$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: H5MQsmh6hPygsuY89ch58FnztQAVKwrs8tjm5TomJvk= Subject key identifier: 42:70:52:A5:C5:AE:9A:E5:90:93:CC:B1:F6:6E:BF:89:E0:44:C0:19 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 0957 Signing time: Sat 04 Jul 2026 20:16:49 +0000 Manifest this update: Sat 04 Jul 2026 20:16:49 +0000 Manifest next update: Sat 11 Jul 2026 20:16:49 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: +IOZAfQOzvZhbUB28PfSaMWIOKWlc6RG6l82qq77iLQ=) 2: 2636893049C611F1A0494403A4833773.roa (hash: LbI/zXwrZvEy2m8RCRFUKgZJykGAWt1/GiJpmBz1/G0=) 3: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 20:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Jul 4 20:16:49 2026 GMT Not After : Jul 11 20:16:49 2026 GMT Subject: CN=6a496a31-0c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:9b:cb:82:84:da:b2:b5:28:d2:9e:56:8a: 7c:52:df:c2:2a:f7:d5:ab:c0:33:d5:23:a4:86:af: 0f:5b:fa:37:a6:29:54:c9:e8:5b:9b:07:fb:78:9b: 1d:a0:2b:a8:fd:dd:bf:ea:d0:b6:f5:b7:ba:43:a6: af:1b:78:c4:79:20:29:79:22:3f:49:b9:6e:0a:8b: a2:9f:4e:55:52:29:cf:97:73:0d:a1:36:19:61:08: ad:65:9d:26:e5:f9:57:dd:1a:0d:ab:79:51:bf:b9: 2b:49:c8:89:cb:25:59:0b:f8:64:47:f9:cc:84:e1: 39:06:87:df:40:86:c2:a4:d5:20:9d:01:26:0c:96: 7b:49:94:22:ec:ea:d4:57:89:0c:85:59:72:13:b7: 86:97:90:e2:4e:50:40:34:b1:56:2f:01:7f:8d:cd: a7:bd:30:79:22:10:55:cd:64:48:a0:ac:6f:3f:91: 2f:46:c9:04:a2:e2:f0:4f:41:85:f4:a4:8a:1d:98: ed:a5:d3:b2:08:e4:8a:e0:e3:f9:86:af:c9:f1:99: e7:2a:48:a8:f6:a4:c7:c9:d9:f0:c5:ec:7d:42:c8: 58:8f:f9:62:8c:27:40:27:61:41:e3:c5:f1:ac:04: 61:ce:32:9a:f9:bb:8f:cd:e4:3a:66:36:8b:b4:e6: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:52:A5:C5:AE:9A:E5:90:93:CC:B1:F6:6E:BF:89:E0:44:C0:19 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0d:60:a3:f9:0b:31:87:8b:56:32:6c:ec:50:4e:6f:c7:4d: 24:7f:3e:21:a3:25:29:af:d9:24:fe:67:5e:6d:6d:05:c9:3c: c7:db:62:3a:4a:c4:cf:30:a9:21:8e:1c:cb:ea:42:b9:da:ae: 07:8e:48:57:d9:47:73:a4:10:16:d3:5f:15:6c:2b:3b:cd:7f: fc:b7:b3:ac:b7:73:b0:76:8b:b4:e8:9d:13:54:f5:64:67:97: ef:42:9d:25:09:99:f2:e8:21:5c:80:38:ba:e0:2d:2a:29:14: ff:60:6c:fc:8a:ae:70:8a:d0:40:33:5e:7e:d4:a5:30:00:2e: 57:31:0d:44:40:fe:aa:9a:6a:17:fb:80:cf:21:b9:34:a9:b1: 51:71:15:30:a1:e1:d9:1a:fe:3d:5e:d8:82:8d:a8:57:f9:57: f9:06:84:70:6d:2b:8e:fe:41:72:5d:51:a1:f3:a5:1c:29:2f: 9d:c4:39:05:b7:a7:f9:45:ec:43:c9:ba:e1:c7:84:e2:8d:d3: 02:85:32:2a:8e:4d:60:cf:3d:db:ea:fd:de:d5:3a:46:ae:a9: 63:e5:09:36:dc:7c:42:cf:c9:cc:27:15:1b:c7:b2:79:17:e4: a3:e6:e5:bc:ef:9e:eb:c2:5e:c6:da:61:da:08:32:cf:8c:22: 58:b1:f8:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYwNzA0MjAxNjQ5WhcNMjYwNzExMjAxNjQ5WjAYMRYwFAYD VQQDEw02YTQ5NmEzMS0wYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03eby4KE2rK1KNKeVop8Ut/CKvfVq8Az1SOkhq8PW/o3pilUyehbmwf7eJsd oCuo/d2/6tC29be6Q6avG3jEeSApeSI/SbluCouin05VUinPl3MNoTYZYQitZZ0m 5flX3RoNq3lRv7krSciJyyVZC/hkR/nMhOE5BoffQIbCpNUgnQEmDJZ7SZQi7OrU V4kMhVlyE7eGl5DiTlBANLFWLwF/jc2nvTB5IhBVzWRIoKxvP5EvRskEouLwT0GF 9KSKHZjtpdOyCOSK4OP5hq/J8ZnnKkio9qTHydnwxex9QshYj/lijCdAJ2FB48Xx rARhzjKa+buPzeQ6ZjaLtObNtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJwUqXF rprlkJPMsfZuv4ngRMAZMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANQ1go/kLMYeLVjJs7FBOb8dNJH8+IaMlKa/ZJP5nXm1tBck8x9tiOkrEzzCp IY4cy+pCudquB45IV9lHc6QQFtNfFWwrO81//LezrLdzsHaLtOidE1T1ZGeX70Kd JQmZ8ughXIA4uuAtKikU/2Bs/IqucIrQQDNeftSlMAAuVzENRED+qppqF/uAzyG5 NKmxUXEVMKHh2Rr+PV7Ygo2oV/lX+QaEcG0rjv5Bcl1RofOlHCkvncQ5Bben+UXs Q8m64ceE4o3TAoUyKo5NYM892+r93tU6Rq6pY+UJNtx8Qs/JzCcVG8eyeRfko+bl vO+e68Jextph2ggyz4wiWLH4tQ== -----END CERTIFICATE-----Generated at Sun Jul 5 12:34:02 2026 by rpki-client