$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: Lpr9ac75CTDsGPnjgrKfKiYUONMCiImvnY0gsroPx6c= Subject key identifier: 0D:13:8F:16:AC:0C:A5:5C:0C:80:BF:96:79:C4:54:35:7B:E0:E9:38 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: E7 Signing time: Mon 27 Jul 2026 09:02:02 +0000 Manifest this update: Mon 27 Jul 2026 09:02:01 +0000 Manifest next update: Mon 03 Aug 2026 09:02:01 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: Nyg1FYkNX5K4TcI9v64lNZv9iU8I7TZaCN+usl5QFDg=) 2: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: Xu7NiqZL9JdGnjrkCnt/wdoZ7leyujbZwGzelNxEsxs=) 3: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 4: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 5: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) 6: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 7: E12AF83A718411F19EC4F12F8DA30FBC.roa (hash: /06lVIawu5ZFpT6lyrtNFRn6XgMDzR3BtSSDKpiMdlw=) 8: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Jul 27 09:02:01 2026 GMT Not After : Aug 3 09:02:01 2026 GMT Subject: CN=6a671e8a-38f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:87:67:7f:b9:5d:9c:8d:f4:f0:d9:9c:57: db:fa:8c:8d:d6:58:b7:ee:34:23:da:5e:35:72:5b: e5:ed:2c:01:23:81:5f:ce:87:65:d9:e0:b1:57:66: a2:5a:33:9b:a7:3b:67:24:ac:bd:72:b9:de:1d:2b: c7:cb:d1:c1:28:00:66:30:8b:89:0e:5a:bc:b8:f5: 88:7d:12:82:c6:21:3f:49:4f:e4:4d:02:22:aa:ba: df:fb:b3:ad:80:1c:e0:4f:4e:c7:0f:22:40:f4:7c: da:7e:29:1d:a4:3c:57:f5:ed:9f:fa:58:2f:8c:77: 9b:b7:3f:94:2e:47:64:55:07:0f:64:60:61:71:cf: 69:56:99:e6:15:7a:90:99:34:67:63:0d:00:f5:d6: c1:c7:ea:f3:44:f8:94:b9:5f:a1:9b:e1:1a:c9:07: 90:2f:68:22:89:be:a9:2c:08:a2:d6:86:34:bf:9a: 13:bd:2c:8d:3f:ce:af:48:a3:43:b5:83:4d:09:c0: ba:da:97:aa:cb:59:d8:dc:6c:fb:6c:86:a9:e5:2b: e4:19:4a:65:4b:5b:cc:c1:74:51:25:8d:54:ff:39: 74:9a:7b:af:56:81:8f:b9:9b:77:51:c9:1c:be:96: 1a:ca:78:18:7a:55:58:05:da:0f:65:fe:60:08:f7: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:13:8F:16:AC:0C:A5:5C:0C:80:BF:96:79:C4:54:35:7B:E0:E9:38 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:3e:92:a9:6d:74:8e:71:01:94:ac:32:b0:b9:04:7d:80:bd: 38:e5:6e:c7:ce:38:51:b9:2f:ce:5e:87:a1:16:92:d3:5d:2f: a7:6d:5a:51:1a:e8:98:9c:9d:02:06:23:4c:f6:f0:c9:8d:c1: 91:d3:2f:99:c2:01:64:e8:12:71:bf:72:43:7a:be:c4:6e:b0: 59:14:b9:d7:49:88:2b:81:6e:45:02:90:2b:2c:13:21:29:2c: 63:10:ee:61:83:4f:e9:a2:63:ea:43:77:57:92:b2:11:67:7a: ea:29:c4:a4:c0:0c:3f:ef:6e:ce:db:8a:0a:df:00:12:b3:7b: 99:29:9b:13:ac:5f:62:7c:7f:3a:de:e1:38:16:62:eb:4e:74: 71:a8:fb:cd:2e:52:25:e1:d0:ea:01:3d:c1:e1:a2:b0:9e:17: b8:46:01:ac:98:77:32:8c:21:2f:a8:67:59:ef:a4:1b:ae:14: 25:37:8e:1d:4e:1c:2d:74:96:d5:1f:c3:3f:ec:af:d5:16:0f: 7f:df:48:ac:57:ec:20:bf:29:bc:76:d1:cd:f2:b4:18:5d:41: 63:6c:77:bc:05:a1:f9:25:88:5c:17:f2:73:cb:e9:a6:7d:60: b0:9d:21:70:21:99:30:75:c1:27:22:71:ff:c8:f1:c8:0e:9c: a1:65:60:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwNzI3MDkwMjAxWhcNMjYwODAzMDkwMjAxWjAYMRYwFAYD VQQDEw02YTY3MWU4YS0zOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hyHZ3+5XZyN9PDZnFfb+oyN1li37jQj2l41clvl7SwBI4Ffzodl2eCxV2ai WjObpztnJKy9crneHSvHy9HBKABmMIuJDlq8uPWIfRKCxiE/SU/kTQIiqrrf+7Ot gBzgT07HDyJA9HzafikdpDxX9e2f+lgvjHebtz+ULkdkVQcPZGBhcc9pVpnmFXqQ mTRnYw0A9dbBx+rzRPiUuV+hm+EayQeQL2giib6pLAii1oY0v5oTvSyNP86vSKND tYNNCcC62peqy1nY3Gz7bIap5SvkGUplS1vMwXRRJY1U/zl0mnuvVoGPuZt3Uckc vpYayngYelVYBdoPZf5gCPdr5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0Tjxas DKVcDIC/lnnEVDV74Ok4MB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEART6SqW10jnEBlKwysLkEfYC9OOVux844Ubkvzl6HoRaS010vp21aURromJyd AgYjTPbwyY3BkdMvmcIBZOgScb9yQ3q+xG6wWRS510mIK4FuRQKQKywTISksYxDu YYNP6aJj6kN3V5KyEWd66inEpMAMP+9uztuKCt8AErN7mSmbE6xfYnx/Ot7hOBZi 6050caj7zS5SJeHQ6gE9weGisJ4XuEYBrJh3MowhL6hnWe+kG64UJTeOHU4cLXSW 1R/DP+yv1RYPf99IrFfsIL8pvHbRzfK0GF1BY2x3vAWh+SWIXBfyc8vppn1gsJ0h cCGZMHXBJyJx/8jxyA6coWVgUA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:52:54 2026 by rpki-client