$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: pn41eEw/+fFmjGzjCocmYXUGDDrdH/Y2QX/HoEPDYSI= Subject key identifier: 1D:CE:E5:EB:D0:C1:42:D8:66:A0:92:9F:B9:8D:4E:9E:8A:95:03:BB Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0D1A Signing time: Tue 28 Jul 2026 18:33:50 +0000 Manifest this update: Tue 28 Jul 2026 18:33:49 +0000 Manifest next update: Tue 04 Aug 2026 18:33:49 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: QrZYDeB12EpxKl4eoYhL8xFih7i70o2lyqGp+3OOiqc=) 2: CB737E28422611F1882323FB8F833773.roa (hash: Sas3K0pNeR22zRvDEW+/zPRH6R1LCgFXxVnXBhEToJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Jul 28 18:33:49 2026 GMT Not After : Aug 4 18:33:49 2026 GMT Subject: CN=6a68f60d-09ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:f8:81:4c:b9:6e:8b:9f:b4:04:fc:86:a8: 35:4d:68:56:da:8e:87:87:35:45:23:65:29:c0:90: 47:5b:2b:47:88:74:d3:1d:3d:58:4e:c5:d2:6e:0f: 3d:41:73:42:86:19:d1:b5:cb:c1:e1:2d:dc:67:36: c7:f5:d0:96:af:55:85:67:2b:bd:4f:ad:f8:6c:84: 65:2e:dc:a1:1f:76:6a:6b:d0:2a:97:92:96:e6:ea: 94:3d:e7:59:8a:89:23:be:39:ba:eb:06:42:dc:77: c5:87:b1:0b:81:b5:ac:e2:12:5d:9b:36:59:f1:35: 43:45:aa:88:6b:d5:b7:ae:15:f0:d7:6a:21:e1:47: be:d4:71:b3:29:4c:1d:cb:de:44:9a:b5:67:f0:d6: e5:5d:bb:05:05:5f:40:25:e4:05:a1:96:b9:cd:7c: 71:20:8c:3f:62:8a:4b:13:ee:10:ec:fc:ef:39:63: d7:3e:75:a2:5a:a9:f2:e3:61:c9:d9:60:1f:87:4e: 39:2b:f8:77:7f:3b:35:92:8a:fc:e5:1e:87:1b:05: 46:e7:20:e2:be:7f:37:eb:dd:66:6a:8b:e6:11:b7: 56:a4:de:8f:d4:ab:76:54:8c:92:b2:a9:75:59:25: b8:02:85:02:99:32:3a:4b:96:66:23:40:92:21:40: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CE:E5:EB:D0:C1:42:D8:66:A0:92:9F:B9:8D:4E:9E:8A:95:03:BB X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:85:fa:c4:e6:c4:a4:8c:37:bc:d2:e7:19:95:74:f8:3a:c8: ae:bd:3c:54:3c:dd:e6:85:f4:06:37:dd:2e:c2:ab:8e:95:7e: fa:a9:ed:41:38:0d:0f:1a:36:33:46:7f:8c:2d:93:d2:d7:4c: f9:6d:51:b0:99:78:df:0a:40:79:82:36:18:3e:e1:29:a7:71: 17:6a:91:d3:3f:89:bc:19:fe:c8:8a:fd:e1:ab:5f:cf:5d:7c: 74:f7:ac:86:68:c7:cf:33:b8:73:d9:2a:48:de:7d:14:26:8a: 80:45:b5:96:43:37:5c:4f:ce:64:68:09:5e:b3:b0:e1:a0:50: c5:b3:a9:fb:75:3c:b8:1d:89:ab:c4:06:fc:96:5b:44:12:f2: fa:52:8c:8b:c3:ee:ef:ad:f9:6e:b6:f1:b9:72:14:84:e3:e4: 7e:9d:c6:92:e0:ac:9c:20:10:b3:08:72:9e:1e:64:ec:e1:61: d4:e0:03:ed:de:c2:f0:eb:cc:47:a0:e0:a4:95:70:d4:b2:f2: 6e:e3:9b:79:02:54:0c:1b:6c:bd:7b:ec:63:9b:af:8d:cd:fd: a2:57:70:36:63:49:db:4c:b3:58:c4:91:94:2e:d7:df:bb:1a: 74:30:e0:c4:99:a8:d9:25:0f:d9:95:24:b1:72:2b:70:93:72: fe:99:9a:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjYwNzI4MTgzMzQ5WhcNMjYwODA0MTgzMzQ5WjAYMRYwFAYD VQQDEw02YTY4ZjYwZC0wOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoS34gUy5bouftAT8hqg1TWhW2o6HhzVFI2UpwJBHWytHiHTTHT1YTsXSbg89 QXNChhnRtcvB4S3cZzbH9dCWr1WFZyu9T634bIRlLtyhH3Zqa9Aql5KW5uqUPedZ iokjvjm66wZC3HfFh7ELgbWs4hJdmzZZ8TVDRaqIa9W3rhXw12oh4Ue+1HGzKUwd y95EmrVn8NblXbsFBV9AJeQFoZa5zXxxIIw/YopLE+4Q7PzvOWPXPnWiWqny42HJ 2WAfh045K/h3fzs1kor85R6HGwVG5yDivn83691maovmEbdWpN6P1Kt2VIySsql1 WSW4AoUCmTI6S5ZmI0CSIUCXWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3O5evQ wULYZqCSn7mNTp6KlQO7MB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL4X6xObEpIw3vNLnGZV0+DrIrr08VDzd5oX0BjfdLsKrjpV++qntQTgNDxo2 M0Z/jC2T0tdM+W1RsJl43wpAeYI2GD7hKadxF2qR0z+JvBn+yIr94atfz118dPes hmjHzzO4c9kqSN59FCaKgEW1lkM3XE/OZGgJXrOw4aBQxbOp+3U8uB2Jq8QG/JZb RBLy+lKMi8Pu7635brbxuXIUhOPkfp3GkuCsnCAQswhynh5k7OFh1OAD7d7C8OvM R6DgpJVw1LLybuObeQJUDBtsvXvsY5uvjc39oldwNmNJ20yzWMSRlC7X37sadDDg xJmo2SUP2ZUksXIrcJNy/pmamA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:28:42 2026 by rpki-client