$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: DhpSZeLbi+VstPnuV5P1d0A0/4Bu8BxXH2YUgTk8pYc= Subject key identifier: 1E:A2:60:C6:52:1C:88:96:66:78:72:8D:68:0D:62:2C:BC:F8:DF:33 Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: 0140 Signing time: Mon 27 Jul 2026 07:21:11 +0000 Manifest this update: Mon 27 Jul 2026 07:21:10 +0000 Manifest next update: Mon 03 Aug 2026 07:21:10 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: WIhUR7jU0YArmwOtn3bepCJFJb+HD5huX51mfejmff4=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Jul 27 07:21:10 2026 GMT Not After : Aug 3 07:21:10 2026 GMT Subject: CN=6a6706e7-cddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:2f:06:fa:f1:c7:c9:21:d4:d5:4a:4f:8d: bd:aa:2c:5b:f9:e0:47:c9:18:41:8c:05:e6:12:e8: 93:69:7a:2b:1b:ce:b9:d3:72:52:22:ef:84:41:9f: c7:57:2d:6e:4b:df:b5:98:ab:5b:a9:8d:dd:df:94: 68:a2:6a:59:38:06:29:d7:98:7f:a1:03:0a:eb:a9: 15:f7:3c:8d:44:fd:47:b2:1e:3e:37:cc:9e:57:28: d2:8c:e6:0b:55:47:78:cf:68:5b:46:6d:af:3c:16: 2e:52:e4:3e:9b:f5:b4:24:aa:c2:a7:40:76:67:e4: 96:57:27:02:10:38:85:2b:fc:97:65:5c:a2:d4:f0: 20:55:d4:6c:c2:bb:53:2b:01:de:3c:61:b8:6f:6d: f6:1d:cd:37:06:be:7d:0c:5b:a9:42:61:75:de:71: 51:6f:69:30:e3:20:94:dc:a0:c3:f4:67:e2:0b:b3: f4:f5:8b:98:fa:df:82:50:40:77:83:0d:0c:59:44: 12:0c:d9:4a:b3:35:16:5a:f9:53:6a:d7:de:37:09: 37:20:d5:65:7a:df:94:f5:c3:ce:46:9e:8d:4a:20: 30:aa:af:a2:fc:84:89:29:e8:1d:c7:05:80:3c:8a: 56:64:e3:de:81:ea:b1:12:ea:20:60:5f:d1:17:61: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A2:60:C6:52:1C:88:96:66:78:72:8D:68:0D:62:2C:BC:F8:DF:33 X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e0:b5:c8:43:69:1d:b0:ae:ce:84:a7:26:9b:97:af:d3:a9: 10:b4:0b:f4:2a:5f:ef:3d:76:bf:d2:e4:8d:0d:2f:16:19:1c: 34:62:9b:bb:cd:dd:f4:90:ba:3e:6b:b7:46:f7:e4:2b:d3:e3: df:64:e2:65:1f:15:5d:ac:a1:2f:e3:29:84:99:d1:91:3f:67: f0:44:aa:11:71:4b:e2:d7:7f:60:c7:b7:6f:66:5c:89:91:13: d0:74:a6:e6:a5:cb:bc:0e:7f:45:d5:0b:c9:4b:cc:da:09:8e: 2c:d3:ee:97:54:3f:82:bb:14:c0:ad:19:22:87:1f:d0:6d:33: b1:9f:81:87:5f:79:97:ed:ce:0f:2f:37:e2:c5:ed:5e:b5:2d: 20:89:9f:ce:2f:77:75:ce:a0:51:50:e9:93:cf:5b:97:6e:8e: 27:7b:03:da:3e:96:61:05:77:ea:b3:ff:90:52:b9:8a:48:0a: 38:81:d4:89:80:5c:53:cc:66:0f:8a:62:ab:18:9a:79:1b:dc: 98:b2:87:3a:cf:f8:06:73:0b:54:72:67:93:34:92:36:c4:54: ed:d2:84:59:4d:d8:0e:ec:e8:64:2d:f6:57:88:73:72:65:2b: 17:15:06:a9:d4:34:33:75:9e:44:97:04:c2:aa:bb:18:b4:26: 87:b4:c3:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4 NEM3MkY0RTcwHhcNMjYwNzI3MDcyMTEwWhcNMjYwODAzMDcyMTEwWjAYMRYwFAYD VQQDEw02YTY3MDZlNy1jZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G0vBvrxx8kh1NVKT429qixb+eBHyRhBjAXmEuiTaXorG86503JSIu+EQZ/H Vy1uS9+1mKtbqY3d35RoompZOAYp15h/oQMK66kV9zyNRP1Hsh4+N8yeVyjSjOYL VUd4z2hbRm2vPBYuUuQ+m/W0JKrCp0B2Z+SWVycCEDiFK/yXZVyi1PAgVdRswrtT KwHePGG4b232Hc03Br59DFupQmF13nFRb2kw4yCU3KDD9GfiC7P09YuY+t+CUEB3 gw0MWUQSDNlKszUWWvlTatfeNwk3INVlet+U9cPORp6NSiAwqq+i/ISJKegdxwWA PIpWZOPegeqxEuogYF/RF2HXSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6iYMZS HIiWZnhyjWgNYiy8+N8zMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk NzVZSmlWLV9JZTJFeHk5T2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEeC1yENpHbCuzoSnJpuXr9OpELQL9Cpf7z12v9LkjQ0vFhkcNGKbu83d9JC6 Pmu3RvfkK9Pj32TiZR8VXayhL+MphJnRkT9n8ESqEXFL4td/YMe3b2ZciZET0HSm 5qXLvA5/RdULyUvM2gmOLNPul1Q/grsUwK0ZIocf0G0zsZ+Bh195l+3ODy834sXt XrUtIImfzi93dc6gUVDpk89bl26OJ3sD2j6WYQV36rP/kFK5ikgKOIHUiYBcU8xm D4piqxiaeRvcmLKHOs/4BnMLVHJnkzSSNsRU7dKEWU3YDuzoZC32V4hzcmUrFxUG qdQ0M3WeRJcEwqq7GLQmh7TDdw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:33:14 2026 by rpki-client