$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: 7eU2OCphj39zNZczWR5VWVNtVN0j4R4LRE8jEBtOp60= Subject key identifier: 3E:6F:8D:88:7D:26:A3:CD:8D:82:4D:60:CC:85:82:DE:9E:CD:01:D8 Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 0686 Signing time: Wed 22 Jul 2026 23:14:22 +0000 Manifest this update: Wed 22 Jul 2026 23:14:21 +0000 Manifest next update: Wed 29 Jul 2026 23:14:21 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: rwwuoDOMJhJMfhztrjPgseuHB0mZ4v4C4fis6U4VqwE=) 2: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: V6rPhNEgfFSYoMAOj/JkTn27sOkQ/m44MmBwpVWrZVs=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: FVns4uZR/lgSYkSVzt2crKsv9A2mS6qMtNNtsApC6uY=) 4: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: QOzAxMNPfl2xsZK2GJpgLS4yP7Am+9az4cqsUr4KXF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Validity Not Before: Jul 22 23:14:21 2026 GMT Not After : Jul 29 23:14:21 2026 GMT Subject: CN=6a614ece-c5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:02:51:15:82:da:e1:42:cf:a1:86:05:d9: 02:03:0c:3f:00:ce:e9:a0:7c:5a:d6:42:ac:5c:36: 9d:8a:01:b2:f5:20:c3:4d:80:88:9c:e5:c0:69:fc: d8:54:14:fa:cd:56:b1:50:90:1a:ab:92:ef:b9:20: 48:64:ce:83:27:45:c5:02:5d:74:11:67:d9:9a:a6: 12:f9:49:33:28:05:34:b8:d3:c2:5d:64:d7:a3:86: b4:3d:36:ff:af:4b:12:33:c5:69:bb:9f:0b:06:37: 23:33:95:06:10:b7:34:88:23:62:e9:f6:d4:6d:56: b5:ec:fa:32:2f:69:80:07:cc:1b:88:d4:0b:0e:3e: 2f:46:86:ce:c5:19:cb:af:fb:96:90:a1:cc:55:f8: b9:ce:ad:49:64:66:8b:44:43:f9:34:67:05:a6:00: ec:4d:7b:c0:0d:c9:c7:2e:9c:29:b6:31:58:b5:99: b7:94:6f:e3:4a:c5:33:9c:77:5e:d5:95:93:0d:e3: f2:fe:1a:75:83:c3:aa:8e:83:9d:9a:94:30:d7:11: d2:d2:15:0a:6b:f6:71:4f:e5:5b:34:5d:ab:fb:ce: 05:00:30:31:1f:6c:c3:94:a9:9c:fc:f8:c2:c2:ce: 7d:cc:40:0b:1a:01:50:87:e2:3a:01:ff:01:da:d9: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6F:8D:88:7D:26:A3:CD:8D:82:4D:60:CC:85:82:DE:9E:CD:01:D8 X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5c:d0:06:38:2c:f9:c2:25:f7:22:d7:7f:a2:dd:f5:6c:b4: 87:23:f6:67:52:bb:77:c3:80:9c:e6:43:23:15:bd:93:3e:fc: b5:ec:7c:27:c3:83:c8:ff:c4:fc:94:1e:3b:b0:92:ce:32:e2: 1a:e6:af:cb:86:9e:53:e3:9e:90:5d:4d:00:b2:3e:01:64:48: 9a:0d:c4:ed:bd:8b:32:a4:1f:31:6c:d2:cb:19:3d:3e:2a:2a: cd:29:cd:64:4a:5f:ef:6b:b8:ca:b7:ca:ff:cf:b1:ae:a6:89: ae:73:2c:d5:e6:da:b7:53:cb:d6:08:89:a3:3d:f6:93:54:00: 3a:5b:58:85:d9:ca:11:03:4c:7c:35:b5:d2:2c:5e:c4:6b:f0: 75:d2:7b:36:07:cc:25:3f:c9:ea:6f:da:eb:8d:21:cc:4d:09: a0:e7:7f:71:57:d0:48:04:a0:ad:13:20:ba:cf:cc:9c:db:f8: f0:74:af:42:1b:89:82:af:75:8a:45:6a:23:d8:2c:e4:05:15: 5c:0f:a6:61:f4:dd:da:a2:ac:3b:00:96:6a:08:75:aa:ee:dd: a9:53:9b:d6:b2:91:09:18:12:34:dc:f6:ad:fd:88:40:81:84: 4d:d7:70:9b:15:7a:38:13:2c:ff:77:17:13:00:2c:b8:b2:59: 1f:c1:c4:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjYwNzIyMjMxNDIxWhcNMjYwNzI5MjMxNDIxWjAYMRYwFAYD VQQDEw02YTYxNGVjZS1jNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzMCURWC2uFCz6GGBdkCAww/AM7poHxa1kKsXDadigGy9SDDTYCInOXAafzY VBT6zVaxUJAaq5LvuSBIZM6DJ0XFAl10EWfZmqYS+UkzKAU0uNPCXWTXo4a0PTb/ r0sSM8Vpu58LBjcjM5UGELc0iCNi6fbUbVa17PoyL2mAB8wbiNQLDj4vRobOxRnL r/uWkKHMVfi5zq1JZGaLREP5NGcFpgDsTXvADcnHLpwptjFYtZm3lG/jSsUznHde 1ZWTDePy/hp1g8OqjoOdmpQw1xHS0hUKa/ZxT+VbNF2r+84FADAxH2zDlKmc/PjC ws59zEALGgFQh+I6Af8B2tlU5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5vjYh9 JqPNjYJNYMyFgt6ezQHYMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASFzQBjgs+cIl9yLXf6Ld9Wy0hyP2Z1K7d8OAnOZDIxW9kz78tex8J8ODyP/E /JQeO7CSzjLiGuavy4aeU+OekF1NALI+AWRImg3E7b2LMqQfMWzSyxk9PioqzSnN ZEpf72u4yrfK/8+xrqaJrnMs1ebat1PL1giJoz32k1QAOltYhdnKEQNMfDW10ixe xGvwddJ7NgfMJT/J6m/a640hzE0JoOd/cVfQSASgrRMgus/MnNv48HSvQhuJgq91 ikVqI9gs5AUVXA+mYfTd2qKsOwCWagh1qu7dqVOb1rKRCRgSNNz2rf2IQIGETddw mxV6OBMs/3cXEwAsuLJZH8HE0A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:36:01 2026 by rpki-client