$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: 4ikJUufBvoJQRGbodjZt0Zhz4TlYVLaatEoSK5Pg1/w= Subject key identifier: 2D:69:65:B4:34:6A:90:75:31:76:BA:1D:A7:4F:30:3B:73:94:C0:8E Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0E85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0E7F Signing time: Wed 22 Jul 2026 17:55:23 +0000 Manifest this update: Wed 22 Jul 2026 17:55:23 +0000 Manifest next update: Wed 29 Jul 2026 17:55:23 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: +4yhMKob6xJKzVzYIdLqqdHzl3vJEiND/dMXF6/KSLA=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Jul 22 17:55:23 2026 GMT Not After : Jul 29 17:55:23 2026 GMT Subject: CN=6a61040b-80f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:7f:b3:91:cd:18:6f:f5:48:42:2c:12:67: 3c:e8:5e:24:7a:8a:e3:ff:ac:86:73:53:8f:05:ff: 7d:ae:7e:eb:78:b5:ef:d6:ee:2c:66:72:3d:84:34: 7e:b7:a9:dd:e0:8b:77:bf:f3:1e:ca:17:59:ec:97: 0c:02:49:10:20:c0:c4:48:0a:a9:d8:e4:83:53:b3: 36:6f:e7:4b:be:58:7f:f7:95:ca:e7:c1:f9:d0:1a: 70:cb:73:14:7e:02:9b:44:5b:1f:14:e5:8e:20:0d: 17:7c:02:6e:7b:4b:69:f8:91:66:2e:19:fa:06:61: d7:24:47:b5:03:18:bf:84:e0:e4:19:9a:da:c7:e6: 12:36:4f:50:01:6b:e1:e7:10:c1:2a:65:62:72:3b: 13:8c:8f:3c:32:ee:cd:4f:89:6a:bc:1d:c3:0c:be: 58:c7:9c:ab:0c:9f:d9:f4:07:cc:d2:bc:89:e3:3d: aa:a8:3a:bd:c2:23:4a:9d:6a:8e:dd:23:c4:46:36: 0c:59:de:56:b7:1b:4d:1a:27:02:cd:64:ca:9a:49: df:50:f4:7d:61:ae:79:cb:b0:1c:21:08:ba:30:6e: 6f:a4:b7:ea:14:1c:fd:19:63:c7:af:d2:06:f3:75: ce:96:b6:69:4e:d8:06:ea:f2:92:0d:ee:f0:c8:47: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:65:B4:34:6A:90:75:31:76:BA:1D:A7:4F:30:3B:73:94:C0:8E X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:5e:f7:71:00:4b:99:b1:c5:b6:33:d2:1d:95:2b:cc:53:9b: d3:70:9a:d7:53:7a:1e:58:c0:44:17:bb:41:a1:a1:80:15:0b: 2f:a9:9a:21:e2:1d:a0:dc:a4:22:9d:a2:a8:2f:5a:f1:48:21: 2e:21:4c:ca:ef:aa:10:b1:82:08:f9:fb:3e:5c:3b:f4:af:66: a2:c2:d5:d4:f8:47:80:09:d0:c3:40:d8:14:14:3b:70:13:2d: 31:f5:b9:4f:79:f4:10:59:13:46:d6:8e:84:d9:30:e2:e2:9d: a8:22:ab:21:9d:9d:8e:a7:2b:ad:13:de:06:dc:27:21:c7:07: 60:a9:f9:19:a9:ad:ae:00:a3:33:f7:57:dc:69:42:c5:e2:c0: 2c:f5:4b:20:c5:88:45:55:0b:35:52:39:39:2b:5a:a1:b4:35: db:dd:49:9e:4c:66:dc:b0:42:18:66:73:d0:04:b7:9f:9b:ad: 13:86:76:62:c2:bb:49:60:a0:43:73:6f:f1:28:d6:d3:5a:99: b7:fe:b6:37:a4:9e:94:ff:7e:3a:09:ef:af:33:23:de:a5:cd: 04:1a:bd:d6:be:5d:ed:10:8e:19:1c:a9:50:72:0b:2d:64:63: 26:a3:6f:8f:b7:e8:d7:35:34:c4:26:f7:6b:45:cc:93:0d:1f: b1:60:f8:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjYwNzIyMTc1NTIzWhcNMjYwNzI5MTc1NTIzWjAYMRYwFAYD VQQDEw02YTYxMDQwYi04MGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhfR/s5HNGG/1SEIsEmc86F4keorj/6yGc1OPBf99rn7reLXv1u4sZnI9hDR+ t6nd4It3v/MeyhdZ7JcMAkkQIMDESAqp2OSDU7M2b+dLvlh/95XK58H50Bpwy3MU fgKbRFsfFOWOIA0XfAJue0tp+JFmLhn6BmHXJEe1Axi/hODkGZrax+YSNk9QAWvh 5xDBKmVicjsTjI88Mu7NT4lqvB3DDL5Yx5yrDJ/Z9AfM0ryJ4z2qqDq9wiNKnWqO 3SPERjYMWd5WtxtNGicCzWTKmknfUPR9Ya55y7AcIQi6MG5vpLfqFBz9GWPHr9IG 83XOlrZpTtgG6vKSDe7wyEd58wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1pZbQ0 apB1MXa6HadPMDtzlMCOMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcl73cQBLmbHFtjPSHZUrzFOb03Ca11N6HljARBe7QaGhgBULL6maIeIdoNyk Ip2iqC9a8UghLiFMyu+qELGCCPn7Plw79K9mosLV1PhHgAnQw0DYFBQ7cBMtMfW5 T3n0EFkTRtaOhNkw4uKdqCKrIZ2djqcrrRPeBtwnIccHYKn5GamtrgCjM/dX3GlC xeLALPVLIMWIRVULNVI5OStaobQ1291Jnkxm3LBCGGZz0AS3n5utE4Z2YsK7SWCg Q3Nv8SjW01qZt/62N6SelP9+OgnvrzMj3qXNBBq91r5d7RCOGRypUHILLWRjJqNv j7fo1zU0xCb3a0XMkw0fsWD4+w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:16:38 2026 by rpki-client