$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: 3ivXo+V/UC46Qj+rPF1UeCrZ5KOTOK9zHDj/2u9RBo4= Subject key identifier: 5A:9C:63:F8:65:B4:A7:19:90:92:30:35:0B:A4:A8:1D:4B:BF:93:AA Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 0973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 0960 Signing time: Wed 22 Jul 2026 20:34:05 +0000 Manifest this update: Wed 22 Jul 2026 20:34:05 +0000 Manifest next update: Wed 29 Jul 2026 20:34:05 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: fMvGljKmf+tvGuJwrHMBNJOy7kE5jQtlE94vU3wMxwc=) 2: 2636893049C611F1A0494403A4833773.roa (hash: LbI/zXwrZvEy2m8RCRFUKgZJykGAWt1/GiJpmBz1/G0=) 3: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Jul 22 20:34:05 2026 GMT Not After : Jul 29 20:34:05 2026 GMT Subject: CN=6a61293d-4b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:1d:1c:81:4e:99:8a:79:75:9f:eb:30:3c: c6:e9:3e:5a:f0:db:4a:57:d6:57:f2:cd:95:79:06: e2:f8:7d:56:26:c4:e6:4c:cd:cf:bf:c6:03:7a:82: ba:e3:54:68:be:ff:39:72:b5:aa:0c:d4:96:9c:84: 17:8c:7f:2f:c4:3b:0b:a9:34:26:42:fa:6c:f5:11: a9:42:db:d5:2e:58:c8:0a:0a:ee:94:af:0e:9f:23: 6e:82:86:3c:95:44:20:a8:bb:ed:b2:c4:4d:74:98: 0a:5a:d4:96:73:d0:ec:d8:67:be:46:ea:23:91:67: 9c:22:46:49:40:16:64:ee:6e:d5:a0:c9:c6:45:16: 2b:b9:00:92:8a:ea:30:5a:9b:e2:1b:ae:82:41:c7: 2d:24:b6:d7:61:a3:4f:72:68:51:2c:a1:94:22:d8: 2f:b2:7f:5a:8f:c5:f4:d5:59:17:af:19:28:18:88: 2f:71:c9:28:c8:41:50:73:02:45:e3:0f:6a:f2:21: 73:e4:c8:3c:8d:6d:c3:94:46:47:57:00:65:43:bd: 91:89:d9:d1:60:3c:ac:7a:b0:67:47:9f:ab:56:a0: 87:db:b0:47:00:dc:3e:82:19:3c:69:c1:ff:e7:bf: ce:81:7d:00:fe:a2:b5:35:ef:88:9a:cb:ae:7d:62: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:63:F8:65:B4:A7:19:90:92:30:35:0B:A4:A8:1D:4B:BF:93:AA X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:71:24:b3:b5:1f:e2:e4:2a:36:b8:bd:76:10:f0:f1:12:19: 71:fb:3e:90:7d:99:ae:38:39:29:96:c1:35:04:e9:2a:44:e5: ac:da:df:3e:ab:7d:23:fd:53:57:39:bf:a8:b4:f3:e0:8f:d3: 0e:29:f3:ce:8e:06:06:ee:38:5c:f9:e7:19:e2:89:11:99:43: 69:82:21:46:4d:7d:26:d5:22:c3:d3:de:b7:5c:c6:2d:6d:0f: fc:06:b7:fa:e8:4f:1f:55:64:04:68:c0:ad:18:d1:3c:9a:ed: 7a:b0:09:84:29:6b:d5:7c:e3:4e:81:1a:67:32:28:64:d1:9b: 75:71:6d:d7:f6:f9:d2:6c:86:09:be:c8:02:9c:02:06:0e:f6: 58:ea:a1:89:eb:4b:de:c5:db:a9:c3:7a:94:19:b9:92:04:ea: 16:0e:06:dc:65:95:fb:dd:c0:d8:f7:76:f9:c7:ff:c8:67:99: e1:c8:25:7c:cc:de:e9:20:b4:9b:1d:74:4c:78:7c:d9:68:a8: 69:ea:77:37:6d:2e:b4:a3:54:82:7d:a2:32:b3:5f:94:60:55: ce:e5:43:0d:40:54:d2:56:9d:86:a6:35:91:f4:88:45:a3:a5: cc:6a:f1:98:f9:1e:83:48:14:25:fb:c5:11:de:19:c7:8f:81: ff:e4:3b:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYwNzIyMjAzNDA1WhcNMjYwNzI5MjAzNDA1WjAYMRYwFAYD VQQDEw02YTYxMjkzZC00YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvccdHIFOmYp5dZ/rMDzG6T5a8NtKV9ZX8s2VeQbi+H1WJsTmTM3Pv8YDeoK6 41Rovv85crWqDNSWnIQXjH8vxDsLqTQmQvps9RGpQtvVLljICgrulK8OnyNugoY8 lUQgqLvtssRNdJgKWtSWc9Ds2Ge+RuojkWecIkZJQBZk7m7VoMnGRRYruQCSiuow WpviG66CQcctJLbXYaNPcmhRLKGUItgvsn9aj8X01VkXrxkoGIgvcckoyEFQcwJF 4w9q8iFz5Mg8jW3DlEZHVwBlQ72RidnRYDyserBnR5+rVqCH27BHANw+ghk8acH/ 57/OgX0A/qK1Ne+ImsuufWJt9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqcY/hl tKcZkJIwNQukqB1Lv5OqMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG3Eks7Uf4uQqNri9dhDw8RIZcfs+kH2Zrjg5KZbBNQTpKkTlrNrfPqt9I/1T Vzm/qLTz4I/TDinzzo4GBu44XPnnGeKJEZlDaYIhRk19JtUiw9Pet1zGLW0P/Aa3 +uhPH1VkBGjArRjRPJrterAJhClr1XzjToEaZzIoZNGbdXFt1/b50myGCb7IApwC Bg72WOqhietL3sXbqcN6lBm5kgTqFg4G3GWV+93A2Pd2+cf/yGeZ4cglfMze6SC0 mx10THh82Wioaep3N20utKNUgn2iMrNflGBVzuVDDUBU0ladhqY1kfSIRaOlzGrx mPkeg0gUJfvFEd4Zx4+B/+Q7Kg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:15 2026 by rpki-client