$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: 7lGN6lzr1qN7NFzgD+HtSbOCQZ8F65F5vwLDsaeTm28= Subject key identifier: B8:1F:A6:D2:0F:96:48:A0:95:AD:28:B9:09:A9:16:A5:2B:68:E8:FC Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1123 Signing time: Tue 28 Jul 2026 17:22:00 +0000 Manifest this update: Tue 28 Jul 2026 17:21:59 +0000 Manifest next update: Tue 04 Aug 2026 17:21:59 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: 9PeV6+wsVazhXcOe615l9cvnW7g7alZv00OWKPy+euk=) 2: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=) 3: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4407 (0x1137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Jul 28 17:21:59 2026 GMT Not After : Aug 4 17:21:59 2026 GMT Subject: CN=6a68e538-edd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:1f:5a:ba:e8:b6:46:4e:6d:5e:3a:90:4f: ed:23:e5:29:e6:34:07:23:07:a9:e1:8e:e9:07:02: 19:bd:0a:14:fa:c3:07:56:bc:d0:f1:13:35:6b:f2: c0:70:de:57:0d:25:be:f0:a3:5a:69:0e:9b:33:f3: 9d:fc:c3:55:6f:78:92:8f:76:30:14:09:b5:43:34: 93:3d:8b:d7:bf:11:51:f1:19:08:eb:45:a7:37:73: bb:1e:87:0a:4c:97:ca:da:11:e6:90:fb:09:26:b0: b4:88:d1:78:20:4b:83:b5:b5:1d:78:6e:02:41:a5: 79:f7:00:15:1b:d7:a0:cb:d4:de:02:78:85:36:78: 22:ee:f6:d3:22:47:bb:3b:e6:b2:79:7d:75:11:2e: ca:ca:1e:64:e5:f1:5f:9a:11:08:5a:2a:ac:00:5a: a3:7e:5a:5a:d0:43:d9:ef:c8:03:48:a2:6f:42:b4: ce:83:6b:63:ea:4f:e5:36:55:3c:9e:e2:04:0d:3c: 3c:f5:1a:27:0f:a5:ea:9c:43:aa:e5:b0:30:45:5f: 8c:67:e0:43:25:53:43:d7:6d:87:23:d5:8d:8f:47: 4c:e5:e9:63:34:9b:a5:43:8f:18:81:14:24:8f:48: 57:10:f4:5a:a9:c3:3a:29:9c:7c:02:9d:6a:bd:bd: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1F:A6:D2:0F:96:48:A0:95:AD:28:B9:09:A9:16:A5:2B:68:E8:FC X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:41:e7:84:0a:56:b1:11:e6:1f:a8:9f:4b:1f:10:27:bc: 04:6e:8f:59:71:db:25:91:a4:56:a6:23:a0:d2:86:20:40:6a: c1:b6:99:59:32:17:27:d0:4e:df:95:7b:69:0c:cf:27:d4:95: 20:fb:17:ef:0c:c3:f8:5e:91:b5:25:00:8f:97:26:56:2d:c4: ea:be:52:ca:90:11:3d:13:64:2a:1b:85:f8:08:18:e5:c1:ae: c6:65:96:ad:54:68:34:9d:69:59:77:3e:b7:f8:b4:27:0e:8a: 42:20:51:2f:5a:df:2d:8c:5a:64:d2:c4:68:00:bc:3e:62:15: ff:c8:17:42:4f:3b:18:b7:79:eb:a0:95:02:d5:6e:8e:24:96: 3c:45:62:99:54:5e:1c:b4:db:6c:22:e2:df:9d:69:29:2e:4d: 63:d9:60:e9:85:19:1a:72:38:8b:22:74:36:bc:aa:63:31:23: 38:e3:32:e5:9f:d9:a3:ff:4c:ff:ae:4d:1e:d9:b8:11:59:0c: d3:07:17:04:f0:2b:65:9d:80:0e:9b:27:57:04:bd:17:cf:2c: 7f:95:68:d3:79:3d:c0:ec:57:d9:73:65:ca:97:93:d9:67:17: b5:ce:2d:e7:ea:7b:04:9b:de:0f:07:9f:f6:68:bf:f3:a2:d7: 99:ea:19:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICETcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjYwNzI4MTcyMTU5WhcNMjYwODA0MTcyMTU5WjAYMRYwFAYD VQQDEw02YTY4ZTUzOC1lZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8AfWrrotkZObV46kE/tI+Up5jQHIwep4Y7pBwIZvQoU+sMHVrzQ8RM1a/LA cN5XDSW+8KNaaQ6bM/Od/MNVb3iSj3YwFAm1QzSTPYvXvxFR8RkI60WnN3O7HocK TJfK2hHmkPsJJrC0iNF4IEuDtbUdeG4CQaV59wAVG9egy9TeAniFNngi7vbTIke7 O+ayeX11ES7Kyh5k5fFfmhEIWiqsAFqjflpa0EPZ78gDSKJvQrTOg2tj6k/lNlU8 nuIEDTw89RonD6XqnEOq5bAwRV+MZ+BDJVND122HI9WNj0dM5eljNJulQ48YgRQk j0hXEPRaqcM6KZx8Ap1qvb1g/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgfptIP lkigla0ouQmpFqUraOj8MB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPcNB54QKVrER5h+on0sfECe8BG6PWXHbJZGkVqYjoNKGIEBqwbaZWTIXJ9BO 35V7aQzPJ9SVIPsX7wzD+F6RtSUAj5cmVi3E6r5SypARPRNkKhuF+AgY5cGuxmWW rVRoNJ1pWXc+t/i0Jw6KQiBRL1rfLYxaZNLEaAC8PmIV/8gXQk87GLd566CVAtVu jiSWPEVimVReHLTbbCLi351pKS5NY9lg6YUZGnI4iyJ0NryqYzEjOOMy5Z/Zo/9M /65NHtm4EVkM0wcXBPArZZ2ADpsnVwS9F88sf5Vo03k9wOxX2XNlypeT2WcXtc4t 5+p7BJveDwef9mi/86LXmeoZiA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:08:51 2026 by rpki-client