$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: mKb21eMg9tEObhKqlMqF8BKvzlvgDYBBerpBV9g2SP4= Subject key identifier: 72:6C:AA:2F:73:0C:7A:48:6B:D5:90:1B:9A:93:F5:90:4B:94:B2:8C Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 0688 Signing time: Sun 26 Jul 2026 23:21:17 +0000 Manifest this update: Sun 26 Jul 2026 23:21:17 +0000 Manifest next update: Sun 02 Aug 2026 23:21:17 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: NrkydXSk3+X2xzDTTKSG0EAXzCsU3ufNO4J+uBf16Io=) 2: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: V6rPhNEgfFSYoMAOj/JkTn27sOkQ/m44MmBwpVWrZVs=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: FVns4uZR/lgSYkSVzt2crKsv9A2mS6qMtNNtsApC6uY=) 4: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: QOzAxMNPfl2xsZK2GJpgLS4yP7Am+9az4cqsUr4KXF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Validity Not Before: Jul 26 23:21:17 2026 GMT Not After : Aug 2 23:21:17 2026 GMT Subject: CN=6a66966d-db83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:b1:bb:50:d7:91:4d:ae:7a:29:5b:54:ec: 3d:c5:ee:84:f4:9a:5e:ad:2f:d3:d7:b6:7f:d7:31: 1b:dd:54:45:35:79:7a:e9:1d:3e:46:22:00:b1:81: 07:36:66:1c:35:f5:a4:36:d0:c4:2c:8c:51:a3:fd: 8a:02:3c:b4:ed:32:fa:fc:4f:07:bb:1a:c5:42:a9: 45:17:58:ab:6e:90:c6:3e:7f:d4:26:2e:e8:44:45: 65:31:54:c9:7b:08:01:7f:a1:43:4d:a1:77:46:5b: 27:5a:1a:d9:82:ae:04:23:69:5f:0e:f7:0c:af:3a: 26:99:ac:90:93:57:f2:57:bb:c9:f9:d6:65:f2:3c: 43:0b:3b:d4:13:3b:64:fe:dc:bd:f6:49:3d:32:e7: 4c:1f:40:c9:62:68:64:8c:17:2a:4d:72:ba:39:b5: 22:0b:05:d0:dc:d4:ad:7a:c6:b0:61:72:47:18:3e: d1:93:a1:bb:3c:30:0a:56:61:ef:5c:61:c8:b4:32: 5e:fc:37:43:c4:e7:be:e6:96:85:52:45:cd:53:2e: b7:c0:57:e4:cc:01:22:44:9e:4e:c5:30:f6:f5:a9: fb:39:cb:a3:f2:ee:86:6d:cd:4e:31:cc:05:00:5d: ba:5a:72:f8:74:e3:7a:67:86:40:0b:c9:52:40:68: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6C:AA:2F:73:0C:7A:48:6B:D5:90:1B:9A:93:F5:90:4B:94:B2:8C X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:06:18:51:dc:ae:c3:49:9e:82:7e:b3:dc:7f:11:7b:2e: 44:55:bb:71:b4:af:94:ff:3e:a8:3f:3c:67:1d:76:08:5e:a9: cb:ac:68:3d:bd:7f:83:9e:e4:9a:42:f5:fe:5a:9d:64:52:73: 10:22:5a:44:82:de:a3:b0:fe:4a:db:59:65:3d:d6:9b:a2:e2: 5b:c7:df:58:6f:68:cd:05:3d:9b:83:be:4e:0d:eb:c0:64:3c: b5:d0:c6:e2:8d:e1:7a:a4:d6:2d:04:ab:7d:48:2d:37:b7:7d: 5a:94:63:f7:05:02:68:dc:d6:c4:a5:c0:f6:31:95:d7:7e:84: 84:71:30:e9:39:7d:a0:83:87:63:6d:5d:60:fd:df:32:c2:61: 12:b6:c0:31:4f:83:e1:f9:63:77:09:f9:54:ec:7f:22:e8:83: 99:f6:41:08:13:f4:1b:46:be:69:80:3c:25:bc:30:85:d7:d9: 81:b1:15:d8:3c:bc:7b:b0:7e:9f:84:9a:45:f6:7b:f6:b8:9d: 3c:8e:b1:4e:a9:7e:77:0e:de:fa:d7:7d:19:36:d8:48:15:ad: 8c:28:27:61:34:64:5d:ec:51:8f:96:44:15:f3:f4:71:0e:24: fc:35:68:f2:bd:53:d7:87:ad:cd:2c:c4:1a:41:b3:69:da:28: 8c:25:42:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjYwNzI2MjMyMTE3WhcNMjYwODAyMjMyMTE3WjAYMRYwFAYD VQQDEw02YTY2OTY2ZC1kYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZyxu1DXkU2ueilbVOw9xe6E9JperS/T17Z/1zEb3VRFNXl66R0+RiIAsYEH NmYcNfWkNtDELIxRo/2KAjy07TL6/E8HuxrFQqlFF1irbpDGPn/UJi7oREVlMVTJ ewgBf6FDTaF3RlsnWhrZgq4EI2lfDvcMrzommayQk1fyV7vJ+dZl8jxDCzvUEztk /ty99kk9MudMH0DJYmhkjBcqTXK6ObUiCwXQ3NStesawYXJHGD7Rk6G7PDAKVmHv XGHItDJe/DdDxOe+5paFUkXNUy63wFfkzAEiRJ5OxTD29an7Ocuj8u6Gbc1OMcwF AF26WnL4dON6Z4ZAC8lSQGiLjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJsqi9z DHpIa9WQG5qT9ZBLlLKMMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfgGGFHcrsNJnoJ+s9x/EXsuRFW7cbSvlP8+qD88Zx12CF6py6xoPb1/g57k mkL1/lqdZFJzECJaRILeo7D+SttZZT3Wm6LiW8ffWG9ozQU9m4O+Tg3rwGQ8tdDG 4o3heqTWLQSrfUgtN7d9WpRj9wUCaNzWxKXA9jGV136EhHEw6Tl9oIOHY21dYP3f MsJhErbAMU+D4fljdwn5VOx/IuiDmfZBCBP0G0a+aYA8JbwwhdfZgbEV2Dy8e7B+ n4SaRfZ79ridPI6xTql+dw7e+td9GTbYSBWtjCgnYTRkXexRj5ZEFfP0cQ4k/DVo 8r1T14etzSzEGkGzadoojCVCMA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:29:42 2026 by rpki-client