$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: gvxizPGuzykzY5Ap5xxh8cFm2YftOCzg8s+lqcripug= Subject key identifier: A1:25:88:1C:08:F4:D4:F0:7E:70:17:D1:65:C1:B3:70:94:85:B5:1F Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 0685 Signing time: Mon 20 Jul 2026 23:14:16 +0000 Manifest this update: Mon 20 Jul 2026 23:14:16 +0000 Manifest next update: Mon 27 Jul 2026 23:14:16 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: knVS5qPTnpA6E6XjOwBN98Kj8XOfMsQDFtl8xsTR1fc=) 2: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: V6rPhNEgfFSYoMAOj/JkTn27sOkQ/m44MmBwpVWrZVs=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: FVns4uZR/lgSYkSVzt2crKsv9A2mS6qMtNNtsApC6uY=) 4: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: QOzAxMNPfl2xsZK2GJpgLS4yP7Am+9az4cqsUr4KXF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Validity Not Before: Jul 20 23:14:16 2026 GMT Not After : Jul 27 23:14:16 2026 GMT Subject: CN=6a5eabc8-421a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:42:d9:2a:39:58:fe:94:8b:e5:c8:03:60: 7d:ae:f5:87:e7:e7:7d:fa:d1:32:60:de:c6:f9:a5: ec:a7:8e:4b:10:7a:fe:fc:0e:0a:42:48:37:23:e0: 3a:4f:98:86:b4:66:38:cc:43:bb:31:95:e8:7b:5c: 5d:9a:08:d8:a1:30:88:a2:c5:19:76:eb:0a:fb:ed: 19:d0:af:f6:7a:47:66:0a:0d:bb:95:5d:39:0d:45: c0:c6:cb:45:74:ce:87:8d:f9:35:b3:35:63:d1:52: 3c:58:3e:2d:36:be:3d:f4:5d:2c:1a:10:b9:e0:81: 78:53:77:0e:31:7e:3c:e7:bd:37:12:a2:b1:6f:30: ae:77:93:78:e5:d4:8e:c7:0d:6f:7b:9b:c0:16:ea: c5:0a:56:65:c5:da:a9:c7:73:a4:07:84:cd:ca:21: 4b:83:b6:30:52:3e:b9:36:35:aa:82:8b:6d:4b:b8: a9:75:f9:38:16:0a:65:b3:fd:69:af:84:ec:96:2d: f8:58:3e:6f:57:84:0c:cb:db:25:e6:c4:e6:16:e5: 4f:ba:af:c8:96:fe:53:34:b3:a2:16:8c:76:a6:01: a7:7e:a4:a1:22:0b:65:5d:d1:88:99:3f:57:8e:ff: 8c:8c:a3:6c:cc:91:e7:e6:38:d8:42:c4:e6:07:cb: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:88:1C:08:F4:D4:F0:7E:70:17:D1:65:C1:B3:70:94:85:B5:1F X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:00:1e:c4:4b:50:45:3e:98:97:87:4d:06:db:5d:26:45:b6: c6:3d:b6:dd:b9:d2:13:27:17:66:7f:1c:8e:26:87:22:01:8c: a3:03:c8:02:1e:a9:ba:11:0e:41:26:a2:cc:91:f1:ac:8e:6c: 23:70:25:65:b9:c1:ed:d3:d3:92:af:d7:85:23:2f:74:32:54: fe:22:4e:fb:b0:48:1b:3f:20:f1:3b:32:00:cc:16:fd:2d:56: 05:0f:6e:fa:d5:99:fd:43:e3:6b:51:ee:06:a8:a3:c7:f7:3f: f3:89:44:8d:87:cf:21:66:14:0e:72:eb:6d:2f:a4:e9:80:1b: a4:c2:cb:d2:33:fc:20:9c:21:82:ed:9e:be:69:4a:f3:1e:8c: e4:33:7c:bd:8c:82:d6:3d:6d:27:a2:f7:9e:2b:74:88:73:d8: 14:0d:be:12:5c:99:65:1e:4d:e9:41:b2:b9:a7:5f:90:62:c3: b6:78:9b:1e:3f:13:8b:a3:51:ac:bc:6b:d9:d6:8a:ea:f9:37: 47:37:1d:dc:35:83:c0:a3:4b:cc:6a:49:1b:54:8d:a2:17:0c: 0d:11:3a:0e:3e:cb:c5:32:62:b6:fb:be:95:58:93:3a:6a:06: 04:f3:2e:fc:92:22:9b:7f:7b:c4:c7:49:6b:e1:bd:d6:1b:92: 8f:ad:6d:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjYwNzIwMjMxNDE2WhcNMjYwNzI3MjMxNDE2WjAYMRYwFAYD VQQDEw02YTVlYWJjOC00MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cJC2So5WP6Ui+XIA2B9rvWH5+d9+tEyYN7G+aXsp45LEHr+/A4KQkg3I+A6 T5iGtGY4zEO7MZXoe1xdmgjYoTCIosUZdusK++0Z0K/2ekdmCg27lV05DUXAxstF dM6Hjfk1szVj0VI8WD4tNr499F0sGhC54IF4U3cOMX485703EqKxbzCud5N45dSO xw1ve5vAFurFClZlxdqpx3OkB4TNyiFLg7YwUj65NjWqgottS7ipdfk4Fgpls/1p r4Tsli34WD5vV4QMy9sl5sTmFuVPuq/Ilv5TNLOiFox2pgGnfqShIgtlXdGImT9X jv+MjKNszJHn5jjYQsTmB8uZfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEliBwI 9NTwfnAX0WXBs3CUhbUfMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZgAexEtQRT6Yl4dNBttdJkW2xj223bnSEycXZn8cjiaHIgGMowPIAh6puhEO QSaizJHxrI5sI3AlZbnB7dPTkq/XhSMvdDJU/iJO+7BIGz8g8TsyAMwW/S1WBQ9u +tWZ/UPja1HuBqijx/c/84lEjYfPIWYUDnLrbS+k6YAbpMLL0jP8IJwhgu2evmlK 8x6M5DN8vYyC1j1tJ6L3nit0iHPYFA2+ElyZZR5N6UGyuadfkGLDtnibHj8Ti6NR rLxr2daK6vk3Rzcd3DWDwKNLzGpJG1SNohcMDRE6Dj7LxTJitvu+lViTOmoGBPMu /JIim397xMdJa+G91huSj61tIQ== -----END CERTIFICATE-----Generated at Wed Jul 22 02:02:56 2026 by rpki-client