$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: U+d0AeR0WRUjAl0TL6NlTgafFenHxoA4QZ2rTWRrb4M= Subject key identifier: 31:44:C9:A3:98:E2:4A:1A:C0:01:0E:3B:61:5E:B3:92:56:67:9E:F0 Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0D9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0D71 Signing time: Tue 28 Jul 2026 18:08:56 +0000 Manifest this update: Tue 28 Jul 2026 18:08:56 +0000 Manifest next update: Tue 04 Aug 2026 18:08:56 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: xkdTnW/Sk92NSVaEutxxRTbZBbpfDL2MqoyEtLe0rQ8=) 2: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=) 3: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: Jul 28 18:08:56 2026 GMT Not After : Aug 4 18:08:56 2026 GMT Subject: CN=6a68f038-fda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:13:4a:a5:f3:66:32:a8:b8:b3:ba:1e:6b: 73:bf:47:f9:67:88:91:01:4e:29:64:f6:0b:93:b8: c5:b5:b5:1e:21:d8:13:66:03:06:9c:5b:7a:f2:1e: 7a:9f:76:21:42:6d:e1:97:e1:2f:c7:e0:a4:71:ae: 67:41:c0:d7:57:79:78:b6:a2:d7:be:9b:ec:aa:b8: 3a:9f:e6:e3:3c:8c:56:c1:67:1c:4a:6c:f3:80:a3: 8e:0d:1e:f2:22:af:cc:87:1f:da:96:a1:71:63:b2: 18:a8:fa:9f:a0:93:f3:a5:44:7d:d4:80:d0:74:67: 7b:6d:e1:cd:b4:d9:c5:5e:b7:1f:74:79:fb:92:5d: 21:9b:30:ba:b6:b0:40:d2:b5:34:4e:5d:db:b3:a6: 08:08:fe:8b:d0:f6:11:4a:82:14:3a:eb:bb:b0:f4: 16:ca:fd:bc:e1:70:5d:df:a7:31:ed:cd:46:71:9a: 6c:d8:a1:99:22:85:3e:86:d8:77:7d:fd:fe:4b:3f: 05:76:44:10:b8:b2:0b:00:f1:a2:76:a1:d1:63:c0: 14:1a:31:8b:87:d0:71:56:58:67:4b:5b:c8:0c:5d: 86:f6:14:56:c7:f4:dd:32:e0:60:7d:34:fe:00:d6: ad:48:5f:82:aa:b6:5d:b9:9a:5c:9a:be:4e:ef:20: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:44:C9:A3:98:E2:4A:1A:C0:01:0E:3B:61:5E:B3:92:56:67:9E:F0 X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:38:28:ca:96:7c:ce:6a:3b:4c:b5:0e:13:e6:69:a1:79:b7: 1b:c9:4d:30:64:08:98:d7:38:46:ca:68:8f:9a:6e:a0:f5:66: f7:59:51:b1:f7:b7:a1:fa:fd:ca:4e:73:1e:62:43:7c:e7:98: aa:61:3e:3d:28:76:35:93:70:85:dd:e8:2f:db:26:32:5d:91: 9f:ed:31:c8:28:1c:c9:93:7d:1f:b3:76:dc:31:b5:c2:82:12: f2:33:4e:ea:37:27:7d:df:9f:c4:de:94:ee:4a:53:82:f2:d2: 23:0a:aa:81:05:52:1c:77:92:53:8b:6e:4f:f9:d3:94:af:00: c7:6f:b7:a4:08:b2:af:03:c6:8f:e1:b8:c0:a5:27:22:e5:49: ca:9d:49:48:ad:a6:8d:f2:d5:6b:b1:ac:86:ce:dd:21:73:60: 70:ef:45:8b:e3:1c:c2:97:5d:61:dc:63:f2:ef:f1:47:d8:92: 73:0c:d2:55:d4:07:18:56:40:28:18:28:2f:40:6d:be:9c:33: 07:e9:03:01:6b:9a:72:b0:4d:35:5a:25:b9:39:8d:a7:52:1b: ee:ce:8a:cc:de:c5:3e:30:29:9f:cc:af:17:b0:a1:69:13:82: be:55:ac:26:79:e3:df:ca:8b:c5:85:e2:b8:99:29:79:9d:5e: 73:01:0d:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjYwNzI4MTgwODU2WhcNMjYwODA0MTgwODU2WjAYMRYwFAYD VQQDEw02YTY4ZjAzOC1mZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxwTSqXzZjKouLO6Hmtzv0f5Z4iRAU4pZPYLk7jFtbUeIdgTZgMGnFt68h56 n3YhQm3hl+Evx+Ckca5nQcDXV3l4tqLXvpvsqrg6n+bjPIxWwWccSmzzgKOODR7y Iq/Mhx/alqFxY7IYqPqfoJPzpUR91IDQdGd7beHNtNnFXrcfdHn7kl0hmzC6trBA 0rU0Tl3bs6YICP6L0PYRSoIUOuu7sPQWyv284XBd36cx7c1GcZps2KGZIoU+hth3 ff3+Sz8FdkQQuLILAPGidqHRY8AUGjGLh9BxVlhnS1vIDF2G9hRWx/TdMuBgfTT+ ANatSF+CqrZduZpcmr5O7yBN/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFEyaOY 4koawAEOO2Fes5JWZ57wMB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTgoypZ8zmo7TLUOE+ZpoXm3G8lNMGQImNc4Rspoj5puoPVm91lRsfe3ofr9 yk5zHmJDfOeYqmE+PSh2NZNwhd3oL9smMl2Rn+0xyCgcyZN9H7N23DG1woIS8jNO 6jcnfd+fxN6U7kpTgvLSIwqqgQVSHHeSU4tuT/nTlK8Ax2+3pAiyrwPGj+G4wKUn IuVJyp1JSK2mjfLVa7Gshs7dIXNgcO9Fi+McwpddYdxj8u/xR9iScwzSVdQHGFZA KBgoL0BtvpwzB+kDAWuacrBNNVoluTmNp1Ib7s6KzN7FPjApn8yvF7ChaROCvlWs Jnnj38qLxYXiuJkpeZ1ecwENXA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:32:29 2026 by rpki-client