$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json) Hash identifier: QfJmfP6uieQF7/EsQEuHHkoA2hi2FuZ2NTVPVYScXmg= Subject key identifier: 7E:98:5C:AF:07:9E:D0:68:5E:E5:D5:E5:DB:85:27:20:34:4E:C3:5C Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft Manifest number: C7 Signing time: Sun 05 Jul 2026 07:34:02 +0000 Manifest this update: Sun 05 Jul 2026 07:34:01 +0000 Manifest next update: Sun 12 Jul 2026 07:34:01 +0000 Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: 5BMca8rvCybMWnYt1lp9ONiOE7WAT7HNYUIGz1mv/QI=) 2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: 33GM4Ev+qxmSxYN6+COOoVbBWpx3q5s4t5+8sg62BMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 05:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Validity Not Before: Jul 5 07:34:01 2026 GMT Not After : Jul 12 07:34:01 2026 GMT Subject: CN=6a4a08ea-aea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:30:57:eb:48:d9:5c:77:0f:da:ee:84:de: 68:0e:bd:df:3a:03:89:ab:e7:f4:d3:9b:4c:7d:b3: 41:a3:20:57:1c:f1:b9:39:28:fa:f5:b5:71:22:0b: a8:02:c3:94:eb:87:25:dd:ce:24:50:e9:88:4c:73: 95:b0:6d:ba:18:31:28:a2:5a:f1:30:a9:8c:d2:75: 12:e5:ca:0b:74:e6:06:46:84:3f:72:01:f0:e2:f1: 4f:0c:c4:dc:90:89:85:5f:19:89:88:6e:2a:bc:59: 69:78:bd:9c:b9:75:44:54:b6:e4:eb:95:25:8a:fe: da:a1:75:a0:e9:e4:46:b2:a3:28:4a:fe:84:aa:94: 4b:21:82:96:ca:d4:21:c9:a6:54:b6:7d:83:40:6c: e7:b9:86:90:db:16:e1:bc:55:f4:27:47:43:94:6f: ed:0b:9b:fb:86:16:66:51:f0:58:8c:aa:20:fe:8d: e7:e4:f6:87:a3:28:7b:4f:49:a1:0b:21:b9:5a:dd: b5:64:7e:d7:c9:94:b2:3a:70:a5:d4:97:8e:ab:d1: 88:a7:22:ec:97:89:61:e9:20:87:02:b8:2e:47:39: 64:17:8b:b7:b7:08:b2:16:ba:6a:76:23:a4:3a:0e: 12:e8:84:0c:fd:c0:48:cb:db:93:5c:99:f9:d4:d2: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:98:5C:AF:07:9E:D0:68:5E:E5:D5:E5:DB:85:27:20:34:4E:C3:5C X509v3 Authority Key Identifier: keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:98:0c:07:c6:72:a3:b5:1e:d9:ca:05:e6:0e:70:15:4f:95: 38:e5:06:b3:c7:02:48:a4:6a:e8:f5:06:86:4a:4b:30:43:93: d4:e4:ec:19:fc:42:7d:e2:48:ca:a0:fa:27:6a:93:7a:7f:05: 7b:9e:d4:7e:30:f3:58:fa:6a:7e:e8:f7:e1:86:e6:3a:e9:ff: c7:be:13:12:7e:b9:00:2b:c6:70:9d:b8:3a:0b:55:54:e6:be: 25:e1:fa:59:77:a4:9f:f3:6e:c0:73:f0:07:e5:85:a8:d8:c3: 62:14:1e:cf:fd:10:06:bf:46:ee:29:36:26:c1:be:6a:37:c1: 8a:92:60:04:b2:15:04:9f:80:9b:11:31:0f:8d:9b:94:21:e8: 34:ce:f0:bc:c0:bb:10:e1:69:9a:e9:dd:ba:93:62:8c:06:7c: a0:74:58:f6:02:9c:27:4c:92:94:11:03:df:18:73:88:76:83: 6e:01:7b:c4:20:ee:ca:a8:b0:0f:04:19:00:c7:8c:bf:13:e8: 35:e7:e2:7b:db:2f:17:93:c2:2c:c3:ba:1d:97:93:55:50:9e: 11:04:2f:04:30:9c:98:84:d2:b4:9a:42:c6:76:18:2b:dc:90: a3:f0:f7:11:f5:5b:26:2c:85:9a:c9:ed:bb:00:6c:c2:24:43: 14:0c:96:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE1NkQxMTAvBgNVBAUTKDQ5REREMUU0QzVBOUZDNzY2NjI2RDJGQTNCNjYzN0RB ODBFQTJGRDIwHhcNMjYwNzA1MDczNDAxWhcNMjYwNzEyMDczNDAxWjAYMRYwFAYD VQQDEw02YTRhMDhlYS1hZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d4wV+tI2Vx3D9ruhN5oDr3fOgOJq+f005tMfbNBoyBXHPG5OSj69bVxIguo AsOU64cl3c4kUOmITHOVsG26GDEoolrxMKmM0nUS5coLdOYGRoQ/cgHw4vFPDMTc kImFXxmJiG4qvFlpeL2cuXVEVLbk65Uliv7aoXWg6eRGsqMoSv6EqpRLIYKWytQh yaZUtn2DQGznuYaQ2xbhvFX0J0dDlG/tC5v7hhZmUfBYjKog/o3n5PaHoyh7T0mh CyG5Wt21ZH7XyZSyOnCl1JeOq9GIpyLsl4lh6SCHArguRzlkF4u3twiyFrpqdiOk Og4S6IQM/cBIy9uTXJn51NLd3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6YXK8H ntBoXuXV5duFJyA0TsNcMB8GA1UdIwQYMBaAFEnd0eTFqfx2ZibS+jtmN9qA6i/S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTU2RC83Q0QzREVBQzRF ODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9IWm1KdEw2TzJZMzJvRHFM OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkM1I1TVdwX0habUp0TDZPMlkzMm9EcUw5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTU2RC83Q0QzREVBQzRFODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9I Wm1KdEw2TzJZMzJvRHFMOUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZgMB8Zyo7Ue2coF5g5wFU+VOOUGs8cCSKRq6PUGhkpLMEOT1OTsGfxCfeJI yqD6J2qTen8Fe57UfjDzWPpqfuj34YbmOun/x74TEn65ACvGcJ24OgtVVOa+JeH6 WXekn/NuwHPwB+WFqNjDYhQez/0QBr9G7ik2JsG+ajfBipJgBLIVBJ+AmxExD42b lCHoNM7wvMC7EOFpmundupNijAZ8oHRY9gKcJ0ySlBED3xhziHaDbgF7xCDuyqiw DwQZAMeMvxPoNefie9svF5PCLMO6HZeTVVCeEQQvBDCcmITStJpCxnYYK9yQo/D3 EfVbJiyFmsntuwBswiRDFAyWGA== -----END CERTIFICATE-----Generated at Sun Jul 5 08:37:18 2026 by rpki-client