$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft File: iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json) Hash identifier: okyq8z9C+HRYg1JWG/tLP0xG0mG+HYbK0IDRsPsnjRQ= Subject key identifier: 3C:8E:9F:3B:4C:0B:EA:73:FB:D1:60:2A:FC:03:C4:BF:9D:B0:1C:0F Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 Certificate issuer: /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft Manifest number: 0718 Signing time: Sun 26 Jul 2026 22:48:43 +0000 Manifest this update: Sun 26 Jul 2026 22:48:42 +0000 Manifest next update: Sun 02 Aug 2026 22:48:42 +0000 Files and hashes: 1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: dllXe+JgeKmp5RKUKNHPgTjVzIg51R0vQRJVYd0D/jw=) 2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: kAiJ+qt1b9uLv28IHarV5SgEnVjfBFg87tLbajTu+3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1 Validity Not Before: Jul 26 22:48:42 2026 GMT Not After : Aug 2 22:48:42 2026 GMT Subject: CN=6a668ecb-9b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:11:df:85:8d:4e:3a:c7:22:fc:cb:e5:f8: e1:a4:58:57:bf:ba:35:40:e6:36:43:ce:f2:c3:a3: 27:b7:5c:8b:92:6d:8b:94:2b:32:45:23:2a:fe:29: e3:40:25:c9:60:30:a0:61:b3:d4:16:e8:b0:99:19: 9a:6e:a0:69:e8:78:ef:aa:18:9d:22:a0:2c:2f:3f: ce:6d:92:cf:a2:20:b5:af:f3:92:5d:5f:7e:8e:7a: e1:93:b4:2f:57:5a:38:09:49:17:7d:05:cb:67:ab: 3f:3d:63:cf:c5:f9:d1:23:ed:da:e3:ba:1a:fa:c4: 0a:ea:72:63:27:0b:92:c3:e8:14:ef:3d:fc:7b:1f: ad:a9:8b:13:28:79:ae:6a:28:0b:17:50:fd:d3:15: bd:3d:4a:81:65:35:4a:aa:7a:ca:a9:50:d4:ab:c6: 47:33:61:8f:ba:a0:00:b0:e5:95:80:b9:d9:88:00: 2a:bc:55:09:1c:b5:ec:61:84:db:50:4c:f4:d6:e3: 77:03:d2:de:f1:c1:7a:70:7d:aa:c3:d8:c4:51:12: 3c:13:0b:79:af:0e:41:2a:00:7d:90:8f:b7:ed:a6: 77:25:c4:97:6a:95:8a:31:72:46:ee:b4:69:41:d6: ab:08:b4:e3:e9:e1:74:bb:02:06:a2:c5:5c:ce:bf: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:9F:3B:4C:0B:EA:73:FB:D1:60:2A:FC:03:C4:BF:9D:B0:1C:0F X509v3 Authority Key Identifier: keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:02:0c:1f:6c:6f:24:28:7e:0b:ff:63:95:01:cd:50:9f:31: c6:80:7b:27:dd:bb:29:38:12:41:8d:55:a6:b2:a4:e0:25:c3: fb:5e:7b:82:4e:45:30:8d:03:92:bb:b4:23:b6:96:43:1d:13: af:18:8e:c1:76:55:7b:29:ad:4a:4e:0d:f5:6f:b6:7b:2e:bb: 05:dc:c3:b7:83:e4:4a:cf:01:6c:0e:b2:2e:f4:5d:e5:46:0b: 5f:93:97:60:24:1c:6e:0c:b5:01:c7:17:c7:60:32:b5:3c:0c: c2:ac:e7:f9:51:3d:18:ce:a3:d8:7e:d5:e8:ce:81:cf:98:47: c6:e3:d9:ea:51:02:56:c7:32:02:9c:f6:f7:39:d5:1e:d5:e1: 89:55:a1:2b:cc:48:4a:fd:71:b8:ac:31:e9:12:0c:26:b3:16: a4:61:d7:0e:1f:97:9d:bb:2b:b1:94:03:55:3a:64:04:b1:8a: db:1c:d3:9f:13:46:2e:72:66:23:ef:89:63:09:92:5a:25:69: 15:ba:76:3b:fe:ef:40:cb:8f:a3:b6:52:c4:d7:e9:1c:b7:d0: 66:ea:28:3e:3d:38:9a:27:53:01:3f:eb:ed:5c:78:a4:01:12: 2d:e6:1d:a8:53:58:ac:0e:b9:96:8a:6f:49:10:14:b3:16:79: 3a:5c:f9:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG NUI4OUFBRTEwHhcNMjYwNzI2MjI0ODQyWhcNMjYwODAyMjI0ODQyWjAYMRYwFAYD VQQDEw02YTY2OGVjYi05YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj8R34WNTjrHIvzL5fjhpFhXv7o1QOY2Q87yw6Mnt1yLkm2LlCsyRSMq/inj QCXJYDCgYbPUFuiwmRmabqBp6HjvqhidIqAsLz/ObZLPoiC1r/OSXV9+jnrhk7Qv V1o4CUkXfQXLZ6s/PWPPxfnRI+3a47oa+sQK6nJjJwuSw+gU7z38ex+tqYsTKHmu aigLF1D90xW9PUqBZTVKqnrKqVDUq8ZHM2GPuqAAsOWVgLnZiAAqvFUJHLXsYYTb UEz01uN3A9Le8cF6cH2qw9jEURI8Ewt5rw5BKgB9kI+37aZ3JcSXapWKMXJG7rRp QdarCLTj6eF0uwIGosVczr9S+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyOnztM C+pz+9FgKvwDxL+dsBwPMB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V Rkp4U01McFYtb3oxdUpxdUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnQIMH2xvJCh+C/9jlQHNUJ8xxoB7J927KTgSQY1VprKk4CXD+157gk5FMI0D kru0I7aWQx0TrxiOwXZVeymtSk4N9W+2ey67BdzDt4PkSs8BbA6yLvRd5UYLX5OX YCQcbgy1AccXx2AytTwMwqzn+VE9GM6j2H7V6M6Bz5hHxuPZ6lECVscyApz29znV HtXhiVWhK8xISv1xuKwx6RIMJrMWpGHXDh+XnbsrsZQDVTpkBLGK2xzTnxNGLnJm I++JYwmSWiVpFbp2O/7vQMuPo7ZSxNfpHLfQZuooPj04midTAT/r7Vx4pAESLeYd qFNYrA65lopvSRAUsxZ5Olz5eg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:32:48 2026 by rpki-client