$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: ibOfmxEBGkivaQjqje3L6VnBK+WJVpY7D7CtYB44EG0= Subject key identifier: CB:BB:58:36:82:A5:8E:D5:CB:9E:4E:E3:F4:79:FF:1D:77:BF:AF:D8 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 01A0 Signing time: Tue 21 Jul 2026 05:41:22 +0000 Manifest this update: Tue 21 Jul 2026 05:41:21 +0000 Manifest next update: Tue 28 Jul 2026 05:41:21 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: nEfn7hI6AAM0v8A8fw6n9UqnGV/N+69WA+BfZsoVgQ0=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: yK/WcBJQdA4buA3EZ+0KrWMfv9XG+NNlOPVNviCvGZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Jul 21 05:41:21 2026 GMT Not After : Jul 28 05:41:21 2026 GMT Subject: CN=6a5f0682-bac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:00:db:39:d8:55:fc:96:3a:26:7f:4a:92:25: f5:c5:9b:96:e2:34:09:d6:97:aa:8f:fc:30:e8:1d: 9c:bc:4c:e0:cd:84:6f:20:c1:0f:fc:c7:7e:e5:da: d4:38:f7:ee:89:31:1f:97:3e:b6:2b:2a:45:23:bf: 50:0a:35:62:8d:68:48:af:ee:d9:33:b3:df:4a:87: 78:7b:19:5a:b9:de:0f:da:16:86:a0:b2:5e:2c:9f: 0b:4f:3c:ed:0a:ce:1e:f3:1e:9d:b3:5d:12:69:ab: 2c:2b:59:d3:b2:8f:62:7f:e9:c7:4b:57:20:34:06: 89:8a:65:bf:96:8e:26:a6:ec:d9:37:df:1d:d0:ad: 4b:54:a8:32:f0:37:5c:39:a4:09:4f:fd:b3:71:51: 4f:7d:49:b1:45:10:d5:28:de:a6:cb:b3:15:3f:71: 23:0c:32:fb:ca:32:6f:b0:1d:f5:e2:14:8c:01:70: 63:80:fe:48:c4:3d:98:4c:f6:88:50:a0:d9:04:c2: 7e:56:40:dc:7b:c0:2a:10:e5:82:bb:ea:ad:0b:d1: 85:dd:00:d9:1d:6c:43:24:55:99:27:c8:c4:88:a4: 58:2b:ba:a4:9b:9c:16:cb:f5:2f:05:56:37:a5:70: a7:10:24:5d:62:66:58:71:91:83:3b:79:2c:47:3f: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:58:36:82:A5:8E:D5:CB:9E:4E:E3:F4:79:FF:1D:77:BF:AF:D8 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cd:dd:9a:ef:f7:34:ac:0b:97:c9:3b:45:9a:40:b7:49:ef: 4d:90:e1:4f:b0:30:c5:b7:f6:c6:da:95:28:fe:aa:96:78:9e: 73:26:20:0d:1e:61:60:a1:4a:f1:e8:74:4e:a9:88:56:bc:3e: fa:61:63:78:e0:dc:58:b7:ab:fb:7e:10:19:7a:e8:72:31:17: ac:7e:20:b2:ec:10:15:d8:bb:36:16:19:69:87:ad:ee:06:04: 08:a6:b9:c2:75:6b:66:4d:07:51:d8:9e:06:09:63:7a:12:eb: db:9c:44:42:ac:80:a1:8c:6f:c2:fc:67:9c:b1:94:93:3c:71: 56:61:53:ec:5a:7b:30:df:85:b9:bc:82:d4:d8:d4:f5:3b:62: 22:ef:57:f6:d5:eb:de:d9:8b:e9:4c:bc:42:10:4a:5f:a5:60: 49:89:67:3a:09:a5:1d:2c:4b:7d:98:86:55:1e:80:de:2d:83: 9d:21:ed:b7:64:57:6a:6d:18:55:fd:79:05:7b:71:a7:4b:72: 6c:2b:b4:ee:a4:ef:7f:8f:8f:c7:53:83:ef:48:0c:9d:3d:97: 67:1a:d6:46:07:31:e1:29:d8:00:b3:28:68:f5:26:a7:01:7b: 0a:f7:f9:ee:1b:97:6c:cf:05:65:23:44:1d:f1:c6:2d:90:6e: 24:bc:44:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjYwNzIxMDU0MTIxWhcNMjYwNzI4MDU0MTIxWjAYMRYwFAYD VQQDEw02YTVmMDY4Mi1iYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wDbOdhV/JY6Jn9KkiX1xZuW4jQJ1peqj/ww6B2cvEzgzYRvIMEP/Md+5drU OPfuiTEflz62KypFI79QCjVijWhIr+7ZM7PfSod4exlaud4P2haGoLJeLJ8LTzzt Cs4e8x6ds10SaassK1nTso9if+nHS1cgNAaJimW/lo4mpuzZN98d0K1LVKgy8Ddc OaQJT/2zcVFPfUmxRRDVKN6my7MVP3EjDDL7yjJvsB314hSMAXBjgP5IxD2YTPaI UKDZBMJ+VkDce8AqEOWCu+qtC9GF3QDZHWxDJFWZJ8jEiKRYK7qkm5wWy/UvBVY3 pXCnECRdYmZYcZGDO3ksRz+owwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMu7WDaC pY7Vy55O4/R5/x13v6/YMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA83dmu/3NKwLl8k7RZpAt0nvTZDhT7Awxbf2xtqVKP6qlniecyYgDR5hYKFK 8eh0TqmIVrw++mFjeODcWLer+34QGXrocjEXrH4gsuwQFdi7NhYZaYet7gYECKa5 wnVrZk0HUdieBgljehLr25xEQqyAoYxvwvxnnLGUkzxxVmFT7Fp7MN+FubyC1NjU 9TtiIu9X9tXr3tmL6Uy8QhBKX6VgSYlnOgmlHSxLfZiGVR6A3i2DnSHtt2RXam0Y Vf15BXtxp0tybCu07qTvf4+Px1OD70gMnT2XZxrWRgcx4SnYALMoaPUmpwF7Cvf5 7huXbM8FZSNEHfHGLZBuJLxE0Q== -----END CERTIFICATE-----Generated at Tue Jul 21 19:51:46 2026 by rpki-client