$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: MrQFd+rIf5pD2yT7z0EfOBtHEdeQOYL+lz67rjNpVt8= Subject key identifier: 2A:22:02:D2:89:C1:A4:E7:41:10:AA:B1:0D:32:1B:96:DE:71:68:22 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 35A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 357D Signing time: Wed 22 Jul 2026 14:16:54 +0000 Manifest this update: Wed 22 Jul 2026 14:16:53 +0000 Manifest next update: Wed 29 Jul 2026 14:16:53 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: oUFsNfBoVm+mgNGVvPrDZuB9dAK+U2bN9wjt0fipq6w=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13737 (0x35a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Jul 22 14:16:53 2026 GMT Not After : Jul 29 14:16:53 2026 GMT Subject: CN=6a60d0d5-993e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:ee:d8:27:06:04:a0:13:0f:cd:69:9f:48: 66:60:48:41:1b:34:27:df:d2:54:cc:16:94:c0:c9: 7d:5b:61:6e:a8:87:35:3a:0a:a1:5a:66:27:6f:e2: 1b:37:b9:b4:4d:af:ba:91:26:69:37:ba:e2:ea:b3: 73:de:ff:ab:1b:e2:17:8b:55:c3:d9:9a:bf:ca:a9: d9:7c:7c:a1:a5:8c:28:2a:94:bf:c4:ed:48:59:a0: 1f:34:6f:96:9c:ed:45:f5:c7:bb:f7:50:cb:81:ec: 2f:38:96:f4:ed:d3:42:d9:fe:6a:be:85:ba:22:57: ea:7a:31:98:42:17:b4:30:f7:d4:27:01:1a:1e:cc: 3e:a1:9a:fc:41:df:09:62:d4:3f:7a:c5:a3:17:12: 29:88:05:a5:df:a6:48:ec:a8:26:8d:9d:6f:08:4e: 4b:45:45:73:35:d9:e6:3f:e6:8e:16:f5:d1:1c:69: f6:e3:52:7c:f3:7f:4e:7a:b1:f2:5d:4b:e4:73:36: 5c:41:ce:d3:49:a7:35:2d:56:ed:d6:26:23:86:00: 82:0a:2d:db:3b:5d:34:ee:af:5e:d8:cf:d0:8c:af: 2d:86:f1:c2:15:ce:13:10:fd:ac:0f:ec:94:7e:b7: 99:de:a0:43:65:78:d1:ed:1e:08:0c:e7:ea:69:96: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:02:D2:89:C1:A4:E7:41:10:AA:B1:0D:32:1B:96:DE:71:68:22 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:9f:c1:dc:ab:8b:66:67:74:19:8a:76:2d:2e:42:9f:7c:7e: 31:e7:ee:c4:a2:e0:e1:62:45:8d:11:63:c1:1e:16:08:81:0f: c4:1b:a7:f0:f8:83:48:f3:5f:ae:b4:56:f8:c9:57:37:f6:ec: 26:31:02:44:e7:de:01:21:70:67:23:ba:f9:b0:a6:ff:4d:78: c9:0e:bd:76:cc:19:ab:09:7f:00:cc:2b:1d:6f:a1:71:61:b0: 93:8d:b3:51:4d:11:8b:de:39:a0:01:9c:79:50:7d:56:68:4f: 9d:80:71:19:02:08:5b:46:e1:87:25:58:ae:4f:b1:14:2b:f2: 35:6e:cc:b9:d8:f7:31:99:d2:15:54:89:6e:29:1f:6c:98:01: 72:30:fa:05:b5:7e:e6:9e:c3:a2:e5:ca:03:3d:02:c5:c0:04: 3c:19:a1:15:33:cd:e4:9d:33:6b:bd:f7:47:32:e0:e2:e2:18: 00:39:6e:d0:86:b9:13:a3:a3:b6:eb:37:f1:a1:8e:fb:d3:56: ab:7b:9c:eb:73:9c:7d:8e:d7:3e:76:ef:ae:44:9b:cc:33:ab: 33:2b:f6:f7:58:15:80:b5:3a:45:35:1a:d5:58:1c:73:26:b4: 67:de:5e:15:96:13:83:95:ae:c1:ee:05:08:aa:3c:4c:90:98: 85:f5:06:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjYwNzIyMTQxNjUzWhcNMjYwNzI5MTQxNjUzWjAYMRYwFAYD VQQDEw02YTYwZDBkNS05OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx/u2CcGBKATD81pn0hmYEhBGzQn39JUzBaUwMl9W2FuqIc1OgqhWmYnb+Ib N7m0Ta+6kSZpN7ri6rNz3v+rG+IXi1XD2Zq/yqnZfHyhpYwoKpS/xO1IWaAfNG+W nO1F9ce791DLgewvOJb07dNC2f5qvoW6IlfqejGYQhe0MPfUJwEaHsw+oZr8Qd8J YtQ/esWjFxIpiAWl36ZI7KgmjZ1vCE5LRUVzNdnmP+aOFvXRHGn241J8839OerHy XUvkczZcQc7TSac1LVbt1iYjhgCCCi3bO1007q9e2M/QjK8thvHCFc4TEP2sD+yU freZ3qBDZXjR7R4IDOfqaZYzmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoiAtKJ waTnQRCqsQ0yG5becWgiMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy5/B3KuLZmd0GYp2LS5Cn3x+MefuxKLg4WJFjRFjwR4WCIEPxBun8PiDSPNf rrRW+MlXN/bsJjECROfeASFwZyO6+bCm/014yQ69dswZqwl/AMwrHW+hcWGwk42z UU0Ri945oAGceVB9VmhPnYBxGQIIW0bhhyVYrk+xFCvyNW7Mudj3MZnSFVSJbikf bJgBcjD6BbV+5p7DouXKAz0CxcAEPBmhFTPN5J0za733RzLg4uIYADlu0Ia5E6Oj tus38aGO+9NWq3uc63OcfY7XPnbvrkSbzDOrMyv291gVgLU6RTUa1Vgccya0Z95e FZYTg5Wuwe4FCKo8TJCYhfUGgQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:27:43 2026 by rpki-client