$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: jVlGUkErmGFzfIxre65pN9YuFfclrRbDsTYTmLaZja8= Subject key identifier: 52:B1:7A:84:F6:EA:3D:59:16:39:24:D9:F5:6E:44:4D:14:C4:7D:AE Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 012B Signing time: Wed 23 Sep 2026 05:31:47 +0000 Manifest this update: Wed 23 Sep 2026 05:31:47 +0000 Manifest next update: Wed 30 Sep 2026 05:31:47 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: frlG0cjMLYSK00eDfuVTkDo7DsbnshvPt6gC1M89u+k=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: es6gg4VR5lFbEJCzmzV+IK5Hk13Q64hmXPH+fWoKdMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Sep 23 05:31:47 2026 GMT Not After : Sep 30 05:31:47 2026 GMT Subject: CN=6ab36443-1779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:41:6a:f7:7d:b0:aa:3e:4e:8a:e0:8f:64: cc:b3:ae:c1:76:64:9e:e9:37:6f:91:bc:76:7c:31: 1b:be:64:6c:b9:2e:61:4b:9d:b5:9a:31:aa:62:6e: 8a:ed:b9:3e:6f:6d:0d:18:c7:6b:b5:c6:13:71:f9: fe:f6:f8:db:ef:e7:a2:5f:51:c4:e7:89:99:0e:b6: b2:21:da:96:1f:c2:f4:31:e2:72:a1:8c:ce:08:bd: 04:d0:1e:d8:20:a1:a0:56:11:2c:69:6b:b4:5b:63: 15:1a:93:f0:38:06:fd:3f:30:7a:c8:8d:52:d4:f7: 51:2d:88:2c:21:4a:2d:a1:ad:9b:66:21:63:7c:d3: 37:aa:a7:2b:40:43:c8:11:24:6c:4f:79:8a:48:0b: f4:96:ed:5a:c8:8c:ed:f4:fa:4f:9f:d6:6a:3f:d5: d9:c0:ef:a0:ba:98:1d:47:24:9a:37:2a:0d:f8:fe: 3c:8e:be:9a:fd:1a:f7:04:a3:07:22:68:dd:89:c5: f6:9f:cc:eb:5a:4e:7d:91:88:55:c3:27:fd:2e:93: 91:fb:7d:d3:c5:79:73:18:a0:62:04:be:14:df:60: 75:b6:3f:9c:90:e8:a8:29:77:29:76:61:50:4e:78: 27:3a:31:3e:a3:d7:be:63:2c:e9:c8:75:af:20:fc: da:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B1:7A:84:F6:EA:3D:59:16:39:24:D9:F5:6E:44:4D:14:C4:7D:AE X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ed:f4:c1:63:88:de:d7:04:66:cf:07:dc:f6:12:87:0a:50: dd:69:6c:40:e1:9e:78:89:9f:68:fb:ad:0a:94:fc:ec:21:3c: 70:b3:10:01:19:2d:51:cc:bd:89:18:2d:b5:77:90:76:b4:69: d1:9e:12:25:95:e8:5d:8b:af:65:17:da:3b:da:c5:1a:8e:1a: 19:0b:36:7b:4c:5c:de:ab:1f:50:36:c2:63:85:9f:0c:9e:eb: c8:b8:55:a7:92:36:3d:64:32:a4:ea:80:50:7d:da:e1:2c:2e: a7:2d:bd:a9:e4:88:3c:09:93:be:7d:61:00:80:24:65:e1:e9: a6:54:10:c6:67:6e:88:e7:46:94:6e:71:00:7b:d4:8e:fd:c9: 31:51:b3:99:f3:26:33:c4:17:df:59:dd:85:45:ae:63:9f:40: 2a:f9:f4:57:0b:61:bb:20:e1:02:18:5f:e9:c4:5f:23:21:fa: 14:88:68:90:7b:b2:2e:85:ca:48:39:6b:de:b4:be:45:23:54: 5a:a7:7a:3b:bb:99:29:01:1f:8e:18:da:ed:3f:e7:ad:28:00: e6:a6:fd:f0:2b:bd:8a:02:74:f3:a8:00:1f:1a:70:05:98:d2: e2:08:5d:18:bf:a9:dd:01:78:6d:ca:88:27:4f:74:ca:b0:34: 49:2d:56:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjYwOTIzMDUzMTQ3WhcNMjYwOTMwMDUzMTQ3WjAYMRYwFAYD VQQDEw02YWIzNjQ0My0xNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv5Bavd9sKo+Torgj2TMs67BdmSe6Tdvkbx2fDEbvmRsuS5hS521mjGqYm6K 7bk+b20NGMdrtcYTcfn+9vjb7+eiX1HE54mZDrayIdqWH8L0MeJyoYzOCL0E0B7Y IKGgVhEsaWu0W2MVGpPwOAb9PzB6yI1S1PdRLYgsIUotoa2bZiFjfNM3qqcrQEPI ESRsT3mKSAv0lu1ayIzt9PpPn9ZqP9XZwO+gupgdRySaNyoN+P48jr6a/Rr3BKMH ImjdicX2n8zrWk59kYhVwyf9LpOR+33TxXlzGKBiBL4U32B1tj+ckOioKXcpdmFQ TngnOjE+o9e+YyzpyHWvIPzatwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKxeoT2 6j1ZFjkk2fVuRE0UxH2uMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbO30wWOI3tcEZs8H3PYShwpQ3WlsQOGeeImfaPutCpT87CE8cLMQARktUcy9 iRgttXeQdrRp0Z4SJZXoXYuvZRfaO9rFGo4aGQs2e0xc3qsfUDbCY4WfDJ7ryLhV p5I2PWQypOqAUH3a4Swupy29qeSIPAmTvn1hAIAkZeHpplQQxmduiOdGlG5xAHvU jv3JMVGzmfMmM8QX31ndhUWuY59AKvn0VwthuyDhAhhf6cRfIyH6FIhokHuyLoXK SDlr3rS+RSNUWqd6O7uZKQEfjhja7T/nrSgA5qb98Cu9igJ086gAHxpwBZjS4ghd GL+p3QF4bcqIJ090yrA0SS1WEg== -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:06 2026 by rpki-client