$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: yEIwdCwaRaDzN/Fs+VQGsH2u2GtBY3DBITNc2M7icsw= Subject key identifier: 69:57:73:8D:25:B5:33:8E:7C:24:16:22:0F:41:7D:36:C5:3E:73:4F Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A9F Signing time: Tue 28 Jul 2026 19:58:08 +0000 Manifest this update: Tue 28 Jul 2026 19:58:08 +0000 Manifest next update: Tue 04 Aug 2026 19:58:08 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: QPKwlzVgZRgSogfP613p7RcNOjR9/t+I7sIGCaiJavI=) 2: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: Z4njT+LfGD0hhTdG6fH7Bq3vm9YCgyhIlI8vWteffgE=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: Yak8zAvp+zCmTFiqBb7JfPxw1OHM+UY0jPPh/BPCu6I=) 4: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: /MynAjOlsPDDrLH0ofjr2IcwJe85uR/Yh/gIQF7Gksg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Jul 28 19:58:08 2026 GMT Not After : Aug 4 19:58:08 2026 GMT Subject: CN=6a6909d0-f56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:54:0b:67:82:68:98:af:6c:d9:e6:fd:42: 76:25:5a:36:8a:de:bf:a3:53:c6:41:47:27:dd:d4: 3e:30:35:fd:2b:4e:24:e8:ea:69:cb:65:c8:30:cb: 0e:e3:5e:2d:2c:fc:d9:95:22:8a:0d:fb:1c:68:42: d6:c5:89:74:d5:9c:9d:10:8f:cf:e7:c4:27:0d:9b: b6:8f:a1:a6:1e:62:3b:48:3f:30:ec:4a:cb:af:5b: 6b:96:7c:1d:80:f5:90:4a:c8:98:b2:00:a4:57:a4: 61:c8:f9:98:c0:04:83:73:cc:2a:68:2f:d4:c9:26: e5:af:0b:af:4d:82:76:30:6b:ec:0f:ee:c6:c7:fe: ad:7e:e3:83:2a:6b:eb:ec:01:a6:db:29:c6:46:a0: c8:b1:e3:45:1f:69:b9:65:3e:43:48:39:e3:95:7b: e6:ed:53:a3:51:4e:36:40:a5:e1:7b:ca:23:e7:81: e3:01:d1:d5:37:e9:36:f0:d0:60:c4:e7:c8:34:51: b5:60:20:cb:2e:42:2c:30:9a:fd:bb:c2:1f:6b:61: 1c:b1:02:13:0f:b3:01:ab:c4:2d:5d:41:31:6d:d7: 74:75:90:07:26:ea:86:43:3d:c9:9c:44:49:78:9d: 13:30:c8:28:06:17:b9:2e:05:f0:7b:ea:73:f1:9b: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:73:8D:25:B5:33:8E:7C:24:16:22:0F:41:7D:36:C5:3E:73:4F X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3b:db:32:ad:72:45:46:73:d5:4c:3e:c4:71:c9:95:5e:9d: b9:de:8a:47:cb:0e:f9:c6:ea:4a:61:ee:65:9c:af:63:f1:b8: 78:c3:88:d0:d2:1f:92:1c:f8:08:24:55:37:47:67:5e:e2:81: f8:4e:50:17:0f:dd:98:6b:ff:61:9b:fb:31:56:a8:bc:c6:24: 93:92:5c:28:c7:4a:14:2b:af:54:bc:48:7d:c7:0e:d1:e7:fb: e6:a6:d9:f0:05:90:2b:02:55:a2:6a:b4:2e:a2:91:b7:f9:2d: 8f:6f:f0:d3:a5:ef:8c:e0:7e:c5:a8:52:45:ac:19:67:14:39: 72:3f:93:bd:d3:20:af:94:89:3b:e7:68:d2:c0:1f:00:ac:8a: 2d:00:63:f8:52:67:70:87:ed:9d:9f:05:85:85:2d:21:77:8d: 07:41:f7:98:eb:9f:f3:78:57:d7:8f:3f:91:cb:14:7b:1c:7d: c7:c0:c5:46:8d:d8:a2:fc:3e:e2:84:df:51:08:ce:38:b0:bd: 46:9f:5e:d2:ef:6a:83:1d:33:6e:39:91:75:66:44:cf:56:04: 9d:6c:c2:d9:f4:09:bc:7a:af:00:4b:16:56:8f:7e:6f:33:09: 34:60:9e:99:30:27:47:7f:9f:84:1c:13:51:59:30:cd:40:1a: 44:02:85:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjYwNzI4MTk1ODA4WhcNMjYwODA0MTk1ODA4WjAYMRYwFAYD VQQDEw02YTY5MDlkMC1mNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO9UC2eCaJivbNnm/UJ2JVo2it6/o1PGQUcn3dQ+MDX9K04k6Oppy2XIMMsO 414tLPzZlSKKDfscaELWxYl01ZydEI/P58QnDZu2j6GmHmI7SD8w7ErLr1trlnwd gPWQSsiYsgCkV6RhyPmYwASDc8wqaC/UySblrwuvTYJ2MGvsD+7Gx/6tfuODKmvr 7AGm2ynGRqDIseNFH2m5ZT5DSDnjlXvm7VOjUU42QKXhe8oj54HjAdHVN+k28NBg xOfINFG1YCDLLkIsMJr9u8Ifa2EcsQITD7MBq8QtXUExbdd0dZAHJuqGQz3JnERJ eJ0TMMgoBhe5LgXwe+pz8ZvQPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlXc40l tTOOfCQWIg9BfTbFPnNPMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYDvbMq1yRUZz1Uw+xHHJlV6dud6KR8sO+cbqSmHuZZyvY/G4eMOI0NIfkhz4 CCRVN0dnXuKB+E5QFw/dmGv/YZv7MVaovMYkk5JcKMdKFCuvVLxIfccO0ef75qbZ 8AWQKwJVomq0LqKRt/ktj2/w06XvjOB+xahSRawZZxQ5cj+TvdMgr5SJO+do0sAf AKyKLQBj+FJncIftnZ8FhYUtIXeNB0H3mOuf83hX148/kcsUexx9x8DFRo3Yovw+ 4oTfUQjOOLC9Rp9e0u9qgx0zbjmRdWZEz1YEnWzC2fQJvHqvAEsWVo9+bzMJNGCe mTAnR3+fhBwTUVkwzUAaRAKFtg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:34:05 2026 by rpki-client