$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft File: 7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft (raw, json) Hash identifier: 5tamdwKgI2ShKKgeG+7bbikvYahkPOgYfH4b/UZvLLs= Subject key identifier: 42:A6:3A:27:69:94:D8:C0:38:07:C2:40:7A:82:A8:4D:BC:11:E9:FC Authority key identifier: EF:E2:2D:CB:07:DD:5E:F3:CD:80:25:FA:B3:F5:58:A6:7C:18:08:54 Certificate issuer: /CN=A916B5CE/serialNumber=EFE22DCB07DD5EF3CD8025FAB3F558A67C180854 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft Manifest number: 0A Signing time: Mon 21 Sep 2026 09:11:21 +0000 Manifest this update: Mon 21 Sep 2026 09:11:20 +0000 Manifest next update: Mon 28 Sep 2026 09:11:20 +0000 Files and hashes: 1: 7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl (hash: 1F9jsvgiFj8Imta3qU9PPABd1RPyVlUoT+Ot7qOl9dI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B5CE, serialNumber=EFE22DCB07DD5EF3CD8025FAB3F558A67C180854 Validity Not Before: Sep 21 09:11:20 2026 GMT Not After : Sep 28 09:11:20 2026 GMT Subject: CN=6ab0f4b8-4414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:9f:29:ad:ea:9f:ce:44:97:50:6f:f0:b2: 24:f1:3e:b9:7c:fa:2a:9e:b2:77:ff:13:fe:29:e0: 3d:b0:21:fd:23:71:75:b0:43:43:fd:f3:15:5c:60: ed:42:7e:65:fa:5e:21:85:57:9c:92:93:b4:fc:5d: 4c:91:36:2d:ef:d2:6b:f1:4d:22:7c:70:2b:7d:c7: 80:c9:36:2f:cd:8e:c3:3d:62:3d:ce:4f:45:1b:6d: 5d:46:20:2f:b1:0b:eb:0c:5a:a6:40:02:bc:4f:34: ce:e3:28:89:e1:49:1d:6a:3e:ca:c6:81:7b:79:44: 5b:58:ef:66:ff:b7:0c:e9:06:6d:70:05:34:4b:71: a9:15:2b:3b:df:26:e3:44:64:b1:82:7d:04:9b:2c: f7:4b:b9:9d:94:2c:cb:ad:20:e8:10:03:a9:c3:28: a4:33:66:f7:63:65:8d:e1:2e:01:02:2e:f2:33:c1: c3:4c:51:c0:0f:ff:db:40:a6:15:cc:2b:d0:fa:6c: b4:04:35:dc:98:d2:b7:96:4b:0f:49:f3:03:77:2c: 8e:07:6d:8a:c1:ee:86:9a:e9:6e:62:e8:20:bc:aa: de:fb:4f:d3:f9:83:d2:0d:11:28:82:29:4e:80:23: 0e:c0:4f:54:78:06:d4:45:aa:9f:0f:81:3d:8f:3c: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:3A:27:69:94:D8:C0:38:07:C2:40:7A:82:A8:4D:BC:11:E9:FC X509v3 Authority Key Identifier: keyid:EF:E2:2D:CB:07:DD:5E:F3:CD:80:25:FA:B3:F5:58:A6:7C:18:08:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:59:0f:1c:87:f0:85:c7:6f:c4:6f:c7:0b:67:3f:23:a9:b7: 2e:5f:a8:bf:e5:95:b2:07:0f:33:ba:47:d0:77:e8:57:62:ee: e4:ad:62:30:eb:f0:54:1e:eb:46:af:88:20:31:38:34:82:c2: 48:69:a9:34:45:7e:3a:ee:b2:e8:02:3b:1f:76:62:76:7e:27: 31:4f:d2:4e:ab:78:56:77:59:f1:60:16:ac:c7:ee:da:47:1b: cc:45:fb:73:50:1d:5c:96:ce:00:24:6e:2c:9c:07:66:78:62: 72:4d:07:b6:3e:e4:30:09:c4:10:24:10:fb:e6:86:3a:e0:7b: 67:79:fe:5a:c0:05:87:ee:ed:cd:26:73:1b:53:17:9a:63:94: 16:74:49:78:c6:3f:7c:43:5d:17:01:d5:0b:9a:33:66:22:3a: 49:74:bd:cc:c8:de:6f:4b:22:69:63:51:93:45:27:97:59:da: 56:4f:97:dc:6e:ef:70:bc:dc:24:9d:cd:1e:bc:d6:c8:1c:ad: 79:b5:dd:53:62:2d:7d:bc:b5:f7:66:94:22:6b:bc:e3:54:3a: ab:65:04:f3:47:75:23:75:6e:27:80:c5:c2:b9:35:ae:e5:a3: c6:3b:d9:7e:52:c7:bc:c3:f8:52:7b:96:fd:e0:60:1c:13:de: 9e:5e:4b:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjVDRTExMC8GA1UEBRMoRUZFMjJEQ0IwN0RENUVGM0NEODAyNUZBQjNGNTU4QTY3 QzE4MDg1NDAeFw0yNjA5MjEwOTExMjBaFw0yNjA5MjgwOTExMjBaMBgxFjAUBgNV BAMTDTZhYjBmNGI4LTQ0MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4p58preqfzkSXUG/wsiTxPrl8+iqesnf/E/4p4D2wIf0jcXWwQ0P98xVcYO1C fmX6XiGFV5ySk7T8XUyRNi3v0mvxTSJ8cCt9x4DJNi/NjsM9Yj3OT0UbbV1GIC+x C+sMWqZAArxPNM7jKInhSR1qPsrGgXt5RFtY72b/twzpBm1wBTRLcakVKzvfJuNE ZLGCfQSbLPdLuZ2ULMutIOgQA6nDKKQzZvdjZY3hLgECLvIzwcNMUcAP/9tAphXM K9D6bLQENdyY0reWSw9J8wN3LI4HbYrB7oaa6W5i6CC8qt77T9P5g9INESiCKU6A Iw7AT1R4BtRFqp8PgT2PPDwzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQqY6J2mU 2MA4B8JAeoKoTbwR6fwwHwYDVR0jBBgwFoAU7+ItywfdXvPNgCX6s/VYpnwYCFQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNUNFLzVBMjQ4NDBDQUI0 MzExRjE4MzUzM0RERDcwMTFGOTcwLzctSXR5d2ZkWHZQTmdDWDZzX1ZZcG53WUNG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNy1JdHl3ZmRYdlBOZ0NYNnNfVllwbndZQ0ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NUNFLzVBMjQ4NDBDQUI0MzExRjE4MzUzM0RERDcwMTFGOTcwLzctSXR5d2ZkWHZQ TmdDWDZzX1ZZcG53WUNGUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUWQ8ch/CFx2/Eb8cLZz8jqbcuX6i/5ZWyBw8zukfQd+hXYu7krWIw6/BUHutG r4ggMTg0gsJIaak0RX467rLoAjsfdmJ2ficxT9JOq3hWd1nxYBasx+7aRxvMRftz UB1cls4AJG4snAdmeGJyTQe2PuQwCcQQJBD75oY64Htnef5awAWH7u3NJnMbUxea Y5QWdEl4xj98Q10XAdULmjNmIjpJdL3MyN5vSyJpY1GTRSeXWdpWT5fcbu9wvNwk nc0evNbIHK15td1TYi19vLX3ZpQia7zjVDqrZQTzR3UjdW4ngMXCuTWu5aPGO9l+ Use8w/hSe5b94GAcE96eXkuh -----END CERTIFICATE-----Generated at Mon Sep 21 21:09:53 2026 by rpki-client