$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft File: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json) Hash identifier: T8Sp+feCOfQRA/AvCQMBF25HfB64KCGqGyhCCcKIAJE= Subject key identifier: 38:D0:1A:2C:56:6F:94:12:61:17:18:8B:DC:E8:5A:D7:7F:25:75:A6 Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 07D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft Manifest number: 0795 Signing time: Wed 22 Jul 2026 22:11:31 +0000 Manifest this update: Wed 22 Jul 2026 22:11:31 +0000 Manifest next update: Wed 29 Jul 2026 22:11:31 +0000 Files and hashes: 1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: f1/sCgur3emCkBhFfZytVMjt+BFVszEzWx6qvZZ/f38=) 2: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: Z5JNXuyK8pVpVTXZRSw/3NXfULy4gdDfbm5KVqS1fJs=) 3: 34956990D75511EF80E68A39C4F9AE02.roa (hash: DPlXMT8frXQbGoG9pLaFh0WB63E0zOeIFvm13T+J4dI=) 4: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: A40clfmAKuJ8DEHrvMmO8Qnj68wptppXgv295ggRwK0=) 5: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: FuAuOSeZqyhv7xBUkLpYtgZN4CG+Zmtssp+xgIjrFpk=) 6: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: DnHW+mUJVZtv9B6gIXhv28KjbtfF/KXWmIFAYGVyHlE=) 7: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: w9Hm03eT/l3NaX+cWE9OYZMWae4MoDDL8yDbbkk4nA4=) 8: 05F05106586011EE9399A92EC4F9AE02.roa (hash: NRdz74W1noDs/Jst6l7nB8fE2ZHETWFi07LKykhjq1A=) 9: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: E8oectp52r79zD2pll37RXbntNqRlP25s0rz04IvcYE=) 10: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: 74fwn/pB3FeTVbF+ifCCl3ioLhx2dKq5ZlY27D8g9dQ=) 11: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: Lc4YME8skp8fONCgNP9FlElHrE/WnBABUYskf2DRHEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: Jul 22 22:11:31 2026 GMT Not After : Jul 29 22:11:31 2026 GMT Subject: CN=6a614013-67dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:2f:3a:fd:8f:5d:8f:af:bd:18:c8:a7:a0: c3:9e:c9:2b:88:4c:b4:7d:70:7f:39:aa:9c:6e:d8: cf:f4:e8:77:e9:1e:d5:e6:80:07:32:87:f0:e1:b4: b0:c6:a6:27:b7:2d:97:19:7f:bd:d1:d8:93:69:75: 28:bd:b4:ce:12:79:ef:42:ea:b8:35:d4:db:92:b2: 67:9f:ae:c9:0c:39:1d:8d:fd:28:9f:14:23:ef:08: 4b:6a:23:ce:ee:1e:af:70:d1:3a:37:27:b3:5c:c4: 14:55:80:63:4c:6c:73:20:e7:cc:b4:9c:b2:e2:6b: ed:ba:5e:28:22:55:08:8c:b0:3f:67:16:ef:d0:7b: 7a:1e:7e:de:e4:a3:77:9f:02:0d:a7:75:0e:47:29: a4:53:23:d2:ea:0b:20:91:ff:fc:c6:9b:cf:37:a7: 0b:5d:12:ee:3e:89:d2:7f:33:7e:0d:6e:1c:a9:ed: