$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: VguEJra4LWC5nrXoapnAZ2d6SaGkWtfqXY03rq4QjNg= Subject key identifier: 7B:0F:56:3E:6E:17:EE:97:6B:90:02:67:2D:F0:9C:51:F4:68:2B:BB Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 01BA Signing time: Thu 23 Jul 2026 05:21:02 +0000 Manifest this update: Thu 23 Jul 2026 05:21:01 +0000 Manifest next update: Thu 30 Jul 2026 05:21:01 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: wTwbZ2Y93Rl6skuO1ilOGRlUkNnVU18oHfcPf2/mO9g=) 2: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: dxCV5oDwm0iQGfDR4O8HOe4IbiLXLU4mPTUlx835jPI=) 3: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: 68XN8JwBJBbdfUKGQscZWuVbBuf4F1dhpvRpl2kDoG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Jul 23 05:21:01 2026 GMT Not After : Jul 30 05:21:01 2026 GMT Subject: CN=6a61a4bd-171f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:3e:fb:96:57:97:11:86:79:3b:62:ad:97: de:cf:47:42:2f:14:be:78:76:3b:bd:02:a9:d6:f7: 8a:8e:a5:f3:dd:3b:16:37:6d:ae:05:ff:3a:90:bb: b7:a0:30:f2:ad:44:d1:f9:c8:4e:b2:69:c1:f0:1f: c0:61:7c:fe:a4:dd:a6:ac:5b:a8:d3:85:69:71:7f: 59:86:51:1f:5d:72:69:38:26:6c:f5:b2:f3:fe:8c: a1:b6:34:71:31:39:f1:45:95:8e:a5:7a:0a:f3:9b: 40:e5:7a:e0:17:39:3b:0f:29:10:6d:cf:7c:b4:35: 2f:4a:ce:fd:ff:9d:b9:2d:18:04:af:6a:ad:e2:19: 35:c5:00:4d:bb:f8:c0:63:34:20:07:4f:32:b6:d5: 1c:76:ab:2f:a2:51:75:18:41:51:67:20:54:d4:bb: 3b:cc:c2:fc:85:2a:9e:48:46:b3:44:cb:1a:d0:20: 05:17:ed:07:90:48:3b:6a:4b:b4:ff:f2:dd:e6:d3: d5:e3:91:6a:8f:28:29:1c:f6:58:c2:4c:ab:9b:ef: 6b:8c:10:0a:f5:26:76:9e:98:a7:69:89:a0:ad:03: e2:73:27:52:e4:1d:a0:ea:e9:74:48:f6:ff:f3:ae: d9:84:81:e7:59:cd:a4:07:38:d0:09:3f:b0:ae:24: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:56:3E:6E:17:EE:97:6B:90:02:67:2D:F0:9C:51:F4:68:2B:BB X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:eb:94:6b:64:7f:cb:ba:17:fb:24:42:aa:a2:99:be:83:61: e2:d4:75:07:52:f3:07:80:c7:2e:b9:17:c4:4b:15:50:99:b2: c5:8c:68:13:ae:68:26:18:e1:d7:fa:21:a1:2d:fc:5a:bc:d2: be:10:30:9e:63:00:ce:49:35:76:31:fd:ba:ee:d6:81:a3:a1: d6:dd:dc:27:f3:4a:ca:20:eb:0e:f3:33:e1:95:7b:69:25:ad: 94:ea:63:54:0b:b8:fd:3b:9e:8c:3b:df:4f:6c:87:cd:ad:61: 03:e9:b7:f7:cd:aa:1f:f7:ee:ca:c1:ee:c3:48:71:0c:4a:ca: c8:fe:c1:0d:7f:da:46:03:d8:05:23:78:0d:2e:82:2f:b3:57: 8b:8a:cd:e0:b2:fc:c7:d4:e0:2c:fd:78:95:58:e4:8c:44:43: b3:89:54:62:9b:0f:fa:ab:eb:48:34:59:49:58:7b:bf:dd:66: f7:aa:c0:3e:cf:b6:c5:38:42:90:10:c8:33:8a:49:f9:9c:8c: 24:76:a1:83:a3:5b:a3:c4:34:ca:79:cc:42:2c:dc:6b:61:16: bf:41:d5:38:81:9e:2d:f1:e2:6d:e2:66:a5:a2:63:e2:ab:0a: f5:ea:cc:a4:e0:57:62:9a:93:15:b5:7f:6e:94:df:74:e4:c0: 3b:a9:05:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjYwNzIzMDUyMTAxWhcNMjYwNzMwMDUyMTAxWjAYMRYwFAYD VQQDEw02YTYxYTRiZC0xNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtk++5ZXlxGGeTtirZfez0dCLxS+eHY7vQKp1veKjqXz3TsWN22uBf86kLu3 oDDyrUTR+chOsmnB8B/AYXz+pN2mrFuo04VpcX9ZhlEfXXJpOCZs9bLz/oyhtjRx MTnxRZWOpXoK85tA5XrgFzk7DykQbc98tDUvSs79/525LRgEr2qt4hk1xQBNu/jA YzQgB08yttUcdqsvolF1GEFRZyBU1Ls7zML8hSqeSEazRMsa0CAFF+0HkEg7aku0 //Ld5tPV45FqjygpHPZYwkyrm+9rjBAK9SZ2npinaYmgrQPicydS5B2g6ul0SPb/ 867ZhIHnWc2kBzjQCT+wriScowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsPVj5u F+6Xa5ACZy3wnFH0aCu7MB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlOuUa2R/y7oX+yRCqqKZvoNh4tR1B1LzB4DHLrkXxEsVUJmyxYxoE65oJhjh 1/ohoS38WrzSvhAwnmMAzkk1djH9uu7WgaOh1t3cJ/NKyiDrDvMz4ZV7aSWtlOpj VAu4/TuejDvfT2yHza1hA+m3982qH/fuysHuw0hxDErKyP7BDX/aRgPYBSN4DS6C L7NXi4rN4LL8x9TgLP14lVjkjERDs4lUYpsP+qvrSDRZSVh7v91m96rAPs+2xThC kBDIM4pJ+ZyMJHahg6Nbo8Q0ynnMQizca2EWv0HVOIGeLfHibeJmpaJj4qsK9erM pOBXYpqTFbV/bpTfdOTAO6kFuA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:00:11 2026 by rpki-client