$ rpki-client -vvf rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft File: 7aMYBt32MRYZlAFDVqvUcsHvFQM.mft (raw, json) Hash identifier: EquxyAiDydxbIG3OAhQOTSoP+rVhQ4fxMFIL2w01b4k= Subject key identifier: 00:55:4C:E1:D1:D0:A3:0A:97:69:CC:27:5A:FA:92:59:E2:EF:FC:B6 Authority key identifier: ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03 Certificate issuer: /CN=A9188C27/serialNumber=EDA31806DDF631161994014356ABD472C1EF1503 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft Manifest number: 20 Signing time: Thu 23 Jul 2026 10:59:22 +0000 Manifest this update: Thu 23 Jul 2026 10:59:22 +0000 Manifest next update: Thu 30 Jul 2026 10:59:22 +0000 Files and hashes: 1: 7aMYBt32MRYZlAFDVqvUcsHvFQM.crl (hash: D5LZF0lAT1JMj300LmyGM4FEStLMjXGtlsQSCpbptzs=) 2: B4F9B59C58A911F195C2275394833773.roa (hash: 00zQFkHzvRJ0Tkas9ws+/6cP+I3mCAoiRqheMA8N5Rw=) 3: B465F6F458A911F195C2275394833773.roa (hash: 7J7HWBgRI5TcWW6EV3w1h0niHwGS6gn8uT2QiuEPBlM=) 4: B3E67F5A58A911F195C2275394833773.roa (hash: CSpUTF1QwSjwcMC66CAo2WdtWbS27jom8RoK7EKSEnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188C27, serialNumber=EDA31806DDF631161994014356ABD472C1EF1503 Validity Not Before: Jul 23 10:59:22 2026 GMT Not After : Jul 30 10:59:22 2026 GMT Subject: CN=6a61f40a-9e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:f1:1e:31:42:fb:fc:a2:73:3f:59:9d:02: f5:0f:85:46:97:72:04:ec:6b:33:b6:b7:b7:1b:61: be:f0:92:3f:e0:db:63:f6:a7:c9:a2:6c:9d:df:58: ae:6b:7a:eb:5d:e3:2a:00:14:bf:69:65:79:fb:2a: 2a:a0:5a:40:71:f6:b9:1d:1d:cc:fd:29:df:20:36: 0a:50:93:a6:d5:38:85:f7:ae:05:4c:28:41:75:0a: 8a:10:5d:1f:5e:0e:81:55:d3:71:94:bd:a1:41:03: a9:ef:97:b2:1f:3b:65:a9:45:a5:2e:3a:0f:a7:fa: a5:53:93:35:b2:35:d9:e0:28:e8:69:83:44:72:f6: 4e:e6:b6:64:f7:ed:28:ca:d6:68:94:62:f0:fb:cd: 04:54:87:97:c8:ce:95:38:0a:2b:ee:19:43:0f:77: f1:6c:92:eb:48:75:89:29:e4:2c:c3:a7:ad:27:d2: 6f:23:e9:dd:24:5d:8f:88:f4:86:01:82:b1:24:7c: 0e:99:ef:1e:b4:e0:b0:a0:ce:76:ed:2b:ae:83:8d: 8f:dc:68:85:e8:c0:da:98:93:a2:d8:60:2c:59:c7: 72:c2:d5:57:1a:d8:01:4e:c6:12:76:82:2c:d9:49: 1e:55:c4:cb:24:16:a7:2f:3b:f8:23:bf:09:59:c5: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:55:4C:E1:D1:D0:A3:0A:97:69:CC:27:5A:FA:92:59:E2:EF:FC:B6 X509v3 Authority Key Identifier: keyid:ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d5:49:43:68:17:19:c5:8c:ac:82:e8:db:22:46:06:d5:b2: 