ea:7e:02:ed:09:1d:98:f1:17:5f:92:3d:39:f0:d5: f2:f7:c7:6e:f7:09:c2:03:72:f9:48:a1:f5:c7:74: 2b:34:28:3f:69:31:6a:7f:cb:69:96:4b:a1:63:37: 75:09:5f:53:4d:db:1e:4f:d8:dc:92:9b:c1:12:9f: 83:de:25:7c:77:7b:fc:a0:6f:11:00:59:2c:94:9e: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:1A:2C:56:6F:94:12:61:17:18:8B:DC:E8:5A:D7:7F:25:75:A6 X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:f7:86:05:b8:3e:06:8e:40:e1:25:cf:a5:b4:d5:67:2a:5a: c3:ea:2a:c0:4c:65:80:75:fb:f1:c2:8c:3f:c3:46:29:be:1a: fb:95:9b:32:f6:4e:88:7b:98:81:df:2c:26:9b:3e:7b:d7:8d: 27:25:80:da:1d:7b:d5:d5:f1:fd:b4:98:80:aa:d2:9a:9c:eb: 82:11:c6:1a:21:e6:a5:25:66:a2:56:55:95:ff:1c:5c:ae:d3: ff:ff:54:39:08:8c:97:49:8c:28:66:a6:bd:a7:6e:d5:18:ee: 4e:1e:ca:28:65:ff:35:9c:72:cd:e7:d5:79:60:ac:ae:bd:9c: da:e3:5b:8c:9a:2f:ad:47:a2:1b:c3:68:95:bb:36:f4:d7:d8: 5b:6a:70:da:19:1e:46:ff:5d:d0:28:a3:79:1d:e6:55:0d:8e: ad:c5:88:76:05:8a:96:ce:4e:71:18:a3:f4:a7:78:98:c9:0f: 23:7b:26:c8:ef:f7:45:fe:ce:62:04:de:49:a7:ef:8b:98:15: b5:77:0c:39:00:26:90:8a:15:e4:be:6e:bc:3d:db:e1:a4:3d: 2e:61:73:5d:00:dc:e9:80:e2:85:0d:77:74:62:df:88:fa:a3: 25:00:ce:c6:b0:96:08:9b:cd:01:c4:41:1c:66:38:5e:4f:df: b5:1e:2b:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjYwNzIyMjIxMTMxWhcNMjYwNzI5MjIxMTMxWjAYMRYwFAYD VQQDEw02YTYxNDAxMy02N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLEvOv2PXY+vvRjIp6DDnskriEy0fXB/OaqcbtjP9Oh36R7V5oAHMofw4bSw xqYnty2XGX+90diTaXUovbTOEnnvQuq4NdTbkrJnn67JDDkdjf0onxQj7whLaiPO 7h6vcNE6NyezXMQUVYBjTGxzIOfMtJyy4mvtul4oIlUIjLA/Zxbv0Ht6Hn7e5KN3 nwINp3UORymkUyPS6gsgkf/8xpvPN6cLXRLuPonSfzN+DW4cqe3qfgLtCR2Y8Rdf kj058NXy98du9wnCA3L5SKH1x3QrNCg/aTFqf8tplkuhYzd1CV9TTdseT9jckpvB Ep+D3iV8d3v8oG8RAFkslJ7m2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjQGixW b5QSYRcYi9zoWtd/JXWmMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI0RC9DQTU2M0JFODY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlL NXRuV0l2bXVfWHBNa1ZUeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1/eGBbg+Bo5A4SXPpbTVZypaw+oqwExlgHX78cKMP8NGKb4a+5WbMvZOiHuY gd8sJps+e9eNJyWA2h171dXx/bSYgKrSmpzrghHGGiHmpSVmolZVlf8cXK7T//9U OQiMl0mMKGamvadu1RjuTh7KKGX/NZxyzefVeWCsrr2c2uNbjJovrUeiG8Nolbs2 9NfYW2pw2hkeRv9d0CijeR3mVQ2OrcWIdgWKls5OcRij9Kd4mMkPI3smyO/3Rf7O YgTeSafvi5gVtXcMOQAmkIoV5L5uvD3b4aQ9LmFzXQDc6YDihQ13dGLfiPqjJQDO xrCWCJvNAcRBHGY4Xk/ftR4r9Q== -----END CERTIFICATE-----Generated at Fri Jul 24 15:27:26 2026 by rpki-client