$ rpki-client -vvf rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft File: 7BWoR694TfECWIIbq5lKyCA1ld8.mft (raw, json) Hash identifier: Kp1zyfeKemcs+sVUiUvSiEXV5s5VpNWs4CNRSQLMog4= Subject key identifier: D2:C7:BD:17:7C:1D:D4:17:2F:EA:10:DF:14:18:A3:AA:63:D9:86:3F Authority key identifier: EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF Certificate issuer: /CN=A917B218/serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft Manifest number: 42 Signing time: Sat 13 Jun 2026 08:36:13 +0000 Manifest this update: Sat 13 Jun 2026 08:36:13 +0000 Manifest next update: Sat 20 Jun 2026 08:36:13 +0000 Files and hashes: 1: 7BWoR694TfECWIIbq5lKyCA1ld8.crl (hash: 1B+6ieU/sP37dBYh8UVApNiPBkg2S5VnQw69Jsy7A48=) 2: D2DAE050606411F18D93D7436447A888.roa (hash: p8bynTpUtraazzZ/QKRgqMb6jcWdyLWfJk6eYm7MHMI=) 3: 0ADA2358606511F1B2EB18476447A888.roa (hash: CLI1Bc70GNr1M6sLi1g14vwbCgYMCVC3xxYYksxjaGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.crl rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B218, serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF Validity Not Before: Jun 13 08:36:13 2026 GMT Not After : Jun 20 08:36:13 2026 GMT Subject: CN=6a2d167d-984b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:47:ea:a0:1a:1c:7c:f5:be:74:6b:12:e7: ed:f8:d1:03:bb:36:62:41:54:09:8e:9e:08:13:bd: 6d:76:a2:b9:d7:c4:ea:4e:0f:39:54:d0:c6:61:c7: ee:70:8e:a8:e9:6b:c8:e4:ac:14:53:12:fe:ad:aa: 20:33:93:f4:91:b8:bb:72:1b:e3:7a:37:f8:c5:3d: 8d:85:6f:57:09:35:b8:d1:24:22:69:7f:96:32:be: c4:24:36:18:10:de:da:29:02:62:8c:cf:4f:6a:e8: c4:b5:f1:25:45:a2:11:50:63:0f:e6:43:ac:0a:0d: ca:5a:6f:31:72:3c:c9:e3:1c:5a:a9:58:c0:ab:44: b6:30:0a:01:93:34:0a:aa:0b:29:4f:78:0c:ed:c2: 34:64:46:33:52:e8:98:7f:1b:b3:6d:da:24:7e:d1: 08:91:2a:36:0a:74:75:8a:ff:8c:cf:01:92:db:b2: 86:d5:92:22:bb:89:16:64:ac:38:e8:22:12:9c:ac: 08:40:95:7b:7e:67:24:5a:6a:b6:fc:8e:26:cd:7c: a7:c1:e4:1e:bd:a6:cd:63:c0:c5:e5:18:86:31:84: 08:ea:7d:60:2d:82:7a:31:6d:99:88:03:14:98:13: ca:71:f1:07:d6:2a:47:c0:3b:fe:95:66:f5:f6:33: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:BD:17:7C:1D:D4:17:2F:EA:10:DF:14:18:A3:AA:63:D9:86:3F X509v3 Authority Key Identifier: keyid:EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ff:f9:89:c6:1d:81:e2:c7:cc:da:98:18:2f:fc:ff:d7:47: 