$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: Z2BhFfl0Enul9cT4RpjH/+VzCR7S9OwuH/f2ZCC9VK8= Subject key identifier: DD:2E:13:3D:C4:EE:9F:B9:EE:EB:56:54:B5:90:00:63:8F:3C:B1:DB Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: 0125 Signing time: Mon 27 Jul 2026 07:42:33 +0000 Manifest this update: Mon 27 Jul 2026 07:42:32 +0000 Manifest next update: Mon 03 Aug 2026 07:42:32 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: EGU/RiN+Jz3zC59+ym0qA2ChBz0S/CyVk8rpfUbSJbQ=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: Jul 27 07:42:32 2026 GMT Not After : Aug 3 07:42:32 2026 GMT Subject: CN=6a670be8-f750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:47:8f:45:a0:ae:94:cf:e1:44:48:24:1c: f0:6e:de:16:6c:34:63:f0:81:83:4f:01:95:b6:69: 4d:51:b6:a1:7c:18:90:1c:ca:6b:9d:72:a2:02:08: 1a:f7:95:33:a3:8d:76:30:18:72:95:67:40:0a:e4: de:26:21:d2:74:82:24:f0:42:19:77:8c:31:6e:dd: bc:1e:cd:c1:40:29:0b:28:25:4b:28:0b:40:27:03: 7a:dd:4a:94:32:02:30:e5:a7:2b:39:48:38:9c:a9: fa:95:ff:ce:42:f7:cc:f5:f1:01:04:34:77:45:27: 6a:b3:aa:69:dc:56:84:3d:ca:31:94:fd:77:62:50: a3:bc:ea:d3:19:51:36:09:1e:11:d2:4d:5b:b7:ad: 48:34:53:fe:bc:ed:f6:af:7e:bc:d7:f0:71:a6:ce: 3e:c5:94:6e:60:76:a1:5f:06:43:e1:58:69:1f:3b: 67:5c:a1:be:45:3c:03:90:9b:71:7c:2a:b2:36:c0: 88:14:be:4a:b2:e5:2b:9f:2f:19:f3:53:0a:d7:4a: f2:0d:7b:1b:d2:6f:97:40:93:79:c6:13:3e:c7:29: d5:92:3b:6b:e1:f6:5e:4a:4f:78:7f:ef:5a:e6:b3: 75:f0:78:bc:8e:87:2a:d1:a5:ec:79:87:07:a7:6d: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:13:3D:C4:EE:9F:B9:EE:EB:56:54:B5:90:00:63:8F:3C:B1:DB X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3c:69:ea:67:fa:9a:95:d8:5c:54:34:fa:4f:5d:46:9f:57: 6f:51:e5:d1:db:58:37:96:bc:62:d6:5c:f4:f6:f9:d6:e9:c5: d4:c1:93:f4:3a:5e:5f:aa:9d:5c:e2:47:ed:09:bc:cf:64:dc: d2:1a:10:d7:d0:9f:e0:88:63:69:86:1f:64:12:50:b9:b8:ac: f7:0f:3d:14:9d:ec:18:ee:76:ff:42:68:cc:08:e3:5a:39:a1: cf:28:1e:a0:a7:34:2c:90:48:c4:51:db:d7:2f:79:67:40:e4: b7:dd:69:23:9a:aa:ba:e7:79:b0:38:60:9f:e6:87:9b:9c:d1: 8b:23:a9:d7:10:28:1e:d2:5f:04:1a:9e:86:36:84:c4:c4:08: db:da:97:34:d4:e9:99:35:27:21:64:ac:18:63:e3:e7:13:e5: 7c:e7:bc:0f:f1:8e:28:4f:88:5b:48:dc:28:a5:ea:77:6d:11: c3:d2:04:67:7f:f5:4e:23:4f:2a:86:72:1f:54:01:4a:f8:1f: 96:60:c7:69:70:25:e7:86:e1:b2:8e:b4:29:1d:a3:1d:7c:85: ef:fb:fa:f4:d9:6c:e1:03:fb:67:68:b2:da:df:57:99:49:2a: ea:25:1e:ca:fb:27:5d:80:c8:27:d9:79:db:a4:13:87:a7:ca: 95:64:3d:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyQjYxMTAvBgNVBAUTKEVDNjc5MTY5MTc3QjlFMTMxRDBEQUEwMTM5OEQ3MDAz OTgyN0QxRjYwHhcNMjYwNzI3MDc0MjMyWhcNMjYwODAzMDc0MjMyWjAYMRYwFAYD VQQDEw02YTY3MGJlOC1mNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpZHj0WgrpTP4URIJBzwbt4WbDRj8IGDTwGVtmlNUbahfBiQHMprnXKiAgga 95Uzo412MBhylWdACuTeJiHSdIIk8EIZd4wxbt28Hs3BQCkLKCVLKAtAJwN63UqU MgIw5acrOUg4nKn6lf/OQvfM9fEBBDR3RSdqs6pp3FaEPcoxlP13YlCjvOrTGVE2 CR4R0k1bt61INFP+vO32r3681/Bxps4+xZRuYHahXwZD4VhpHztnXKG+RTwDkJtx fCqyNsCIFL5KsuUrny8Z81MK10ryDXsb0m+XQJN5xhM+xynVkjtr4fZeSk94f+9a 5rN18Hi8jocq0aXseYcHp22ybQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0uEz3E 7p+57utWVLWQAGOPPLHbMB8GA1UdIwQYMBaAFOxnkWkXe54THQ2qATmNcAOYJ9H2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9FNjRCMDNCNENC NTkxMUVGODY5MTVCNjFDNEY5QUUwMi83R2VSYVJkN25oTWREYW9CT1kxd0E1Z24w ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJCNi9FNjRCMDNCNENCNTkxMUVGODY5MTVCNjFDNEY5QUUwMi83R2VSYVJkN25o TWREYW9CT1kxd0E1Z24wZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMjxp6mf6mpXYXFQ0+k9dRp9Xb1Hl0dtYN5a8YtZc9Pb51unF1MGT9DpeX6qd XOJH7Qm8z2Tc0hoQ19Cf4IhjaYYfZBJQubis9w89FJ3sGO52/0JozAjjWjmhzyge oKc0LJBIxFHb1y95Z0Dkt91pI5qquud5sDhgn+aHm5zRiyOp1xAoHtJfBBqehjaE xMQI29qXNNTpmTUnIWSsGGPj5xPlfOe8D/GOKE+IW0jcKKXqd20Rw9IEZ3/1TiNP KoZyH1QBSvgflmDHaXAl54bhso60KR2jHXyF7/v69Nls4QP7Z2iy2t9XmUkq6iUe yvsnXYDIJ9l526QTh6fKlWQ9ZA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:49 2026 by rpki-client