$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: FHQmzs+HLjUoGvE/0TzPDgh5gPm3iSSAipQadqOTLxs= Subject key identifier: 2D:8A:C0:4A:13:88:25:0D:D0:1B:59:42:FD:46:AC:26:1A:70:92:55 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0A5E Signing time: Sun 20 Sep 2026 19:35:24 +0000 Manifest this update: Sun 20 Sep 2026 19:35:23 +0000 Manifest next update: Sun 27 Sep 2026 19:35:23 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: GtlWiY20+JJMNfSyrDBp1TxnCWFgrZB9FJLINpkEwzk=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: C5fV75a8UUAFlsfjrW7ofnI1EJVxNwJDDKqV7jbbm0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Sep 20 19:35:23 2026 GMT Not After : Sep 27 19:35:23 2026 GMT Subject: CN=6ab0357b-fee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:91:b1:77:55:b8:78:2c:6d:86:04:ce:60: 6a:89:b9:6b:d8:83:38:f7:40:ac:1c:e8:62:4e:c7: b5:67:b7:11:de:db:ea:3b:dc:2f:df:14:5f:40:86: ac:bf:44:ea:b8:40:67:79:21:9a:05:c9:6d:7a:f9: 6b:e4:d3:a3:8b:e9:e5:8a:cb:bb:cb:6c:ad:28:76: 04:55:1d:f9:5a:9d:7d:e4:fb:fd:c8:9b:85:20:35: f4:a3:3c:bd:e2:86:39:66:ed:a3:3d:48:81:9a:0d: 1b:36:09:6e:61:65:95:c1:04:45:36:c0:97:35:91: 2d:fe:bc:a1:e1:52:da:57:36:76:db:3d:0b:9f:f1: ca:14:77:fe:0c:9f:c0:e9:81:93:b6:01:1a:41:63: 38:29:1f:7d:f4:6c:71:14:ed:d5:bc:32:3c:24:5d: 36:ca:8e:3c:70:dc:ff:5d:6e:73:28:f0:46:16:68: c2:b6:de:e5:d9:df:01:87:49:2a:d2:04:11:d5:85: 76:65:67:99:c6:03:45:8a:b5:d7:0b:38:6e:25:01: 87:6b:6e:34:ad:54:2a:02:72:44:4d:ba:95:f4:18: 41:73:86:a6:f3:b3:e9:28:2e:c9:de:66:11:cf:29: 7e:f1:4c:e1:3d:34:e1:b9:a3:6f:89:d6:ce:aa:38: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8A:C0:4A:13:88:25:0D:D0:1B:59:42:FD:46:AC:26:1A:70:92:55 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:04:7e:99:d3:c5:92:2a:b5:b3:81:0d:fe:ea:e7:43:ea:f0: e8:cc:8f:41:fe:e7:29:77:0a:eb:22:06:dc:73:c2:a9:4b:6a: 40:be:8a:41:27:ff:4f:41:79:d3:c9:32:5e:b9:00:8f:f4:20: 6b:01:83:a0:59:0b:b0:c9:1f:8b:99:18:52:6d:4d:4e:f9:63: 4d:4a:52:f9:e9:1a:16:7d:88:df:24:31:71:30:08:76:55:49: 0b:1b:3b:aa:89:aa:c5:4a:7f:b7:37:de:ee:fd:40:b1:33:55: fa:85:8f:67:0b:b8:49:72:ae:75:ec:e3:01:41:c8:0e:4a:d4: 4e:da:22:9e:7f:f7:05:c3:51:68:67:2c:72:33:9b:05:51:01: 47:f0:1e:30:57:26:ae:ec:3e:64:21:c1:31:f4:c6:8d:19:a2: c7:a9:89:67:d4:47:70:9d:e9:ef:ee:97:41:d9:8a:7f:d7:0e: c5:86:22:d0:db:88:83:7e:90:f3:6b:9e:99:c0:18:88:8a:eb: 50:c3:c0:f5:53:b5:2a:06:9e:32:30:96:5a:af:51:b0:ae:d8: c7:ac:0a:02:6c:77:08:7f:93:2c:a5:30:74:66:c9:8b:34:33: 95:c5:8d:2a:a5:04:f4:c9:e2:7b:cf:e4:9c:f5:15:ea:58:59: 65:b6:1f:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjYwOTIwMTkzNTIzWhcNMjYwOTI3MTkzNTIzWjAYMRYwFAYD VQQDEw02YWIwMzU3Yi1mZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvmRsXdVuHgsbYYEzmBqiblr2IM490CsHOhiTse1Z7cR3tvqO9wv3xRfQIas v0TquEBneSGaBcltevlr5NOji+nlisu7y2ytKHYEVR35Wp195Pv9yJuFIDX0ozy9 4oY5Zu2jPUiBmg0bNgluYWWVwQRFNsCXNZEt/ryh4VLaVzZ22z0Ln/HKFHf+DJ/A 6YGTtgEaQWM4KR999GxxFO3VvDI8JF02yo48cNz/XW5zKPBGFmjCtt7l2d8Bh0kq 0gQR1YV2ZWeZxgNFirXXCzhuJQGHa240rVQqAnJETbqV9BhBc4am87PpKC7J3mYR zyl+8UzhPTThuaNvidbOqjglfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2KwEoT iCUN0BtZQv1GrCYacJJVMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4AR+mdPFkiq1s4EN/urnQ+rw6MyPQf7nKXcK6yIG3HPCqUtqQL6KQSf/T0F5 08kyXrkAj/QgawGDoFkLsMkfi5kYUm1NTvljTUpS+ekaFn2I3yQxcTAIdlVJCxs7 qomqxUp/tzfe7v1AsTNV+oWPZwu4SXKudezjAUHIDkrUTtoinn/3BcNRaGcscjOb BVEBR/AeMFcmruw+ZCHBMfTGjRmix6mJZ9RHcJ3p7+6XQdmKf9cOxYYi0NuIg36Q 82uemcAYiIrrUMPA9VO1KgaeMjCWWq9RsK7Yx6wKAmx3CH+TLKUwdGbJizQzlcWN KqUE9Mnie8/knPUV6lhZZbYftA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:20:02 2026 by rpki-client