$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: C70Wq6VSyR2xoHAdCbn7xN4BV9SNz07PPDVV9Lo98vk= Subject key identifier: D5:A0:F6:75:EE:86:7B:DC:8A:B9:AB:51:D7:9B:13:4D:0B:64:81:3B Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 0224 Signing time: Sun 26 Jul 2026 15:30:17 +0000 Manifest this update: Sun 26 Jul 2026 15:30:16 +0000 Manifest next update: Sun 02 Aug 2026 15:30:16 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: 9/x1vBv390KgEIo4yjElzQwyIsFvY0mURNIhkuuz/cU=) 2: 94DAF6C241DE11F1A57436B1B5833773.roa (hash: ENNabAU4MMdkkOdqYyMduppz6I3AhhGmINhrVynFFMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Jul 26 15:30:16 2026 GMT Not After : Aug 2 15:30:16 2026 GMT Subject: CN=6a662809-764a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:59:50:6e:05:c3:54:f7:67:a0:dc:64:c6: de:33:49:00:04:3c:2c:4b:f9:32:19:cf:3e:41:fd: e3:14:5b:d5:fa:14:52:61:b3:4a:12:fc:0b:56:ed: f4:a7:38:c8:bc:3d:a8:31:24:ee:02:e8:bb:b3:11: 29:47:95:1f:32:e6:1b:f9:fc:e4:7d:5c:42:08:35: ab:1d:a8:fe:bd:f5:e4:24:4a:a7:f8:20:d8:bb:c2: cf:6c:6a:c2:9a:07:d9:91:fb:df:06:da:42:ab:22: a6:3e:c5:22:f0:4e:6e:73:9d:9d:ff:8f:52:60:53: 0b:44:7a:27:d9:2c:75:09:ac:17:9e:74:a2:67:4f: 97:63:7d:28:2a:99:73:97:a1:07:cb:2c:a8:18:6a: 8a:b1:54:55:96:00:0c:7f:84:02:f6:52:06:99:9a: f4:1c:90:7d:6d:20:90:d4:f3:92:32:43:c2:38:4d: 2b:77:f4:d6:1f:79:8f:b4:2c:28:80:4b:84:eb:04: 6a:35:f9:7c:d3:04:3d:fe:e9:32:35:5e:9e:89:af: 3f:82:ef:b0:66:ed:52:c6:4e:98:eb:50:de:dd:95: bb:d1:f4:76:30:b8:25:4d:57:00:c0:78:f0:b5:13: 23:26:36:88:a7:ee:9a:3d:e6:db:f7:f9:8e:0e:11: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A0:F6:75:EE:86:7B:DC:8A:B9:AB:51:D7:9B:13:4D:0B:64:81:3B X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:00:ed:1d:df:5e:a9:62:51:eb:cd:21:10:e5:ca:56:ed:e2: e8:e3:75:01:b9:8f:8d:aa:81:5f:a0:6c:71:d2:e6:3a:c7:e2: 9d:72:e6:7c:a3:e9:32:a1:10:4a:eb:ab:7b:90:22:eb:5c:86: a2:05:65:fd:e0:d7:9f:2b:dd:62:86:f5:69:a7:a7:0c:b3:f9: 82:f7:2e:b1:06:1f:7d:b9:85:4c:ee:c5:94:1a:00:2c:fd:f4: d8:c7:73:17:97:c6:36:d7:42:b1:d9:fb:9e:27:b9:4a:c1:54: 61:a5:16:d6:ae:d9:a6:2f:49:da:bf:e0:82:c3:f9:b0:77:c8: de:c8:34:9a:fc:b9:45:69:c0:07:34:bb:05:57:09:c6:c9:35: 47:9e:a4:81:9d:43:f4:87:9b:8f:e9:d7:3b:89:25:59:73:e4: 4f:d5:c1:79:2c:90:73:ee:ae:2c:67:d0:82:27:3c:e0:e6:ea: 79:18:fc:71:01:56:27:20:e2:7f:a0:de:4f:33:c1:40:61:64: 66:a3:8e:cc:d6:d2:8d:43:92:3d:29:c7:86:c3:91:0b:28:db: 2e:39:14:bc:6a:be:2a:8e:ed:89:08:3f:3f:00:da:fc:22:02: 76:57:9f:41:a4:59:5f:ab:62:b0:3f:d3:c0:4c:8a:65:90:36: f6:64:4d:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjYwNzI2MTUzMDE2WhcNMjYwODAyMTUzMDE2WjAYMRYwFAYD VQQDEw02YTY2MjgwOS03NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLBZUG4Fw1T3Z6DcZMbeM0kABDwsS/kyGc8+Qf3jFFvV+hRSYbNKEvwLVu30 pzjIvD2oMSTuAui7sxEpR5UfMuYb+fzkfVxCCDWrHaj+vfXkJEqn+CDYu8LPbGrC mgfZkfvfBtpCqyKmPsUi8E5uc52d/49SYFMLRHon2Sx1CawXnnSiZ0+XY30oKplz l6EHyyyoGGqKsVRVlgAMf4QC9lIGmZr0HJB9bSCQ1POSMkPCOE0rd/TWH3mPtCwo gEuE6wRqNfl80wQ9/ukyNV6eia8/gu+wZu1Sxk6Y61De3ZW70fR2MLglTVcAwHjw tRMjJjaIp+6aPebb9/mODhHndQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWg9nXu hnvcirmrUdebE00LZIE7MB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATgDtHd9eqWJR680hEOXKVu3i6ON1AbmPjaqBX6BscdLmOsfinXLmfKPpMqEQ Suure5Ai61yGogVl/eDXnyvdYob1aaenDLP5gvcusQYffbmFTO7FlBoALP302Mdz F5fGNtdCsdn7nie5SsFUYaUW1q7Zpi9J2r/ggsP5sHfI3sg0mvy5RWnABzS7BVcJ xsk1R56kgZ1D9Iebj+nXO4klWXPkT9XBeSyQc+6uLGfQgic84ObqeRj8cQFWJyDi f6DeTzPBQGFkZqOOzNbSjUOSPSnHhsORCyjbLjkUvGq+Ko7tiQg/PwDa/CICdlef QaRZX6tisD/TwEyKZZA29mRNWg== -----END CERTIFICATE-----Generated at Tue Jul 28 16:02:05 2026 by rpki-client