$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: yFfZ3n+XD5gkhK0vhCTyd5KBuzipHOWHaiIY261SL4g= Subject key identifier: 84:54:5E:79:57:FC:19:FD:D2:A0:BF:E1:53:0D:D9:8C:65:A9:C6:99 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 02A5 Signing time: Mon 27 Jul 2026 02:58:42 +0000 Manifest this update: Mon 27 Jul 2026 02:58:42 +0000 Manifest next update: Mon 03 Aug 2026 02:58:42 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: zr7KcOputo6ajnskGPJeMhvWqdqJb0p23IvPGcDqeUo=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: w4+i2AFQCp0fSfDJ3CNv6OBjIpm8hWm9Zpmlr/vwCHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Jul 27 02:58:42 2026 GMT Not After : Aug 3 02:58:42 2026 GMT Subject: CN=6a66c962-c9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:b9:60:d4:d0:68:65:5f:74:a1:eb:38:54: 89:db:2b:9b:6c:59:96:1e:32:14:dc:c7:34:08:84: 3d:16:53:09:8c:ca:1a:7c:0b:d6:00:9d:21:d8:a3: d5:a8:19:5b:7e:71:a6:f7:bb:6f:cb:10:d2:23:c1: 72:7b:cb:16:4e:7b:39:25:8c:a3:ff:00:29:33:e4: 40:e7:11:ef:4e:63:e9:9d:57:72:f4:85:5a:a7:14: 80:ce:e2:26:b3:56:93:20:7c:89:b1:24:19:82:57: 7c:92:9d:1c:93:c9:51:c3:ce:b6:79:a7:74:2f:4e: 9e:47:39:e4:ba:79:a6:ca:06:4c:3c:10:30:89:f7: c6:d1:de:e3:e9:69:ee:39:b3:d1:71:6a:1b:ce:2c: e9:18:4d:b0:93:b1:c2:db:f8:e1:37:f7:2f:0e:a6: 01:41:6a:03:fc:e1:96:63:cf:80:f6:78:0a:81:42: e6:d9:31:6a:5a:9a:96:41:98:c5:d9:51:74:e6:86: 75:29:f7:f8:5f:d2:ef:51:3e:5a:3a:a2:3b:46:9f: f8:2d:80:ad:99:f8:85:57:20:f8:96:d1:4c:4d:fa: ef:f5:ff:b0:4c:12:77:3e:71:09:7c:2d:d3:bf:5d: 05:b3:df:2c:2d:70:d8:fc:bf:d4:f8:78:88:41:2e: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:5E:79:57:FC:19:FD:D2:A0:BF:E1:53:0D:D9:8C:65:A9:C6:99 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:65:7d:5e:5d:6f:2d:81:70:75:0f:83:bd:20:cb:4d:c8:9b: 1d:21:6d:2a:8d:45:64:c0:61:df:fc:fa:dc:55:63:f8:80:a2: a8:70:89:5f:d3:dd:db:58:35:10:80:06:16:b1:76:48:12:41: 38:34:d0:86:6b:98:e3:3a:3e:3b:b5:8c:4e:45:54:2e:95:c0: 5d:14:72:52:f9:5c:a1:d2:84:7b:67:65:38:51:49:d8:2d:96: ad:7b:43:2f:e4:e0:a4:74:ba:31:39:ca:36:d6:e0:4f:31:02: 32:57:f9:dc:07:63:95:b0:7a:81:3c:8a:8e:d8:9e:84:39:4a: 8c:30:22:a2:92:7a:50:c7:b1:1f:9a:c3:e5:19:ae:f1:05:6d: 8f:a4:9c:4b:3d:a3:eb:7f:90:f5:9b:b4:a7:f5:8d:36:bb:f6: dd:a9:ed:05:89:e1:35:64:56:ef:82:2f:b4:b1:2e:6f:49:1e: 6f:3a:6a:c1:72:f7:73:c7:fc:02:3a:09:fd:7c:71:2e:9b:7b: b9:a3:2c:d0:63:24:09:21:5d:a8:e8:dc:bf:d6:5d:96:86:7f: bb:5b:04:a0:cc:f1:e2:0e:39:9a:89:ac:30:74:93:6e:72:56: 6f:9f:98:4d:33:3e:f6:2c:81:2c:ac:7a:e3:70:ea:dc:74:1d: a1:15:11:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjYwNzI3MDI1ODQyWhcNMjYwODAzMDI1ODQyWjAYMRYwFAYD VQQDEw02YTY2Yzk2Mi1jOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDy5YNTQaGVfdKHrOFSJ2yubbFmWHjIU3Mc0CIQ9FlMJjMoafAvWAJ0h2KPV qBlbfnGm97tvyxDSI8Fye8sWTns5JYyj/wApM+RA5xHvTmPpnVdy9IVapxSAzuIm s1aTIHyJsSQZgld8kp0ck8lRw862ead0L06eRznkunmmygZMPBAwiffG0d7j6Wnu ObPRcWobzizpGE2wk7HC2/jhN/cvDqYBQWoD/OGWY8+A9ngKgULm2TFqWpqWQZjF 2VF05oZ1Kff4X9LvUT5aOqI7Rp/4LYCtmfiFVyD4ltFMTfrv9f+wTBJ3PnEJfC3T v10Fs98sLXDY/L/U+HiIQS4+TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRUXnlX /Bn90qC/4VMN2YxlqcaZMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu2V9Xl1vLYFwdQ+DvSDLTcibHSFtKo1FZMBh3/z63FVj+ICiqHCJX9Pd21g1 EIAGFrF2SBJBODTQhmuY4zo+O7WMTkVULpXAXRRyUvlcodKEe2dlOFFJ2C2WrXtD L+TgpHS6MTnKNtbgTzECMlf53AdjlbB6gTyKjtiehDlKjDAiopJ6UMexH5rD5Rmu 8QVtj6ScSz2j63+Q9Zu0p/WNNrv23antBYnhNWRW74IvtLEub0kebzpqwXL3c8f8 AjoJ/XxxLpt7uaMs0GMkCSFdqOjcv9ZdloZ/u1sEoMzx4g45momsMHSTbnJWb5+Y TTM+9iyBLKx643Dq3HQdoRURYQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:42 2026 by rpki-client