$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: W3pLG0368qLK6fn1SHmtUutryJMiR5B4MrMHT5h32Wg= Subject key identifier: AC:E4:40:1F:27:1E:68:E9:12:76:DA:6A:B4:E4:F8:2F:CD:4B:71:95 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0CBC Signing time: Thu 20 Aug 2026 18:29:22 +0000 Manifest this update: Thu 20 Aug 2026 18:29:22 +0000 Manifest next update: Thu 27 Aug 2026 18:29:22 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: L6v9K6+YbnP7TZOQRN6um+2e7efl1HEG76YZ4iGAfrc=) 2: 627B1438281211EA881CC32DC4F9AE02.roa (hash: hEcH8ZRuZadu9VcKHGuJsHI1HxqcK9oTlGT1pOjaHQo=) 3: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: MVjgqlWP2+PxzhdlAammG4g4jdGVj5m8klqnIWeyc0E=) 4: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: pg9SsLOxgtqV7eWyJNRqBhktus5MyHYQ/fTT/Weq75Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: Aug 20 18:29:22 2026 GMT Not After : Aug 27 18:29:22 2026 GMT Subject: CN=6a874782-dd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:0a:a0:0b:d1:86:30:88:ff:03:c6:6f:89: 58:b2:78:78:e0:28:58:40:06:e7:db:0b:62:46:20: 2a:c8:f8:f1:a6:d7:32:6d:5a:6f:5f:c8:c4:3b:96: 24:a6:44:7d:6b:d5:1c:09:65:0e:1a:62:94:f2:3a: 8d:04:04:fe:92:5b:62:d4:ac:61:dc:4c:81:d7:78: 1f:00:a9:ed:45:e8:e7:4e:30:62:a9:41:d3:26:2c: 8f:08:e7:c2:5c:0f:cc:04:32:ce:ab:e7:72:a3:3c: 55:05:6e:ec:3c:38:e4:59:7f:81:9a:e1:18:3e:59: ea:d2:b7:51:6b:00:78:9e:28:9c:f1:4d:6f:47:af: a8:d7:7d:9e:97:a2:78:e0:f9:56:ea:6c:54:e4:e3: 9f:f1:ed:22:b1:89:61:d7:64:5d:e4:7d:56:98:5a: 7c:02:7f:30:98:12:a5:47:42:11:7c:1c:95:7f:39: 31:d4:4d:22:fc:79:5f:9f:29:61:ad:5c:9c:72:f1: bf:de:10:28:9c:0e:bf:1e:2c:a5:e8:5c:8a:d0:a3: ea:fa:0d:68:10:ba:e7:9e:08:24:66:a0:30:0d:aa: 20:f4:ea:68:0d:81:a1:aa:77:d9:05:46:e2:6b:2e: 94:d3:e6:b4:b6:80:f6:4c:66:ff:f3:c7:09:5a:cd: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:40:1F:27:1E:68:E9:12:76:DA:6A:B4:E4:F8:2F:CD:4B:71:95 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:03:71:e3:1c:4a:86:16:48:c6:84:4b:73:ff:01:db:07:cd: 43:9e:92:d1:69:7a:c1:a6:43:79:fe:71:cf:41:13:0e:79:90: 93:26:09:66:56:ec:58:6d:17:56:95:f3:c0:8b:33:b1:45:b7: 06:0e:c8:33:a5:17:0f:59:61:3c:5a:83:32:84:db:21:f2:5b: c7:2a:1e:5d:a8:30:2e:10:d8:f7:c5:96:49:b1:8a:4f:f5:08: d8:d6:e7:40:8d:1b:a2:41:1f:a7:ef:de:63:ae:b2:aa:e5:59: a5:81:34:c0:8a:cf:8c:f0:8e:4c:24:fc:fa:05:4f:bd:2c:0e: 8e:8e:8a:03:12:bd:2a:8f:23:18:24:72:83:41:ff:9c:12:5f: ca:15:a7:8f:16:14:7f:f1:1b:24:b6:2a:0a:96:28:e3:96:40: c4:64:aa:44:7f:ee:c2:cc:76:77:f5:aa:a2:37:fc:c7:07:27: 92:eb:a0:bb:a4:9c:a0:fc:79:a1:0a:d9:0e:06:43:43:82:c3: c1:d3:d7:8b:d9:17:55:21:10:88:ba:5e:52:d1:63:ff:02:18: eb:98:e8:18:d9:55:88:3c:ac:a3:fe:23:be:3e:3c:a9:5f:74: 58:fe:3a:24:86:4f:8d:64:d2:6e:a1:9d:81:30:23:94:45:a1: e6:8a:67:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjYwODIwMTgyOTIyWhcNMjYwODI3MTgyOTIyWjAYMRYwFAYD VQQDEw02YTg3NDc4Mi1kZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytEKoAvRhjCI/wPGb4lYsnh44ChYQAbn2wtiRiAqyPjxptcybVpvX8jEO5Yk pkR9a9UcCWUOGmKU8jqNBAT+klti1Kxh3EyB13gfAKntRejnTjBiqUHTJiyPCOfC XA/MBDLOq+dyozxVBW7sPDjkWX+BmuEYPlnq0rdRawB4niic8U1vR6+o132el6J4 4PlW6mxU5OOf8e0isYlh12Rd5H1WmFp8An8wmBKlR0IRfByVfzkx1E0i/Hlfnylh rVyccvG/3hAonA6/Hiyl6FyK0KPq+g1oELrnnggkZqAwDaog9OpoDYGhqnfZBUbi ay6U0+a0toD2TGb/88cJWs2rqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzkQB8n HmjpEnbaarTk+C/NS3GVMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJwNx4xxKhhZIxoRLc/8B2wfNQ56S0Wl6waZDef5xz0ETDnmQkyYJZlbsWG0X VpXzwIszsUW3Bg7IM6UXD1lhPFqDMoTbIfJbxyoeXagwLhDY98WWSbGKT/UI2Nbn QI0bokEfp+/eY66yquVZpYE0wIrPjPCOTCT8+gVPvSwOjo6KAxK9Ko8jGCRyg0H/ nBJfyhWnjxYUf/EbJLYqCpYo45ZAxGSqRH/uwsx2d/Wqojf8xwcnkuugu6ScoPx5 oQrZDgZDQ4LDwdPXi9kXVSEQiLpeUtFj/wIY65joGNlViDyso/4jvj48qV90WP46 JIZPjWTSbqGdgTAjlEWh5opnEA== -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:58 2026 by rpki-client