$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: Laz8i1HaBYPUcsyKTaEArlq+ckQAL1BlRpl8pcLEaTA= Subject key identifier: F5:3A:FE:E1:AF:F8:B3:5B:19:78:D7:67:36:AC:60:CB:EF:70:5A:0D Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 012A Signing time: Mon 21 Sep 2026 05:44:18 +0000 Manifest this update: Mon 21 Sep 2026 05:44:17 +0000 Manifest next update: Mon 28 Sep 2026 05:44:17 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: 2Xj6qezdhEXYUpxQbuwjBudxcBOY23KbbqMaRVQQNak=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: es6gg4VR5lFbEJCzmzV+IK5Hk13Q64hmXPH+fWoKdMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Sep 21 05:44:17 2026 GMT Not After : Sep 28 05:44:17 2026 GMT Subject: CN=6ab0c432-4bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:08:b2:fc:91:d8:10:31:32:b6:46:91:62: 44:38:4e:da:fd:89:ec:dd:7e:98:07:ae:1b:08:83: 52:77:6c:ee:ce:2a:b0:c9:d3:f4:86:32:4b:3e:ce: 20:43:89:ff:ee:ab:a0:d7:b4:0e:af:d4:eb:84:d3: 97:2d:3e:70:47:1f:e2:43:08:89:45:75:5f:69:f4: 7c:b0:0d:07:15:58:b6:ca:e5:32:67:74:5e:df:64: db:67:cf:21:08:3d:fb:6d:0c:ee:86:38:2f:c9:1b: f3:cc:31:50:20:9f:d5:d8:61:17:c0:e3:f8:fb:f5: 76:b4:63:65:b0:fe:35:fe:3e:60:3e:64:71:38:1e: d7:11:52:24:94:20:84:79:ad:17:8b:b3:12:d9:4b: 87:41:a4:d4:d2:8f:0e:6d:fe:e5:ff:9b:72:e5:d9: 55:85:e6:a7:d7:6f:12:aa:99:a7:9c:3f:4c:31:67: 31:88:e0:c7:ed:13:e4:b5:cb:51:c0:8f:6b:1a:0c: 0c:91:d0:67:d5:f5:30:e2:13:ed:f0:57:fe:d7:94: d3:16:c6:5a:a9:29:c5:f3:3c:3d:7b:0f:30:09:92: 13:69:3e:1b:05:66:bc:5d:d9:bf:67:d5:d3:1f:10: fb:8e:29:a9:a1:cc:b1:de:81:c8:fd:d3:49:8d:06: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3A:FE:E1:AF:F8:B3:5B:19:78:D7:67:36:AC:60:CB:EF:70:5A:0D X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6d:ee:24:79:25:94:f8:1b:2f:e3:41:57:aa:69:be:99:75: fb:cd:21:e3:15:f5:08:41:aa:b3:db:7e:ce:73:fa:58:1f:09: d3:4c:27:28:46:68:46:7f:76:05:5d:ed:6f:56:f1:60:74:93: 49:6a:d6:a3:20:f7:9d:59:1a:cd:64:c3:12:73:02:ef:f2:53: 13:21:ef:18:58:52:35:fc:6b:63:b3:03:cf:05:43:d6:b7:88: 8d:f0:02:8b:42:f5:44:be:21:58:6e:b2:59:de:ce:57:de:0f: 43:fe:95:8e:1f:77:88:96:f4:72:0e:9a:94:c5:9c:be:8b:8c: 09:34:b8:d6:16:ab:1b:e8:22:38:83:c6:69:4f:b0:58:15:1a: f9:16:35:78:d4:ce:ce:e8:27:2e:db:3c:95:31:07:38:62:03: cc:9e:c1:0a:74:02:6a:8a:4a:07:e8:d3:7d:6b:e3:5f:c4:5f: 8e:67:3a:b9:d3:c5:fb:79:3f:27:77:ae:c7:ba:4a:f4:28:a7: cc:6f:75:f4:25:52:9a:30:f8:f3:ce:a0:c9:2b:85:fa:5f:d5: 16:a6:53:cb:c1:79:15:39:51:fb:d9:0c:48:49:6e:18:4c:fa: bf:8c:b4:c3:d1:1e:d6:f2:6c:92:ef:88:be:a3:c1:f4:29:7c: 70:2a:4d:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjYwOTIxMDU0NDE3WhcNMjYwOTI4MDU0NDE3WjAYMRYwFAYD VQQDEw02YWIwYzQzMi00YmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunUIsvyR2BAxMrZGkWJEOE7a/Yns3X6YB64bCINSd2zuziqwydP0hjJLPs4g Q4n/7qug17QOr9TrhNOXLT5wRx/iQwiJRXVfafR8sA0HFVi2yuUyZ3Re32TbZ88h CD37bQzuhjgvyRvzzDFQIJ/V2GEXwOP4+/V2tGNlsP41/j5gPmRxOB7XEVIklCCE ea0Xi7MS2UuHQaTU0o8Obf7l/5ty5dlVhean128SqpmnnD9MMWcxiODH7RPktctR wI9rGgwMkdBn1fUw4hPt8Ff+15TTFsZaqSnF8zw9ew8wCZITaT4bBWa8Xdm/Z9XT HxD7jimpocyx3oHI/dNJjQYdzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPU6/uGv +LNbGXjXZzasYMvvcFoNMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN23uJHkllPgbL+NBV6ppvpl1+80h4xX1CEGqs9t+znP6WB8J00wnKEZoRn92 BV3tb1bxYHSTSWrWoyD3nVkazWTDEnMC7/JTEyHvGFhSNfxrY7MDzwVD1reIjfAC i0L1RL4hWG6yWd7OV94PQ/6Vjh93iJb0cg6alMWcvouMCTS41harG+giOIPGaU+w WBUa+RY1eNTOzugnLts8lTEHOGIDzJ7BCnQCaopKB+jTfWvjX8Rfjmc6udPF+3k/ J3eux7pK9CinzG919CVSmjD4886gySuF+l/VFqZTy8F5FTlR+9kMSEluGEz6v4y0 w9Ee1vJsku+IvqPB9Cl8cCpN4A== -----END CERTIFICATE-----Generated at Mon Sep 21 17:01:29 2026 by rpki-client