$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: r8tO/AfxA/keOzPxmn/7b17Ihmc8Ncd+7Jh3RqIjmd4= Subject key identifier: FC:5A:BA:6A:D7:DC:F3:D2:26:A0:6B:35:8C:AF:E1:89:9C:52:A7:A7 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 0A73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 0A63 Signing time: Sun 26 Jul 2026 20:07:58 +0000 Manifest this update: Sun 26 Jul 2026 20:07:58 +0000 Manifest next update: Sun 02 Aug 2026 20:07:58 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: 4UvHl2KwYDhxY/Mc9ubhE+2KPiGKP2iGnDeKd2NCeh4=) 2: lpb9V5SAKODYnzxLQ07Lyxg0dQo.asa (hash: wOn1WJkC/oS8P9duSZ71Wb8R5+48OktZzNfTZcyWsmg=) 3: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: doxkO4sksDjwokeIGgJqyU8qFI1WVtbLLGDEkNbQQGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2675 (0xa73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Jul 26 20:07:58 2026 GMT Not After : Aug 2 20:07:58 2026 GMT Subject: CN=6a66691e-c7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:e9:67:b2:03:e5:ea:64:97:e5:04:43:19: 1b:0b:b0:b6:35:ba:e4:21:ae:89:8b:fc:cd:e9:d5: 8a:69:ae:42:42:24:53:56:ec:61:cb:dd:a1:36:a0: 9d:ef:e8:3f:6d:c7:5e:19:75:3c:0b:dc:54:14:0a: af:d7:05:97:b9:94:ed:9a:32:40:52:41:6c:6c:03: 4f:02:86:f4:2a:f8:45:0e:f4:a3:34:37:0a:f7:40: 0b:1a:8b:7e:fa:84:ef:63:44:ad:e8:58:87:fd:73: 16:eb:88:e1:ee:db:3b:51:1c:8f:d8:fe:c0:34:f2: 1a:e2:bf:97:f9:bc:5b:b0:4f:6c:92:08:d6:81:3c: 88:4c:92:9d:17:2a:f7:c3:3b:23:fe:8b:d5:3d:12: 2d:be:f7:0a:87:f5:d1:4d:12:0e:f4:9d:7b:34:7d: a9:c9:f8:b0:b9:e1:de:f1:c1:b3:72:45:4a:56:73: 92:e3:c4:59:1f:25:79:cc:d8:c1:de:0e:f1:0e:da: da:48:ce:45:c8:80:4b:a6:4e:a1:b8:a0:6c:ee:08: 8c:2a:2d:7b:6b:9e:ac:4e:39:d9:f1:c7:3f:9f:ab: 63:73:ac:ee:0f:fa:d1:90:f6:2c:aa:2a:5a:bb:4d: cc:6a:88:76:28:86:5a:a8:a1:dd:03:b2:da:fc:da: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:BA:6A:D7:DC:F3:D2:26:A0:6B:35:8C:AF:E1:89:9C:52:A7:A7 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:44:a0:49:8e:27:2a:0c:a2:4b:2b:cf:05:7f:16:b2:f8:b2: 98:de:c5:9b:f4:cf:68:32:44:f2:de:f9:40:42:54:a7:df:bd: 6d:3c:f3:a3:4f:07:e9:fe:c0:9b:1a:5a:57:76:c0:ef:94:11: 89:81:e9:bc:0d:c5:bb:7d:2e:e9:43:bd:57:54:fc:56:aa:12: a1:a6:b7:b6:a1:37:63:7d:50:b5:0a:7e:41:64:cd:de:00:0b: f7:4b:f7:2f:d1:46:27:08:fa:78:41:c9:7f:70:5f:ff:0f:82: c9:29:a8:0a:00:db:d0:94:3c:dd:5a:e2:87:61:86:3b:f5:22: 38:12:b6:ec:a7:e5:db:b9:26:59:91:c4:d8:c4:11:1d:50:b5: e8:a2:5f:8c:f6:7c:c0:3c:3d:b8:31:9c:82:f1:03:2e:48:a5: 68:b0:c8:86:d4:74:4e:68:21:79:80:67:59:ef:d9:63:66:e6: 87:a2:cc:2b:26:ff:ea:c7:a6:8b:94:87:c2:b7:d9:5b:8f:4f: e9:36:12:e2:28:80:6e:e0:04:19:da:d7:be:7e:e1:ba:5a:81: d0:cf:cf:2c:4f:0e:80:7f:71:fd:89:0b:c1:6f:6a:eb:8a:01: eb:7a:55:30:4c:43:0e:a6:d7:ad:de:59:38:cd:13:87:5e:61: 18:13:1e:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjYwNzI2MjAwNzU4WhcNMjYwODAyMjAwNzU4WjAYMRYwFAYD VQQDEw02YTY2NjkxZS1jN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBzpZ7ID5epkl+UEQxkbC7C2NbrkIa6Ji/zN6dWKaa5CQiRTVuxhy92hNqCd 7+g/bcdeGXU8C9xUFAqv1wWXuZTtmjJAUkFsbANPAob0KvhFDvSjNDcK90ALGot+ +oTvY0St6FiH/XMW64jh7ts7URyP2P7ANPIa4r+X+bxbsE9skgjWgTyITJKdFyr3 wzsj/ovVPRItvvcKh/XRTRIO9J17NH2pyfiwueHe8cGzckVKVnOS48RZHyV5zNjB 3g7xDtraSM5FyIBLpk6huKBs7giMKi17a56sTjnZ8cc/n6tjc6zuD/rRkPYsqipa u03Maoh2KIZaqKHdA7La/Nq+xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxaumrX 3PPSJqBrNYyv4YmcUqenMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkSgSY4nKgyiSyvPBX8WsviymN7Fm/TPaDJE8t75QEJUp9+9bTzzo08H6f7A mxpaV3bA75QRiYHpvA3Fu30u6UO9V1T8VqoSoaa3tqE3Y31QtQp+QWTN3gAL90v3 L9FGJwj6eEHJf3Bf/w+CySmoCgDb0JQ83Vrih2GGO/UiOBK27Kfl27kmWZHE2MQR HVC16KJfjPZ8wDw9uDGcgvEDLkilaLDIhtR0TmgheYBnWe/ZY2bmh6LMKyb/6sem i5SHwrfZW49P6TYS4iiAbuAEGdrXvn7hulqB0M/PLE8OgH9x/YkLwW9q64oB63pV MExDDqbXrd5ZOM0Th15hGBMe3g== -----END CERTIFICATE-----Generated at Tue Jul 28 16:06:57 2026 by rpki-client