4a:9e:65:12:a8:5c:23:0c:b6:35:07:a9:c0:04:bc:86:ff:4b: 26:08:0b:49:7c:00:38:b2:b7:64:ad:d4:93:4f:55:ae:2a:cb: 2d:f2:f6:a3:11:6f:17:3f:20:be:36:b5:7e:f1:c6:11:bc:a4: 5f:0b:7e:97:15:b6:6b:ef:35:64:d2:4c:e0:38:9e:4c:50:f3: 96:1c:89:c9:84:75:ca:bd:c7:83:95:6b:e7:5d:98:94:bd:da: 91:c3:45:48:80:08:70:e2:03:f2:e1:61:b6:2a:65:58:d2:35: 11:9f:6f:b1:d7:ef:54:09:03:6f:66:ad:7e:83:5a:ea:89:de: 41:5f:a9:45:8e:ba:0a:ef:9c:42:da:5a:6c:b4:2b:98:3d:60: 95:f4:29:8d:68:b8:e1:e7:4e:10:f6:3f:d2:4a:89:82:cb:d1: f6:d8:07:2f:4b:54:6e:15:5f:f3:74:a8:f3:1d:e6:8c:54:64: 5f:67:17:3c:82:16:95:e4:2e:04:7a:81:a1:74:13:13:e1:40: 0a:2c:bd:81:74:f4:cb:0d:5e:cd:be:52:83:ea:b0:cd:dd:f1: 7c:d7:2c:06:19:d8:c9:03:5b:d2:44:2f:68:62:af:a5:37:77: 2f:a4:43:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjIxODExMC8GA1UEBRMoRUMxNUE4NDdBRjc4NERGMTAyNTg4MjFCQUI5OTRBQzgy MDM1OTVERjAeFw0yNjA2MTMwODM2MTNaFw0yNjA2MjAwODM2MTNaMBgxFjAUBgNV BAMTDTZhMmQxNjdkLTk4NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9k0fqoBocfPW+dGsS5+340QO7NmJBVAmOnggTvW12ornXxOpODzlU0MZhx+5w jqjpa8jkrBRTEv6tqiAzk/SRuLtyG+N6N/jFPY2Fb1cJNbjRJCJpf5YyvsQkNhgQ 3topAmKMz09q6MS18SVFohFQYw/mQ6wKDcpabzFyPMnjHFqpWMCrRLYwCgGTNAqq CylPeAztwjRkRjNS6Jh/G7Nt2iR+0QiRKjYKdHWK/4zPAZLbsobVkiK7iRZkrDjo IhKcrAhAlXt+ZyRaarb8jibNfKfB5B69ps1jwMXlGIYxhAjqfWAtgnoxbZmIAxSY E8px8QfWKkfAO/6VZvX2M8KdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0se9F3wd 1Bcv6hDfFBijqmPZhj8wHwYDVR0jBBgwFoAU7BWoR694TfECWIIbq5lKyCA1ld8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMjE4LzZCRTZDNzAwMERG NDExRjFBNzU4NDMwMDA0M0Q4QzY3LzdCV29SNjk0VGZFQ1dJSWJxNWxLeUNBMWxk OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0JXb1I2OTRUZkVDV0lJYnE1bEt5Q0ExbGQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MjE4LzZCRTZDNzAwMERGNDExRjFBNzU4NDMwMDA0M0Q4QzY3LzdCV29SNjk0VGZF Q1dJSWJxNWxLeUNBMWxkOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd//mJxh2B4sfM2pgYL/z/10dKnmUSqFwjDLY1B6nABLyG/0smCAtJfAA4srdk rdSTT1WuKsst8vajEW8XPyC+NrV+8cYRvKRfC36XFbZr7zVk0kzgOJ5MUPOWHInJ hHXKvceDlWvnXZiUvdqRw0VIgAhw4gPy4WG2KmVY0jURn2+x1+9UCQNvZq1+g1rq id5BX6lFjroK75xC2lpstCuYPWCV9CmNaLjh504Q9j/SSomCy9H22AcvS1RuFV/z dKjzHeaMVGRfZxc8ghaV5C4EeoGhdBMT4UAKLL2BdPTLDV7NvlKD6rDN3fF81ywG GdjJA1vSRC9oYq+lN3cvpENG -----END CERTIFICATE-----Generated at Sat Jun 13 22:54:23 2026 by rpki-client