$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: Sl4rgs1xNULhxh52iLSCqxUigHhvsGoBOGbBOqbZrSY= Subject key identifier: 29:02:17:60:31:53:C4:E0:2E:D8:17:6D:14:EA:3C:CD:7A:94:B4:6F Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 01CA Signing time: Thu 23 Jul 2026 05:07:01 +0000 Manifest this update: Thu 23 Jul 2026 05:07:00 +0000 Manifest next update: Thu 30 Jul 2026 05:07:00 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: AThz9FFgCMj8bzzPhrTBEob6GOpgSmH91lQccyAvcTM=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: yPDy0xgT7qOMVChc0IeYdh84zKZ/Q4OPSOxME4uNSX8=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: MtMRVhbm/GKcyIVSZCGW9MQoyNNx6WEtE4Sni66kFt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Jul 23 05:07:00 2026 GMT Not After : Jul 30 05:07:00 2026 GMT Subject: CN=6a61a175-7de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:bd:3f:9c:0a:b5:e9:84:d3:1e:42:7b:39: d8:5e:37:b6:28:3c:8a:67:b0:06:7e:d3:ed:ff:f3: 05:89:91:39:e4:e3:ee:4f:25:2e:f1:79:26:0c:0d: c2:d4:97:6d:54:08:f9:80:9d:63:73:e5:13:fc:34: d3:a5:67:f8:b5:ff:08:21:07:bc:4c:ad:ed:e9:71: 91:07:e0:00:29:a9:97:37:ed:8a:b2:0f:29:e9:97: af:48:d4:eb:5e:ab:c2:5a:59:cc:13:a8:97:18:2d: d9:cd:0d:6d:53:0a:c7:7f:0b:ef:e7:ac:d4:1f:f6: 72:1d:54:1b:d8:51:a8:ab:7c:58:7d:ea:5b:96:1f: 9d:20:b9:66:68:69:b3:0d:16:e5:9a:b0:a2:34:50: 1e:ee:91:fa:0c:43:61:08:af:c2:1b:73:16:7e:46: bb:18:a2:34:2d:d4:89:a8:39:8c:0c:64:af:e0:28: f8:98:5b:1d:62:07:a7:8a:f3:6c:e2:17:f5:a8:58: bc:81:d0:6c:51:b6:31:2c:30:49:23:3c:eb:99:8f: be:95:3b:5e:35:d9:96:af:60:fc:3b:9e:b2:3e:e1: 22:25:61:be:25:60:e8:bc:b6:f1:5e:8a:35:6b:75: 34:15:4a:0d:1b:2e:b5:c1:b4:1a:81:54:7a:0e:e0: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:17:60:31:53:C4:E0:2E:D8:17:6D:14:EA:3C:CD:7A:94:B4:6F X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:9e:67:6d:9f:df:a1:db:41:00:21:30:f5:0b:9c:ad:68:b4: e9:86:a2:1b:45:d6:bd:5a:f2:11:56:0f:c8:5d:c6:0b:21:cd: c8:dc:aa:70:f6:3f:2e:9f:1b:c6:e8:be:5f:93:08:d1:b6:ee: c2:f6:5f:78:e9:bc:5d:d3:3f:b5:d2:09:9b:09:83:62:4a:fc: 85:90:12:98:5a:74:84:ef:16:1f:cd:16:a2:3d:e2:cd:14:d8: 46:e2:91:6f:80:51:38:dd:28:8d:b5:f2:36:ec:f2:68:06:9c: 1f:67:c1:83:61:f4:49:47:08:fe:50:36:b5:83:f3:d8:8b:94: cd:19:79:cf:5b:76:19:36:9d:19:d8:04:70:d1:14:d8:90:cd: 9c:e0:60:c6:a7:aa:d7:df:b8:df:21:c5:82:dd:fc:67:ff:ad: 30:78:ae:aa:43:36:73:3f:df:6d:98:83:02:c3:62:1c:a7:d9: 33:3f:90:cc:d5:c6:c0:49:05:d6:e8:bb:9a:d0:fb:ee:e4:c8: 0e:6a:21:be:24:40:44:42:0a:b2:f4:29:be:e3:f0:00:6b:bb: 97:3d:c3:7f:7d:c3:8e:85:56:16:12:c8:1b:4a:e6:57:85:f5: 9b:68:53:97:af:4c:29:55:02:56:47:af:3f:99:93:77:4a:26: d1:7c:d2:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjYwNzIzMDUwNzAwWhcNMjYwNzMwMDUwNzAwWjAYMRYwFAYD VQQDEw02YTYxYTE3NS03ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXC9P5wKtemE0x5CeznYXje2KDyKZ7AGftPt//MFiZE55OPuTyUu8XkmDA3C 1JdtVAj5gJ1jc+UT/DTTpWf4tf8IIQe8TK3t6XGRB+AAKamXN+2Ksg8p6ZevSNTr XqvCWlnME6iXGC3ZzQ1tUwrHfwvv56zUH/ZyHVQb2FGoq3xYfepblh+dILlmaGmz DRblmrCiNFAe7pH6DENhCK/CG3MWfka7GKI0LdSJqDmMDGSv4Cj4mFsdYgenivNs 4hf1qFi8gdBsUbYxLDBJIzzrmY++lTteNdmWr2D8O56yPuEiJWG+JWDovLbxXoo1 a3U0FUoNGy61wbQagVR6DuCKyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkCF2Ax U8TgLtgXbRTqPM16lLRvMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZ5nbZ/fodtBACEw9QucrWi06YaiG0XWvVryEVYPyF3GCyHNyNyqcPY/Lp8b xui+X5MI0bbuwvZfeOm8XdM/tdIJmwmDYkr8hZASmFp0hO8WH80Woj3izRTYRuKR b4BRON0ojbXyNuzyaAacH2fBg2H0SUcI/lA2tYPz2IuUzRl5z1t2GTadGdgEcNEU 2JDNnOBgxqeq19+43yHFgt38Z/+tMHiuqkM2cz/fbZiDAsNiHKfZMz+QzNXGwEkF 1ui7mtD77uTIDmohviRAREIKsvQpvuPwAGu7lz3Df33DjoVWFhLIG0rmV4X1m2hT l69MKVUCVkevP5mTd0om0XzSAA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:26 2026 by rpki-client