$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: VXSKg2Ost5fLea8W7oAgrZcEndxwLJ8nFee4ksimOzo= Subject key identifier: E2:02:42:B8:29:DC:37:1B:E7:23:4C:97:45:72:DC:69:84:A7:AB:1C Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 01A1 Signing time: Thu 23 Jul 2026 05:40:18 +0000 Manifest this update: Thu 23 Jul 2026 05:40:18 +0000 Manifest next update: Thu 30 Jul 2026 05:40:18 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: c/Mp8D6qY885cgkhIM7Idn1Dq0jKmhmL08zgefM2Cm0=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: yK/WcBJQdA4buA3EZ+0KrWMfv9XG+NNlOPVNviCvGZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Jul 23 05:40:18 2026 GMT Not After : Jul 30 05:40:18 2026 GMT Subject: CN=6a61a942-d78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:06:53:b0:8d:27:83:a8:c8:8f:da:2f:9d: 72:f7:e8:5c:53:09:1a:6b:01:7d:ed:a2:5d:49:32: cd:f2:a8:a9:86:ef:18:1c:63:0f:95:08:12:68:71: 6f:44:02:e5:b9:09:7c:c1:b1:c2:92:32:ed:b6:41: 1a:6d:15:64:31:97:e2:d2:e8:14:03:2f:f5:23:76: 84:0c:29:f8:80:40:d9:c7:b0:97:b8:45:8d:88:f0: ab:ef:27:c3:fb:6a:cb:2a:c5:ec:d7:6b:4c:d7:0b: 7b:f8:39:a2:8a:50:1a:be:e1:4a:09:93:7b:b5:fe: 74:ff:82:8d:6c:74:8c:09:d6:7d:8d:0d:2e:43:f3: 6f:bb:b4:e5:0c:f9:6c:ac:31:49:78:9d:c1:ac:79: 15:f8:54:53:6c:fe:82:1f:a3:1e:7f:de:f7:41:e0: d0:ce:50:22:83:64:d9:2e:f3:93:bf:c6:82:8c:63: 26:01:e8:9f:dc:be:e0:40:d7:bf:45:3c:c5:8e:d0: 4c:08:ea:2f:63:54:e9:6a:99:7d:9c:85:25:16:c9: a4:95:30:d6:40:7e:9c:77:c2:86:af:19:6e:31:cc: 16:2b:74:b2:15:59:f0:c0:f6:44:b8:12:2b:55:b0: c6:7a:8f:11:41:30:82:79:6f:62:9e:24:69:5f:d2: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:02:42:B8:29:DC:37:1B:E7:23:4C:97:45:72:DC:69:84:A7:AB:1C X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:42:73:e3:f5:6c:87:a3:50:70:24:ee:ba:08:d4:92:c5:b2: 8d:5b:03:99:b9:77:e4:d3:d0:60:4e:17:91:68:81:b1:0b:fc: 52:d3:e8:1f:b1:db:79:d7:05:9e:17:0e:2f:5c:db:3e:89:78: a3:16:5e:6e:b0:e3:6b:8b:23:6c:65:a1:31:58:30:8b:d1:6d: 53:91:e7:51:f9:70:1d:14:3a:9e:ef:aa:b7:9b:b3:5e:96:00: 7d:e4:fc:47:08:f8:1b:e0:b9:51:68:f2:cb:e5:5f:4b:fc:f6: ed:bb:98:9f:ca:4a:09:b9:1d:13:ab:c7:bf:ca:53:ce:8f:d8: 25:2f:c1:e1:db:f9:80:6b:90:a5:0f:f8:7d:a8:ed:dd:04:7f: 12:84:5e:6c:d3:88:91:8a:6b:59:90:91:33:b0:3e:de:ee:1f: 55:1b:98:b1:50:ad:bc:b8:1b:8d:c9:15:dc:72:16:fc:ab:54: f4:0c:95:94:72:1b:64:69:07:90:7b:80:77:23:be:11:54:c8: 9a:fb:e4:e5:ec:ad:17:b6:03:0b:f8:a1:49:2b:9e:4a:33:5e: 47:d1:0c:83:b7:0a:14:1b:35:8b:91:79:7c:14:6d:de:16:91: e2:b3:39:ea:8a:0b:5c:a5:7a:95:f7:58:36:d3:19:b4:c7:2b: 9e:47:9f:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjYwNzIzMDU0MDE4WhcNMjYwNzMwMDU0MDE4WjAYMRYwFAYD VQQDEw02YTYxYTk0Mi1kNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU0GU7CNJ4OoyI/aL51y9+hcUwkaawF97aJdSTLN8qiphu8YHGMPlQgSaHFv RALluQl8wbHCkjLttkEabRVkMZfi0ugUAy/1I3aEDCn4gEDZx7CXuEWNiPCr7yfD +2rLKsXs12tM1wt7+DmiilAavuFKCZN7tf50/4KNbHSMCdZ9jQ0uQ/Nvu7TlDPls rDFJeJ3BrHkV+FRTbP6CH6Mef973QeDQzlAig2TZLvOTv8aCjGMmAeif3L7gQNe/ RTzFjtBMCOovY1Tpapl9nIUlFsmklTDWQH6cd8KGrxluMcwWK3SyFVnwwPZEuBIr VbDGeo8RQTCCeW9iniRpX9LuoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOICQrgp 3Dcb5yNMl0Vy3GmEp6scMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfkJz4/Vsh6NQcCTuugjUksWyjVsDmbl35NPQYE4XkWiBsQv8UtPoH7HbedcF nhcOL1zbPol4oxZebrDja4sjbGWhMVgwi9FtU5HnUflwHRQ6nu+qt5uzXpYAfeT8 Rwj4G+C5UWjyy+VfS/z27buYn8pKCbkdE6vHv8pTzo/YJS/B4dv5gGuQpQ/4fajt 3QR/EoRebNOIkYprWZCRM7A+3u4fVRuYsVCtvLgbjckV3HIW/KtU9AyVlHIbZGkH kHuAdyO+EVTImvvk5eytF7YDC/ihSSueSjNeR9EMg7cKFBs1i5F5fBRt3haR4rM5 6ooLXKV6lfdYNtMZtMcrnkef6g== -----END CERTIFICATE-----Generated at Fri Jul 24 04:24:22 2026 by rpki-client