$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft File: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json) Hash identifier: m3fB1wzs9nH6FSdjKHR/E5/lx+eMW159z5dlwbpJvHI= Subject key identifier: C0:DF:1A:65:84:40:35:B5:40:51:08:B6:87:0C:87:7E:A2:05:CD:81 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft Manifest number: 072F Signing time: Tue 20 Oct 2026 22:48:45 +0000 Manifest this update: Tue 20 Oct 2026 22:48:44 +0000 Manifest next update: Tue 27 Oct 2026 22:48:44 +0000 Files and hashes: 1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: qY/FY2YeejtfXwBhtkcKgYTn7XAZQMSwkBNq7KLOH7I=) 2: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: TMi3DEi4p94q9eD5rNrE3oVO21rOBf7EJWgmQPqDZ/Y=) 3: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: jtEmsTx/yQYiBqJ/0XtsYPWXlwZ12DJu3gnr8y6NkJI=) 4: DAF6E1269D6311F185B42B275911F970.roa (hash: Q+t9QHgHTORJNMlhnHJ+AO6F+75fwbTJvsyktZGR258=) 5: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: /usv36aO9UEDUsl2Fumnq7URzkMR6QOacdfmDA/70r0=) 6: 8F8087960EC111F1B64CAA7C3D3D8C67.roa (hash: XyVr8eY9z4x4SYh0v55as7d0qZzcFXEN07/jpvK3LQs=) 7: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: AvtHBMkNlG+ZQMWTqEPQZX5by67B2wmix6QMt0ZBOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 22:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Oct 20 22:48:44 2026 GMT Not After : Oct 27 22:48:44 2026 GMT Subject: CN=6ad7efcd-0d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:13:9c:32:a1:8f:8c:49:2a:95:0e:e8:d6: a0:dd:41:68:b6:8d:e8:fe:a2:14:6e:62:6a:0d:68: 58:64:70:8f:85:a9:22:cd:c3:18:bb:2d:e7:e7:bb: e5:19:f2:68:61:76:0f:3a:cb:b8:ff:17:84:46:44: 60:0b:c0:fd:90:6d:ae:aa:bb:61:e6:f9:f1:7e:1a: 5d:3a:eb:2d:eb:d5:03:9b:ce:6e:d7:e1:b8:6f:6c: b0:f1:7a:b1:de:ca:b5:bb:c3:c0:12:51:fa:ec:8a: 8c:39:48:5b:59:10:31:36:4d:9b:a1:c3:9d:5b:1a: 96:24:32:8d:9d:1f:31:72:3d:d3:d5:e1:4c:76:cf: d7:d7:4c:8c:19:07:93:34:65:ce:39:f9:c8:e7:5d: 20:19:f9:67:90:3e:a7:9a:d2:ab:e3:35:be:c4:0a: 9a:1c:06:c1:c8:28:33:6d:4e:94:d0:1d:a8:82:d8: b6:8c:9d:eb:b4:e0:1c:40:58:00:cf:6a:80:3e:7f: e3:56:44:42:ce:2b:48:59:3a:f5:5e:e6:b9:1b:45: 3e:56:4e:16:c8:e1:8c:38:b3:14:39:2b:31:4d:79: 6c:bd:c9:bc:ec:00:d7:3f:7e:97:86:5e:27:cd:df: 4a:60:bd:e6:96:dc:af:0c:6a:57:13:3a:e8:f8:cd: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DF:1A:65:84:40:35:B5:40:51:08:B6:87:0C:87:7E:A2:05:CD:81 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:85:9e:07:f9:33:d0:45:98:7b:a1:c5:cc:ab:eb:4e:c3:6a: a3:ec:41:ae:f3:fd:be:31:a2:78:85:be:2b:5d:f2:dd:78:9c: 62:fe:b3:0f:27:e3:5a:9d:8d:3a:5f:17:0f:d0:0f:c2:1e:a0: 97:f7:a0:0c:61:2c:df:66:5e:c7:25:e4:82:67:64:dd:5f:07: 28:bb:5a:d6:8a:5d:ba:45:ae:ab:43:4b:ef:1d:60:c6:93:3a: 47:8e:ac:95:48:8b:91:a1:58:28:1f:80:e6:b0:2f:9f:7d:67: 99:b6:d1:b6:fb:6c:91:75:41:c4:72:9a:a4:80:75:41:c7:ff: 8a:47:f6:21:38:a4:5b:d3:69:b2:23:92:bd:17:62:15:f0:55: 2d:74:0e:96:77:2c:ee:be:05:a0:41:02:1b:ca:8f:f2:c5:49: 6c:ca:f5:c1:1d:a7:32:b9:ae:9e:54:c0:1d:1d:32:ad:ac:db: d1:27:92:25:71:e0:df:5a:29:e6:1d:1d:70:7b:d2:57:48:4b: 49:31:65:10:3f:2d:1d:cf:a0:9c:bd:57:23:5e:10:f6:83:7d: 14:7a:9d:a5:5d:1e:1f:2d:00:ce:25:a1:2c:d1:ef:7a:cd:7c: 7d:e7:80:7e:ea:19:95:fa:99:6d:de:55:ad:6f:b2:00:8f:5c: a9:15:c6:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYxMDIwMjI0ODQ0WhcNMjYxMDI3MjI0ODQ0WjAYMRYwFAYD VQQDEw02YWQ3ZWZjZC0wZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc0TnDKhj4xJKpUO6Nag3UFoto3o/qIUbmJqDWhYZHCPhakizcMYuy3n57vl GfJoYXYPOsu4/xeERkRgC8D9kG2uqrth5vnxfhpdOust69UDm85u1+G4b2yw8Xqx 3sq1u8PAElH67IqMOUhbWRAxNk2bocOdWxqWJDKNnR8xcj3T1eFMds/X10yMGQeT NGXOOfnI510gGflnkD6nmtKr4zW+xAqaHAbByCgzbU6U0B2ogti2jJ3rtOAcQFgA z2qAPn/jVkRCzitIWTr1Xua5G0U+Vk4WyOGMOLMUOSsxTXlsvcm87ADXP36Xhl4n zd9KYL3mltyvDGpXEzro+M1BVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDfGmWE QDW1QFEItocMh36iBc2BMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi8yQ0IxRUVCQUY2NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RB Y0dvWVdET0RYMlhxUEhFQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwoWeB/kz0EWYe6HFzKvrTsNqo+xBrvP9vjGieIW+K13y3XicYv6zDyfjWp2N Ol8XD9APwh6gl/egDGEs32ZexyXkgmdk3V8HKLta1opdukWuq0NL7x1gxpM6R46s lUiLkaFYKB+A5rAvn31nmbbRtvtskXVBxHKapIB1Qcf/ikf2ITikW9NpsiOSvRdi FfBVLXQOlncs7r4FoEECG8qP8sVJbMr1wR2nMrmunlTAHR0yrazb0SeSJXHg31op 5h0dcHvSV0hLSTFlED8tHc+gnL1XI14Q9oN9FHqdpV0eHy0AziWhLNHves18feeA fuoZlfqZbd5VrW+yAI9cqRXGUA== -----END CERTIFICATE-----Generated at Thu Oct 22 11:52:43 2026 by rpki-client