$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft File: N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json) Hash identifier: T+NnNNW7ELkOVim+K/FQhJQca9q/FSKpik+K5YCqfys= Subject key identifier: 39:DD:BD:7D:88:36:14:01:11:1A:B9:1B:E1:AA:41:00:BF:C0:8E:51 Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft Manifest number: 51 Signing time: Thu 23 Jul 2026 10:19:54 +0000 Manifest this update: Thu 23 Jul 2026 10:19:53 +0000 Manifest next update: Thu 30 Jul 2026 10:19:53 +0000 Files and hashes: 1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: B/kdqvz4lpJy+nsD06m2WkgTO7LHwnJtLMQbaI7vUDI=) 2: CD7290AA136F11F1982A4804323D8C67.roa (hash: CCP9/OeftiKfulV8qYHt+suPF/2fOVKP+J3q0O5BU9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Validity Not Before: Jul 23 10:19:53 2026 GMT Not After : Jul 30 10:19:53 2026 GMT Subject: CN=6a61eaca-70b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:dc:cc:98:d1:de:d7:0e:13:01:bf:c6:59: 8f:2f:8a:ca:69:68:f8:88:b6:c7:89:9b:64:d4:ee: 8d:5a:50:f0:70:a8:89:d7:03:1d:fb:fa:7d:ea:d7: c5:5b:e5:78:20:f2:e8:f5:20:7f:0c:f1:67:e0:af: 76:31:13:32:88:79:ed:d6:fe:0a:c5:f1:89:58:c6: 4a:f9:37:b6:84:dd:88:6d:2a:05:eb:a6:7b:e2:18: d8:f2:28:69:10:0a:06:5a:7a:81:0d:78:4b:74:f1: ba:67:fa:a9:4f:85:22:3e:5c:05:c7:10:fc:ae:e6: 28:5c:50:b4:c2:9b:fc:e4:58:27:e4:9e:3f:e5:88: f2:46:85:85:96:10:ac:33:24:8b:e8:e9:5c:e6:46: d7:ff:cb:7c:b8:7e:56:35:02:7a:88:76:22:10:ac: 9b:3d:91:a2:37:3b:d9:f0:a7:47:56:c1:85:22:7a: 0b:13:66:20:d2:4e:0b:fb:c9:bc:91:b9:58:27:fb: 7a:a2:05:82:31:50:8e:23:5a:c3:c6:e6:dd:f2:b1: dc:74:b4:97:c5:3e:a5:e6:3e:45:be:71:cb:93:f7: bc:57:08:5a:8b:62:0e:14:27:35:16:64:e3:b8:92: f0:b0:01:f8:bd:d2:2a:b3:70:a2:c1:a4:02:c6:9a: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:BD:7D:88:36:14:01:11:1A:B9:1B:E1:AA:41:00:BF:C0:8E:51 X509v3 Authority Key Identifier: keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:d6:eb:49:97:37:98:34:0f:b7:43:a4:93:c2:84:7c:9b: 28:52:cc:e6:d7:60:e5:23:a1:02:81:fd:3d:17:55:26:f2:8b: dd:be:77:d1:9a:03:64:32:1a:16:de:9d:12:97:0e:55:6c:95: 3e:71:50:3b:32:0e:34:d2:e0:52:76:cc:3e:fd:08:95:3a:4f: e4:f6:f2:01:86:80:4f:76:80:02:b2:f1:98:71:84:5c:39:fb: 93:fc:8e:b5:75:37:67:f7:8c:c3:68:af:25:c7:43:92:af:84: 9e:30:ec:4b:cd:11:f5:1c:37:4e:21:f3:ca:b7:41:b2:e5:d6: 71:73:b8:42:3e:03:b0:16:0d:98:29:97:7a:71:75:18:8f:23: d9:90:90:ed:4c:64:3d:fa:a3:d3:c7:86:b3:46:cc:f0:6f:69: b9:47:17:3c:0c:12:7c:14:77:cd:34:c4:0c:0f:3c:59:da:aa: 03:83:08:0c:15:39:af:74:4a:21:e6:82:9d:dc:02:e0:47:c9: 82:5b:75:48:ef:0c:b7:2f:c5:5e:b2:8f:d4:1a:9e:57:c8:31: 99:1b:e7:2e:df:d3:67:5b:7b:34:fb:83:ab:78:94:7d:c1:13: 72:e1:83:d2:3d:58:96:25:ab:89:6c:0e:e0:73:e1:55:2f:a6: fd:88:93:22 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoMzdCMEYwMTAwRDNCQzNERUU2NUQ5QkVCMEFFQ0M0Q0VF MUZCMzY1NTAeFw0yNjA3MjMxMDE5NTNaFw0yNjA3MzAxMDE5NTNaMBgxFjAUBgNV BAMTDTZhNjFlYWNhLTcwYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCphtzMmNHe1w4TAb/GWY8visppaPiItseJm2TU7o1aUPBwqInXAx37+n3q18Vb 5Xgg8uj1IH8M8Wfgr3YxEzKIee3W/grF8YlYxkr5N7aE3YhtKgXrpnviGNjyKGkQ CgZaeoENeEt08bpn+qlPhSI+XAXHEPyu5ihcULTCm/zkWCfknj/liPJGhYWWEKwz JIvo6VzmRtf/y3y4flY1AnqIdiIQrJs9kaI3O9nwp0dWwYUiegsTZiDSTgv7ybyR uVgn+3qiBYIxUI4jWsPG5t3ysdx0tJfFPqXmPkW+ccuT97xXCFqLYg4UJzUWZOO4 kvCwAfi90iqzcKLBpALGmmz/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOd29fYg2 FAERGrkb4apBAL/AjlEwHwYDVR0jBBgwFoAUN7DwEA07w97mXZvrCuzEzuH7NlUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0I4NDBFRDg2MTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3bVhadnJDdXpFenVIN05s VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjdEd0VBMDd3OTdtWFp2ckN1ekV6dUg3TmxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0I4NDBFRDg2MTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3 bVhadnJDdXpFenVIN05sVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+odbrSZc3mDQPt0Okk8KEfJsoUszm12DlI6ECgf09F1Um8ovdvnfRmgNkMhoW 3p0Slw5VbJU+cVA7Mg400uBSdsw+/QiVOk/k9vIBhoBPdoACsvGYcYRcOfuT/I61 dTdn94zDaK8lx0OSr4SeMOxLzRH1HDdOIfPKt0Gy5dZxc7hCPgOwFg2YKZd6cXUY jyPZkJDtTGQ9+qPTx4azRszwb2m5Rxc8DBJ8FHfNNMQMDzxZ2qoDgwgMFTmvdEoh 5oKd3ALgR8mCW3VI7wy3L8Veso/UGp5XyDGZG+cu39NnW3s0+4OreJR9wRNy4YPS PViWJauJbA7gc+FVL6b9iJMi -----END CERTIFICATE-----Generated at Fri Jul 24 14:42:56 2026 by rpki-client