$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: cZQm2fBvmceKqW7nzUpRurWoxHwVARM0AqRxQR+I1Eo= Subject key identifier: 48:96:72:14:88:55:22:7F:0E:79:DC:6D:E8:6A:DD:07:EA:10:2B:F6 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 0141 Signing time: Tue 21 Jul 2026 06:55:31 +0000 Manifest this update: Tue 21 Jul 2026 06:55:31 +0000 Manifest next update: Tue 28 Jul 2026 06:55:31 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: /TgiaQPvyzBRFlLq3lyU/5XnVFnxxlFlV6gu9gtXNU8=) 2: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=) 3: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Jul 21 06:55:31 2026 GMT Not After : Jul 28 06:55:31 2026 GMT Subject: CN=6a5f17e3-e1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:89:ab:0c:0c:48:f9:d7:5c:de:c4:b1:0b:b6: b8:92:f1:98:25:93:7a:7d:af:a5:ac:5b:d8:6c:7c: 4e:8f:e6:b0:df:ac:5a:f7:a9:15:74:a9:76:b5:83: 90:4d:f4:f7:30:ee:b7:d9:8b:c9:28:86:8e:eb:80: 46:72:e4:01:54:a2:6e:85:38:eb:4b:1c:80:dc:83: db:23:37:21:6b:a2:8e:20:c7:68:97:8e:2b:82:69: fc:a4:e2:d3:06:ef:c5:d1:27:1e:1c:c2:26:a8:e0: 3d:b0:28:6c:24:ef:bf:33:7e:93:f3:52:fa:b4:a2: 95:28:b8:e0:67:59:3c:5d:c5:09:9b:c4:b5:ca:2f: 88:e0:49:f7:6b:a4:39:b4:ee:2b:ed:b8:3b:bf:e1: 3e:4f:d2:b1:2a:ae:1d:24:d6:53:91:7b:13:74:dd: 11:b9:20:3f:57:4d:b6:7b:95:14:f6:05:b6:ef:fd: 92:29:79:d5:7a:21:34:33:15:3c:81:78:57:08:49: 31:ae:85:1d:e2:bf:70:df:83:a3:99:a5:39:95:8f: b9:45:36:62:24:cd:77:fe:22:22:ee:d2:e0:42:a1: af:b9:97:7f:ce:b1:49:01:da:a9:e0:4e:18:65:0c: 46:89:51:fe:e4:96:5a:c5:03:5d:9e:94:29:7f:11: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:96:72:14:88:55:22:7F:0E:79:DC:6D:E8:6A:DD:07:EA:10:2B:F6 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1a:f8:19:95:65:f8:f3:4b:b8:47:19:c4:2f:15:20:88:bb: 76:2a:48:ef:1c:fd:dd:b9:40:75:7a:d0:ca:32:02:68:86:49: 3f:6b:49:3e:30:1e:46:07:d7:a8:8e:38:a3:3c:e0:27:2d:0d: 9c:de:e6:28:94:3a:11:17:01:e7:fa:da:fe:84:de:17:61:f2: d9:f1:1e:8c:a3:d4:c6:bc:21:f2:d6:5b:cc:43:6e:b1:a3:76: 86:1c:a4:4f:a2:1d:4b:f9:fa:6a:ce:6c:e8:a5:0f:df:2c:81: 99:04:63:e4:b1:eb:8c:c1:61:f1:1d:c8:d9:b8:4f:8b:fb:16: 5a:15:ef:94:da:d9:50:7f:08:c7:4d:9e:6d:bf:6e:71:18:a7: 36:4e:c6:a5:3f:2d:40:ee:c9:bf:b5:97:27:f7:af:67:66:61: 48:e5:a3:c4:33:16:c3:08:01:25:20:72:13:94:e5:68:8a:ae: b9:8a:82:90:44:6a:be:97:78:0d:54:62:32:bc:32:ca:ab:15: 79:d0:7e:eb:86:16:d7:5d:b2:b0:94:62:34:a7:d2:01:91:a3: 28:72:cf:f5:d7:a6:d9:bf:eb:60:f7:f5:0f:e6:4a:8d:4a:70: 4a:32:0e:f7:2f:b8:65:5f:99:95:e8:6c:5c:3c:b4:85:83:c1: d5:0e:55:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjYwNzIxMDY1NTMxWhcNMjYwNzI4MDY1NTMxWjAYMRYwFAYD VQQDEw02YTVmMTdlMy1lMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ImrDAxI+ddc3sSxC7a4kvGYJZN6fa+lrFvYbHxOj+aw36xa96kVdKl2tYOQ TfT3MO632YvJKIaO64BGcuQBVKJuhTjrSxyA3IPbIzcha6KOIMdol44rgmn8pOLT Bu/F0SceHMImqOA9sChsJO+/M36T81L6tKKVKLjgZ1k8XcUJm8S1yi+I4En3a6Q5 tO4r7bg7v+E+T9KxKq4dJNZTkXsTdN0RuSA/V022e5UU9gW27/2SKXnVeiE0MxU8 gXhXCEkxroUd4r9w34OjmaU5lY+5RTZiJM13/iIi7tLgQqGvuZd/zrFJAdqp4E4Y ZQxGiVH+5JZaxQNdnpQpfxH6SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiWchSI VSJ/Dnncbehq3QfqECv2MB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRr4GZVl+PNLuEcZxC8VIIi7dipI7xz93blAdXrQyjICaIZJP2tJPjAeRgfX qI44ozzgJy0NnN7mKJQ6ERcB5/ra/oTeF2Hy2fEejKPUxrwh8tZbzENusaN2hhyk T6IdS/n6as5s6KUP3yyBmQRj5LHrjMFh8R3I2bhPi/sWWhXvlNrZUH8Ix02ebb9u cRinNk7GpT8tQO7Jv7WXJ/evZ2ZhSOWjxDMWwwgBJSByE5TlaIquuYqCkERqvpd4 DVRiMrwyyqsVedB+64YW112ysJRiNKfSAZGjKHLP9dem2b/rYPf1D+ZKjUpwSjIO 9y+4ZV+ZlehsXDy0hYPB1Q5VTw== -----END CERTIFICATE-----Generated at Tue Jul 21 12:15:31 2026 by rpki-client