$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: d0tdTOOtKlaRhegSBY+eOJ7O/J93WQHI0sk/84nCGj8= Subject key identifier: D8:8A:55:87:80:F7:BB:1B:EE:0B:0E:E6:CD:56:CD:35:10:A7:C5:61 Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 0976 Signing time: Wed 22 Jul 2026 20:30:39 +0000 Manifest this update: Wed 22 Jul 2026 20:30:38 +0000 Manifest next update: Wed 29 Jul 2026 20:30:38 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: kLNHDh91VIF+5a3aqSzn7ssHCWBndIrIcF9WqkJQ+Uc=) 2: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=) 3: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Jul 22 20:30:38 2026 GMT Not After : Jul 29 20:30:38 2026 GMT Subject: CN=6a61286e-d05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:3f:cf:99:f0:ca:49:99:8f:a2:ad:78:1b: 4d:2d:6e:dc:70:26:c4:fb:7b:7a:47:a3:f3:e1:e7: d0:14:08:e0:8a:42:93:4a:17:71:a1:24:8b:59:4a: 8e:57:43:30:08:36:b2:63:be:57:ca:00:17:b7:0f: 83:06:df:93:55:17:c4:74:8a:f2:fc:47:76:c8:5b: 0c:e1:68:d6:b9:a3:8e:2d:bd:55:27:c6:0e:af:65: 20:53:08:01:82:3c:d7:dd:56:2c:c8:bb:38:3c:12: 16:62:e3:1c:2f:01:b4:db:50:e9:02:d4:e1:8e:d6: 9c:36:5e:0d:97:9d:b8:22:40:e0:6d:93:2b:ec:17: e9:48:da:c7:8e:0c:5d:6c:13:c9:a7:5d:ae:74:b4: 69:80:e0:63:4e:1c:77:29:87:c1:8d:15:70:5c:d4: f8:6a:8d:7c:46:0f:5f:23:f6:1f:fe:3e:bb:ff:39: 5e:64:fd:e8:b5:35:d3:30:97:82:ab:04:88:b0:d8: ab:7b:0f:41:43:c7:54:a2:0c:06:f1:05:22:ae:39: cf:cf:3a:64:2d:9f:61:e9:7e:55:23:9c:58:f0:fe: e3:9d:b7:78:de:d9:63:39:58:13:6f:f8:33:4c:66: 2f:98:ae:61:74:f1:d3:24:56:cd:9f:07:62:7d:20: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8A:55:87:80:F7:BB:1B:EE:0B:0E:E6:CD:56:CD:35:10:A7:C5:61 X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ff:0a:b5:aa:ed:cf:87:f8:7f:e7:55:78:0b:a0:ba:4b:ec: e8:f6:2d:3e:90:34:9c:5c:25:00:1c:e1:ad:3f:32:7a:b4:3a: d5:09:48:3a:51:72:e4:9d:18:20:01:01:2d:ec:cf:f4:5e:f4: d4:cc:1e:a9:9d:f5:cf:63:2a:d2:8c:27:8d:18:c2:ad:d1:79: cb:f7:92:49:5e:f1:8a:86:57:b1:b4:7b:88:b4:e9:3f:8c:eb: 99:ac:12:69:ca:6e:03:73:ef:cd:1b:77:21:71:d0:b9:41:a0: fb:e8:d2:a8:1f:0d:c9:74:ee:09:0b:d8:d7:5e:5f:a2:30:cd: 54:ca:49:ec:d6:1d:0f:54:ff:c9:33:db:5a:cf:f6:85:8a:a1: a3:59:1b:53:27:4f:65:84:9f:5a:99:a3:8f:ba:30:d0:12:03: dc:48:a7:86:41:5c:e8:8f:e0:91:bb:3e:ef:8c:b8:f5:21:59: f9:f6:95:cb:d6:6b:16:fa:2d:13:6e:c6:97:c0:13:99:a7:72: bc:41:15:82:25:00:0a:5f:b1:4f:0f:d1:36:03:55:48:ad:34: 25:4c:04:48:cd:53:fb:a3:09:79:81:5d:63:ad:84:6f:58:47: a6:98:be:4d:f8:20:cc:ab:fc:f8:20:92:19:4b:8e:15:30:6c: 2c:58:84:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjYwNzIyMjAzMDM4WhcNMjYwNzI5MjAzMDM4WjAYMRYwFAYD VQQDEw02YTYxMjg2ZS1kMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2b4/z5nwykmZj6KteBtNLW7ccCbE+3t6R6Pz4efQFAjgikKTShdxoSSLWUqO V0MwCDayY75XygAXtw+DBt+TVRfEdIry/Ed2yFsM4WjWuaOOLb1VJ8YOr2UgUwgB gjzX3VYsyLs4PBIWYuMcLwG021DpAtThjtacNl4Nl524IkDgbZMr7BfpSNrHjgxd bBPJp12udLRpgOBjThx3KYfBjRVwXNT4ao18Rg9fI/Yf/j67/zleZP3otTXTMJeC qwSIsNirew9BQ8dUogwG8QUirjnPzzpkLZ9h6X5VI5xY8P7jnbd43tljOVgTb/gz TGYvmK5hdPHTJFbNnwdifSAndwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiKVYeA 97sb7gsO5s1WzTUQp8VhMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP/8Ktartz4f4f+dVeAugukvs6PYtPpA0nFwlABzhrT8yerQ61QlIOlFy5J0Y IAEBLezP9F701MweqZ31z2Mq0ownjRjCrdF5y/eSSV7xioZXsbR7iLTpP4zrmawS acpuA3PvzRt3IXHQuUGg++jSqB8NyXTuCQvY115fojDNVMpJ7NYdD1T/yTPbWs/2 hYqho1kbUydPZYSfWpmjj7ow0BID3EinhkFc6I/gkbs+74y49SFZ+faVy9ZrFvot E27Gl8ATmadyvEEVgiUACl+xTw/RNgNVSK00JUwESM1T+6MJeYFdY62Eb1hHppi+ TfggzKv8+CCSGUuOFTBsLFiEnw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:34:39 2026 by rpki-client