$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json) Hash identifier: eGLCEf7zlv81U2DuMQpELJDKd9vR12KluD0rPtPpK/k= Subject key identifier: 5D:EA:6A:43:F1:D3:BD:E9:B5:1C:E0:6B:86:29:1A:76:6B:F2:E8:A3 Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft Manifest number: 07B6 Signing time: Wed 22 Jul 2026 22:00:28 +0000 Manifest this update: Wed 22 Jul 2026 22:00:28 +0000 Manifest next update: Wed 29 Jul 2026 22:00:28 +0000 Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: csVBjg4v11WeT5xY6dE9gretCng2+0eOWyql9feRDso=) 2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Validity Not Before: Jul 22 22:00:28 2026 GMT Not After : Jul 29 22:00:28 2026 GMT Subject: CN=6a613d7c-e927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:6e:f1:04:85:64:6d:fc:bf:fe:28:95:f4: b9:a2:45:5f:0b:86:ea:bf:d0:4a:42:c2:2a:4a:ce: 5b:89:12:73:2f:10:5b:58:b5:4b:8c:f3:92:38:03: 2a:80:48:f4:7e:b1:1e:10:98:79:9a:3e:bc:24:fb: 4d:4c:28:51:d6:5a:1d:c3:f1:1e:f8:af:52:ee:23: c8:84:81:ae:a9:8f:c6:76:15:d9:d5:7b:25:0a:45: 86:e3:ac:f5:04:ec:c6:02:7e:b9:4f:f1:ae:87:18: 39:37:a8:8e:40:39:97:fd:ea:26:e7:45:16:d5:0d: 3f:b0:c0:8d:73:c3:c2:d4:8d:7c:78:3a:6a:2c:2b: b4:6e:a3:93:84:5e:31:58:a8:e6:65:58:17:43:64: 85:c4:0e:e7:33:8c:99:d6:96:4d:25:6e:3e:6e:fa: ba:4f:24:ab:ec:96:d7:0f:c6:f0:49:1f:b4:92:35: af:b2:cf:f4:f3:b6:31:1c:40:be:74:3f:5f:9e:ed: ad:a1:bd:c1:a9:18:db:8b:8a:bf:fc:f4:aa:63:00: b7:ff:b0:59:c0:c4:10:7b:5b:f3:ed:43:b7:b4:90: cf:3d:14:fe:81:97:8b:c2:08:14:78:4e:bf:a2:c2: 8b:6f:1a:ac:3c:80:e1:a1:e5:43:cc:d2:0c:3b:88: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EA:6A:43:F1:D3:BD:E9:B5:1C:E0:6B:86:29:1A:76:6B:F2:E8:A3 X509v3 Authority Key Identifier: keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2e:f2:1a:c6:38:11:41:1d:f1:3d:82:9b:fb:26:a8:d3:3f: 39:bd:f6:b7:c9:87:9b:ef:2e:df:5e:e7:1a:d1:cc:14:2c:f2: 4a:1c:c4:1c:b3:f7:f5:55:da:0d:35:c7:f5:20:aa:71:1c:be: 8b:25:6a:24:12:a3:de:82:73:49:5a:cb:b6:e9:ff:bb:bc:67: 23:b7:a8:2c:17:fb:e5:04:cb:b1:40:86:69:15:ca:c3:1a:7e: 0f:7d:9a:40:09:9a:9e:04:11:ad:52:e3:9c:f0:03:33:47:d1: 57:b5:88:1c:96:e6:f0:f5:74:cf:67:df:ed:c2:a5:6e:27:6f: 80:89:2a:c2:a3:65:f5:e4:41:af:68:f3:31:fc:0d:ef:ce:85: 66:55:ec:83:da:7a:f2:36:54:ea:93:f5:33:a9:5d:75:83:c6: 64:19:df:71:1d:f0:5d:88:92:aa:4f:b9:4b:82:f6:c6:8e:3d: 35:b4:73:38:08:59:b8:91:da:c3:b2:4f:6e:f0:b4:88:84:97: 81:d9:51:a1:4f:2d:ea:fb:47:ed:3c:8d:42:bd:2c:94:bd:c2: 01:dc:13:17:96:dc:15:49:27:fa:c0:ea:6e:00:6f:e4:f8:c3: f5:79:9a:0b:b7:78:d8:34:f0:a2:1a:4a:6f:f9:4c:0b:d9:27: 01:7c:03:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE MzVEM0M0OEUwHhcNMjYwNzIyMjIwMDI4WhcNMjYwNzI5MjIwMDI4WjAYMRYwFAYD VQQDEw02YTYxM2Q3Yy1lOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva5u8QSFZG38v/4olfS5okVfC4bqv9BKQsIqSs5biRJzLxBbWLVLjPOSOAMq gEj0frEeEJh5mj68JPtNTChR1lodw/Ee+K9S7iPIhIGuqY/GdhXZ1XslCkWG46z1 BOzGAn65T/Guhxg5N6iOQDmX/eom50UW1Q0/sMCNc8PC1I18eDpqLCu0bqOThF4x WKjmZVgXQ2SFxA7nM4yZ1pZNJW4+bvq6TySr7JbXD8bwSR+0kjWvss/087YxHEC+ dD9fnu2tob3BqRjbi4q//PSqYwC3/7BZwMQQe1vz7UO3tJDPPRT+gZeLwggUeE6/ osKLbxqsPIDhoeVDzNIMO4ggDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3qakPx 073ptRzga4YpGnZr8uijMB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4 STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDIyOC82QjREMkRBODUwQUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82 MzE3Skdsek5JOXJUWFR4STQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPC7yGsY4EUEd8T2Cm/smqNM/Ob32t8mHm+8u317nGtHMFCzyShzEHLP39VXa DTXH9SCqcRy+iyVqJBKj3oJzSVrLtun/u7xnI7eoLBf75QTLsUCGaRXKwxp+D32a QAmangQRrVLjnPADM0fRV7WIHJbm8PV0z2ff7cKlbidvgIkqwqNl9eRBr2jzMfwN 786FZlXsg9p68jZU6pP1M6lddYPGZBnfcR3wXYiSqk+5S4L2xo49NbRzOAhZuJHa w7JPbvC0iISXgdlRoU8t6vtH7TyNQr0slL3CAdwTF5bcFUkn+sDqbgBv5PjD9Xma C7d42DTwohpKb/lMC9knAXwDsw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:46 2026 by rpki-client