80:44:1D:0B:65:6B Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 05C9 Signing time: Tue 28 Jul 2026 23:43:23 +0000 Manifest this update: Tue 28 Jul 2026 23:43:23 +0000 Manifest next update: Tue 04 Aug 2026 23:43:23 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: ePmQWseBU+I6xn+j6TBeuGJTBTkNUxuFHtUa5W+6yTI=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Jul 28 23:43:23 2026 GMT Not After : Aug 4 23:43:23 2026 GMT Subject: CN=6a693e9b-e3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:3d:6b:f9:ed:45:ce:59:2b:4c:bd:81:27: d2:ae:8e:a7:65:58:c7:5d:c1:a3:f2:5e:9a:65:92: 58:df:c6:af:3d:b2:e3:a3:1a:7e:5d:52:85:40:0e: 89:e9:d2:06:21:2c:60:f9:2e:d4:65:ab:68:ae:32: a6:9a:09:19:2e:4c:34:74:bb:e8:11:d3:74:a5:b2: 56:b4:36:d2:24:9a:98:87:0d:bd:84:e2:e9:91:03: 19:eb:94:a0:db:89:4e:44:7a:af:24:5b:8e:e2:bc: 5c:46:2d:f9:fe:2e:8d:ac:d7:43:e5:a9:7e:14:7d: ec:78:41:a1:0b:4c:d9:0a:ea:d2:c0:4f:1b:8d:90: 53:dc:48:13:73:12:ee:86:51:d0:f7:1d:80:98:8a: 03:d0:57:88:cc:e1:06:7c:65:bc:ec:0a:03:d1:63: 7a:1b:18:61:25:52:10:66:ce:88:76:4b:ab:51:b6: e4:1c:7d:1d:62:d2:16:61:19:37:32:9e:d5:22:6f: 0e:34:b4:97:23:71:99:94:ac:81:32:31:cc:62:9e: a5:21:cb:75:0f:a4:0d:2d:0e:a3:f8:e2:27:ff:1b: 92:ff:76:1d:27:f7:33:c3:92:52:21:0b:3c:03:e8: ab:d7:02:55:75:56:aa:9c:a1:c1:cf:ac:f2:19:f0: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:03:2B:EC:95:E7:3A:2F:48:F0:01:49:BD:67:80:44:1D:0B:65:6B X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cd:9d:1d:b4:a4:a1:54:a2:cd:d1:cb:46:43:08:f2:99:51: fe:8e:63:75:d5:54:96:c7:f7:84:99:b8:be:70:48:93:f4:9b: 4f:16:ae:b2:17:76:a0:72:93:5b:d3:15:e9:c0:14:f8:60:53: 26:00:1c:97:15:df:1e:c2:86:06:13:e2:58:7e:33:4f:33:0a: 47:a3:0b:18:b1:2c:6e:03:05:2a:2b:a6:02:84:87:fa:6e:2d: a1:e6:c7:9e:aa:73:c1:fa:44:0f:df:8e:8b:14:c9:81:73:82: e0:37:60:6e:f1:a7:3b:ac:7a:1c:8f:d3:65:d2:59:ad:7d:e3: cd:c6:18:20:0e:47:ea:a4:35:3d:ac:f0:c8:21:21:0e:56:b5: e6:8c:5d:28:5d:8c:84:a1:3f:85:00:f9:92:7d:e1:5e:38:6a: 0d:fe:28:c6:fa:5e:d6:53:41:1b:f5:6d:8e:02:26:bf:18:10: 58:44:6c:21:f2:31:81:c4:ee:6c:85:91:29:c5:f9:df:27:01: 49:61:3d:d1:81:95:17:ae:ea:7d:76:40:97:0f:7d:9e:a8:9d: bb:7a:90:a9:09:f9:1a:6b:0f:c5:c9:c6:d4:34:57:b4:f6:ac: cd:ef:01:99:94:b6:90:d3:78:53:7f:67:42:93:d7:83:dd:ba: 57:f2:0c:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYwNzI4MjM0MzIzWhcNMjYwODA0MjM0MzIzWjAYMRYwFAYD VQQDEw02YTY5M2U5Yi1lM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEM9a/ntRc5ZK0y9gSfSro6nZVjHXcGj8l6aZZJY38avPbLjoxp+XVKFQA6J 6dIGISxg+S7UZatorjKmmgkZLkw0dLvoEdN0pbJWtDbSJJqYhw29hOLpkQMZ65Sg 24lORHqvJFuO4rxcRi35/i6NrNdD5al+FH3seEGhC0zZCurSwE8bjZBT3EgTcxLu hlHQ9x2AmIoD0FeIzOEGfGW87AoD0WN6GxhhJVIQZs6IdkurUbbkHH0dYtIWYRk3 Mp7VIm8ONLSXI3GZlKyBMjHMYp6lIct1D6QNLQ6j+OIn/xuS/3YdJ/czw5JSIQs8 A+ir1wJVdVaqnKHBz6zyGfDafwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOADK+yV 5zovSPABSb1ngEQdC2VrMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGs2dHbSkoVSizdHLRkMI8plR/o5jddVUlsf3hJm4vnBIk/SbTxaushd2oHKT W9MV6cAU+GBTJgAclxXfHsKGBhPiWH4zTzMKR6MLGLEsbgMFKiumAoSH+m4toebH nqpzwfpED9+OixTJgXOC4DdgbvGnO6x6HI/TZdJZrX3jzcYYIA5H6qQ1PazwyCEh Dla15oxdKF2MhKE/hQD5kn3hXjhqDf4oxvpe1lNBG/VtjgImvxgQWERsIfIxgcTu bIWRKcX53ycBSWE90YGVF67qfXZAlw99nqidu3qQqQn5GmsPxcnG1DRXtPasze8B mZS2kNN4U39nQpPXg926V/IMig== -----END CERTIFICATE-----Generated at Wed Jul 29 00:43:23 2026 by rpki-client