$ rpki-client -vvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft File: O-7kvaWgSxBLHXLmAcMJONuktkQ.mft (raw, json) Hash identifier: LqPoD7QDodr3K2gisoiUFcLeYZfmwmYLOb3jUr5m2Ug= Subject key identifier: FB:A6:D7:AB:42:A7:25:5C:30:99:F6:67:10:C5:ED:B5:2B:35:1E:A0 Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44 Certificate issuer: /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644 Certificate serial: 15E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft Manifest number: 15DB Signing time: Wed 22 Jul 2026 16:50:16 +0000 Manifest this update: Wed 22 Jul 2026 16:50:16 +0000 Manifest next update: Wed 29 Jul 2026 16:50:16 +0000 Files and hashes: 1: O-7kvaWgSxBLHXLmAcMJONuktkQ.crl (hash: nz0i7gfISFsdnasTSl5QtcciBMzaoWF8m2bEptBbIkw=) 2: D9EDB272C44C11ECA07C2D77C4F9AE02.roa (hash: DJ4I97O5v0aU8HleXouiaPdcBM6EY3fv5eqakvOyiz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5609 (0x15e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D2A3, serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644 Validity Not Before: Jul 22 16:50:16 2026 GMT Not After : Jul 29 16:50:16 2026 GMT Subject: CN=6a60f4c8-124f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c6:1f:6c:bf:3e:d9:de:ca:f2:7e:51:a9:91: 46:2f:72:3d:3b:a7:79:c8:2a:7b:34:1c:fd:25:3b: 03:25:14:8e:fe:9c:16:bd:e6:14:c9:dc:13:6e:77: b7:4b:74:09:9a:40:be:5c:c4:fc:32:f3:45:66:3a: 7e:c2:7f:2f:fb:ea:26:ba:2c:7c:58:db:dc:82:c1: 83:95:b8:76:89:2d:e1:4b:f9:1b:86:19:c0:5f:7a: b2:8a:3c:a9:e9:d7:a6:a5:b5:77:98:03:1f:8d:a6: 77:90:23:b7:77:75:0f:56:77:ae:00:06:70:66:d3: 17:e4:eb:ad:8f:be:b9:7b:7c:7c:0f:56:44:b1:33: 67:41:ce:b3:97:df:4b:f4:0c:d0:e2:60:79:1b:63: 48:ce:d7:3b:71:84:be:c1:c7:2f:80:08:c5:b8:50: 44:16:c4:54:8b:6c:8d:f0:ee:cf:ec:c2:66:3a:64: 45:de:68:2d:98:1f:9b:76:26:f9:d5:2a:13:c5:d9: 81:e3:38:d8:e3:6a:52:e8:18:6e:a9:ae:91:13:2a: e7:77:2e:2a:b2:4b:9d:57:57:65:1d:06:ab:e9:ff: 49:79:bd:15:8e:3e:af:9c:3b:8d:e6:59:dd:a5:9c: 45:e1:ce:49:61:b1:54:aa:77:db:bf:a8:52:95:6b: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A6:D7:AB:42:A7:25:5C:30:99:F6:67:10:C5:ED:B5:2B:35:1E:A0 X509v3 Authority Key Identifier: keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:74:4b:83:e2:d6:52:ac:6e:b3:13:a7:93:95:24:80:6b:c7: 32:7b:49:62:16:e1:35:b6:d3:fa:03:50:6f:89:2f:f3:df:0a: 78:9f:cd:bc:4b:73:11:a8:4a:be:ab:ef:1e:80:e5:58:c8:1c: da:e9:7f:84:b5:30:52:92:49:f3:71:2e:b0:e9:d7:c6:f1:b2: 5f:86:04:3c:bc:e3:a1:52:e8:34:cd:a9:98:e9:a8:27:c7:61: 82:46:e2:ff:80:19:89:8b:30:4b:a9:17:ff:fe:0f:03:1d:ea: bf:62:38:64:1c:3a:f6:9f:d7:85:05:c0:0a:d5:3f:f0:ca:2c: 6a:3c:fd:93:69:1f:6f:d8:a9:b1:e9:68:76:1b:da:5b:38:62: f7:54:73:38:9d:74:05:c0:9d:e5:b5:b9:c2:e4:b0:40:fa:bd: 38:8c:49:3c:17:82:4b:21:06:d7:21:2b:db:7f:86:60:56:3c: 7b:78:a9:d1:b4:77:02:ec:69:7d:15:9f:96:70:dd:1c:1d:66: 94:75:17:25:e2:34:9c:4e:96:bd:c1:0a:f7:78:7f:2d:73:5e: 15:f3:8d:74:6d:ee:c6:bd:26:a1:9b:8a:15:f7:40:e2:e8:65: 6b:5d:7b:ef:5b:df:6f:75:7e:e3:24:7d:2c:5a:2d:9a:be:e1: fb:76:d9:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQyQTMxMTAvBgNVBAUTKDNCRUVFNEJEQTVBMDRCMTA0QjFENzJFNjAxQzMwOTM4 REJBNEI2NDQwHhcNMjYwNzIyMTY1MDE2WhcNMjYwNzI5MTY1MDE2WjAYMRYwFAYD VQQDEw02YTYwZjRjOC0xMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cYfbL8+2d7K8n5RqZFGL3I9O6d5yCp7NBz9JTsDJRSO/pwWveYUydwTbne3 S3QJmkC+XMT8MvNFZjp+wn8v++omuix8WNvcgsGDlbh2iS3hS/kbhhnAX3qyijyp 6dempbV3mAMfjaZ3kCO3d3UPVneuAAZwZtMX5Outj765e3x8D1ZEsTNnQc6zl99L 9AzQ4mB5G2NIztc7cYS+wccvgAjFuFBEFsRUi2yN8O7P7MJmOmRF3mgtmB+bdib5 1SoTxdmB4zjY42pS6Bhuqa6REyrndy4qskudV1dlHQar6f9Jeb0Vjj6vnDuN5lnd pZxF4c5JYbFUqnfbv6hSlWsxOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPum16tC pyVcMJn2ZxDF7bUrNR6gMB8GA1UdIwQYMBaAFDvu5L2loEsQSx1y5gHDCTjbpLZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDJBMy9GNkFDNjM4NjRF RkQxMUU4ODkyQjg2ODNDNEY5QUUwMi9PLTdrdmFXZ1N4QkxIWExtQWNNSk9OdWt0 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08tN2t2YVdnU3hCTEhYTG1BY01KT051a3RrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDJBMy9GNkFDNjM4NjRFRkQxMUU4ODkyQjg2ODNDNEY5QUUwMi9PLTdrdmFXZ1N4 QkxIWExtQWNNSk9OdWt0a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr3RLg+LWUqxusxOnk5UkgGvHMntJYhbhNbbT+gNQb4kv898KeJ/NvEtzEahK vqvvHoDlWMgc2ul/hLUwUpJJ83EusOnXxvGyX4YEPLzjoVLoNM2pmOmoJ8dhgkbi /4AZiYswS6kX//4PAx3qv2I4ZBw69p/XhQXACtU/8Mosajz9k2kfb9ipselodhva Wzhi91RzOJ10BcCd5bW5wuSwQPq9OIxJPBeCSyEG1yEr23+GYFY8e3ip0bR3Auxp fRWflnDdHB1mlHUXJeI0nE6WvcEK93h/LXNeFfONdG3uxr0moZuKFfdA4uhla117 71vfb3V+4yR9LFotmr7h+3bZ9A== -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:29 2026 by rpki-client