09:eb:1d:cf:9b:ed:21:b9:39:aa:63:68:16:20:a0:7a:10:48: c4:38:31:46:aa:84:3a:35:42:68:78:cc:d7:9e:3f:6f:01:f5: 5c:cb:92:fb:c9:ec:11:91:3e:ab:5f:79:ab:ec:92:ed:1d:cf: b3:5f:b8:8b:4f:1a:3f:c9:76:09:1a:ea:61:8b:c5:e1:b0:95: c0:3f:4d:1b:1b:9c:04:10:9d:e1:91:3a:28:96:e0:1a:9c:2c: ef:6c:3a:63:82:be:ea:15:9e:02:18:35:23:10:4f:18:02:81: 26:ec:6a:e6:88:f7:ff:08:c7:29:23:76:08:b0:52:90:67:47: 77:4c:5a:87:04:64:4d:31:96:c3:9b:0f:72:d9:be:82:b2:24: 1d:17:e4:49:c6:4a:cc:a9:10:c3:5e:62:5e:ab:fd:9f:87:ce: 8a:95:7f:68:21:9d:18:7a:5b:44:a2:f8:eb:9d:51:04:e7:ff: cf:18:3b:0e:e0:73:cf:fa:9e:aa:cd:a8:5b:f4:23:9f:1b:73: 6b:fd:16:33:e0:a3:39:41:c5:97:eb:b6:2b:8d:8b:35:d0:cb: a0:b9:9f:4f:eb:86:60:03:a8:85:3a:04:4b:a7:92:24:47:1c: 7b:12:f9:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEMyNzExMC8GA1UEBRMoRURBMzE4MDZEREY2MzExNjE5OTQwMTQzNTZBQkQ0NzJD MUVGMTUwMzAeFw0yNjA3MjMxMDU5MjJaFw0yNjA3MzAxMDU5MjJaMBgxFjAUBgNV BAMTDTZhNjFmNDBhLTllNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYDfEeMUL7/KJzP1mdAvUPhUaXcgTsazO2t7cbYb7wkj/g22P2p8mibJ3fWK5r eutd4yoAFL9pZXn7KiqgWkBx9rkdHcz9Kd8gNgpQk6bVOIX3rgVMKEF1CooQXR9e DoFV03GUvaFBA6nvl7IfO2WpRaUuOg+n+qVTkzWyNdngKOhpg0Ry9k7mtmT37SjK 1miUYvD7zQRUh5fIzpU4CivuGUMPd/FskutIdYkp5CzDp60n0m8j6d0kXY+I9IYB grEkfA6Z7x604LCgznbtK66DjY/caIXowNqYk6LYYCxZx3LC1Vca2AFOxhJ2gizZ SR5VxMskFqcvO/gjvwlZxXBrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAFVM4dHQ owqXacwnWvqSWeLv/LYwHwYDVR0jBBgwFoAU7aMYBt32MRYZlAFDVqvUcsHvFQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QzI3LzJFNzI0MTdFNThB OTExRjFBREVCQkM2RjkzODMzNzczLzdhTVlCdDMyTVJZWmxBRkRWcXZVY3NIdkZR TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2FNWUJ0MzJNUllabEFGRFZxdlVjc0h2RlFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 QzI3LzJFNzI0MTdFNThBOTExRjFBREVCQkM2RjkzODMzNzczLzdhTVlCdDMyTVJZ WmxBRkRWcXZVY3NIdkZRTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB31UlDaBcZxYysgujbIkYG1bIJ6x3Pm+0huTmqY2gWIKB6EEjEODFGqoQ6NUJo eMzXnj9vAfVcy5L7yewRkT6rX3mr7JLtHc+zX7iLTxo/yXYJGuphi8XhsJXAP00b G5wEEJ3hkTooluAanCzvbDpjgr7qFZ4CGDUjEE8YAoEm7GrmiPf/CMcpI3YIsFKQ Z0d3TFqHBGRNMZbDmw9y2b6CsiQdF+RJxkrMqRDDXmJeq/2fh86KlX9oIZ0YeltE ovjrnVEE5//PGDsO4HPP+p6qzahb9COfG3Nr/RYz4KM5QcWX67YrjYs10MuguZ9P 64ZgA6iFOgRLp5IkRxx7Evk0 -----END CERTIFICATE-----Generated at Thu Jul 23 22:46:04 2026 by rpki-client