$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: P1Q4J0xhOdUCI6cs6YQjR5fmopDD0ipw9IbbulaACB8= Subject key identifier: 24:5C:47:2E:2E:5D:D2:91:73:33:E3:2A:7A:F5:D2:BF:54:F0:43:C6 Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1DC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1DA5 Signing time: Tue 28 Jul 2026 16:12:18 +0000 Manifest this update: Tue 28 Jul 2026 16:12:18 +0000 Manifest next update: Tue 04 Aug 2026 16:12:18 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: ePFRbuZ2Kjx4vNWCaNCUSpVDi5pKB7kU9pGgi4AKJu8=) 2: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=) 4: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7619 (0x1dc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Jul 28 16:12:18 2026 GMT Not After : Aug 4 16:12:18 2026 GMT Subject: CN=6a68d4e2-bf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:7b:00:0d:08:40:73:38:cb:f2:9a:bb:96: 68:2e:79:de:ed:89:70:06:0c:f4:a6:7e:62:e0:3a: 54:f8:db:6e:41:ef:5a:fe:08:2e:d6:c8:00:e0:e0: 6f:f7:25:ca:e4:90:14:df:ec:30:14:cc:56:61:ee: 5c:f2:10:99:9c:63:7c:06:db:51:65:79:0d:cf:e1: a5:68:82:8c:80:04:fa:ca:85:df:47:dd:80:0f:a9: eb:53:02:91:2d:19:43:6e:25:eb:21:48:2e:0c:36: 6d:75:91:96:bf:e5:6f:d4:6a:b6:90:51:f1:3e:d0: 7b:f5:bb:9d:a3:99:71:80:d3:7d:24:95:4c:e5:cf: a2:b2:4e:a0:e6:5b:fd:e4:63:bb:39:2a:e1:a6:17: 2a:2c:04:f3:a3:2c:2e:b0:11:47:61:6a:82:b6:f4: 0c:bd:17:01:3f:26:ae:e7:26:1d:ba:ea:9a:9d:84: e2:00:49:cb:b3:d5:df:56:4e:66:f0:45:ae:45:1b: 6a:8d:81:d6:30:1d:5f:0a:44:4b:ea:93:a8:b1:e5: 85:e0:93:1b:f2:d6:4d:6f:5d:43:90:f3:93:b9:c7: d4:2a:ea:85:a4:48:dc:52:e2:11:e1:a2:cc:87:b3: 99:8d:80:16:53:15:d8:4f:2d:66:fc:76:ef:e3:5a: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5C:47:2E:2E:5D:D2:91:73:33:E3:2A:7A:F5:D2:BF:54:F0:43:C6 X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:2f:d0:a7:d8:01:1e:b1:20:02:c2:14:fe:ad:52:1c:80: 7e:bb:0d:e8:24:9d:65:3e:3d:03:9c:9c:22:22:f0:d2:55:7c: 87:ab:32:5a:cf:a2:ba:1b:28:c6:93:67:94:8f:31:ff:f3:ba: 97:c0:da:8d:00:eb:5f:49:23:37:90:e2:bd:bb:6e:48:f4:66: 08:4c:61:28:33:67:e2:35:69:18:c7:75:49:0a:5e:a8:77:cd: ad:ab:b4:7a:a7:94:f3:ce:53:d6:d8:f0:e5:dc:39:cf:9f:15: c5:7d:92:7b:f0:b4:f6:ad:67:13:57:64:2b:4f:a4:d2:38:9e: ac:49:56:f4:23:3d:bb:e7:f1:26:b6:0f:1e:b6:2e:f0:7e:bf: 57:e8:2c:e3:16:3f:27:e5:42:49:e1:07:89:aa:9e:a7:80:5b: 27:25:3e:30:be:9d:0f:b6:12:75:60:a3:1f:4b:9d:50:4d:14: 23:54:8b:0e:78:5a:c3:cc:78:b4:bb:78:a0:8c:38:6e:eb:d8: 0f:85:be:50:4f:4f:f7:1a:3a:14:fb:2d:9b:67:b0:79:80:35: 93:02:28:29:5c:76:4c:00:73:53:a6:63:5f:59:f2:ad:bd:75: 18:71:45:67:f9:47:ec:10:d7:63:85:c8:97:3d:c8:53:17:69: 9e:f1:eb:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjYwNzI4MTYxMjE4WhcNMjYwODA0MTYxMjE4WjAYMRYwFAYD VQQDEw02YTY4ZDRlMi1iZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAp7AA0IQHM4y/Kau5ZoLnne7YlwBgz0pn5i4DpU+NtuQe9a/ggu1sgA4OBv 9yXK5JAU3+wwFMxWYe5c8hCZnGN8BttRZXkNz+GlaIKMgAT6yoXfR92AD6nrUwKR LRlDbiXrIUguDDZtdZGWv+Vv1Gq2kFHxPtB79budo5lxgNN9JJVM5c+isk6g5lv9 5GO7OSrhphcqLATzoywusBFHYWqCtvQMvRcBPyau5yYduuqanYTiAEnLs9XfVk5m 8EWuRRtqjYHWMB1fCkRL6pOoseWF4JMb8tZNb11DkPOTucfUKuqFpEjcUuIR4aLM h7OZjYAWUxXYTy1m/Hbv41pknwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRcRy4u XdKRczPjKnr10r9U8EPGMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQbwv0KfYAR6xIALCFP6tUhyAfrsN6CSdZT49A5ycIiLw0lV8h6syWs+iuhso xpNnlI8x//O6l8DajQDrX0kjN5DivbtuSPRmCExhKDNn4jVpGMd1SQpeqHfNrau0 eqeU885T1tjw5dw5z58VxX2Se/C09q1nE1dkK0+k0jierElW9CM9u+fxJrYPHrYu 8H6/V+gs4xY/J+VCSeEHiaqep4BbJyU+ML6dD7YSdWCjH0udUE0UI1SLDnhaw8x4 tLt4oIw4buvYD4W+UE9P9xo6FPstm2eweYA1kwIoKVx2TABzU6ZjX1nyrb11GHFF Z/lH7BDXY4XIlz3IUxdpnvHrbg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:46 2026 by rpki-client