$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft File: 7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft (raw, json) Hash identifier: /lyeT+Tk3LI95jPnuxgD14+nr7UU59kfVjgvNLnDR0Q= Subject key identifier: 53:E0:90:9D:20:0C:00:0C:41:E6:BB:63:F9:90:E4:E0:E6:57:54:01 Authority key identifier: EF:E2:2D:CB:07:DD:5E:F3:CD:80:25:FA:B3:F5:58:A6:7C:18:08:54 Certificate issuer: /CN=A916B5CE/serialNumber=EFE22DCB07DD5EF3CD8025FAB3F558A67C180854 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft Manifest number: 1A Signing time: Wed 21 Oct 2026 09:38:04 +0000 Manifest this update: Wed 21 Oct 2026 09:38:04 +0000 Manifest next update: Wed 28 Oct 2026 09:38:04 +0000 Files and hashes: 1: 7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl (hash: Yja2nt4azMFtyisDag+jNR3c8gXge6VVdBxIdbvUqM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B5CE, serialNumber=EFE22DCB07DD5EF3CD8025FAB3F558A67C180854 Validity Not Before: Oct 21 09:38:04 2026 GMT Not After : Oct 28 09:38:04 2026 GMT Subject: CN=6ad887fc-0bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7f:56:6a:1a:86:f5:9d:c6:23:a6:c8:8e:79: a1:51:b0:7a:9f:63:63:20:3e:a1:c3:16:ed:9c:30: 7c:fa:f6:7f:94:62:c8:1a:31:5d:77:4d:18:96:1c: b5:75:c0:c0:67:37:6e:1e:9f:28:c1:14:13:50:56: b1:6f:81:56:29:6a:e5:a3:11:9d:7e:3b:8a:27:1d: 08:45:c6:87:6a:14:9d:c9:5d:59:14:d3:12:b4:bc: b2:4d:c4:b3:f7:6c:15:3a:cb:32:09:cc:40:b5:af: c6:44:1d:4f:b3:d3:7a:cb:98:c7:18:6c:a2:c0:41: e1:44:91:88:95:40:02:c3:dc:d6:e6:8b:0a:ca:27: 31:dd:01:3c:b5:8d:5e:7a:8c:e2:5d:24:70:0c:a7: be:64:86:70:35:1d:e7:a0:07:cc:41:af:0e:d7:06: 1c:13:4a:a7:2d:51:8e:db:5d:11:e2:1a:c7:14:26: a7:37:11:24:42:19:e9:c9:52:51:0d:ac:d9:3f:dd: e9:6e:ff:5c:27:82:3f:fb:df:73:5e:d1:fd:85:de: 31:41:2a:8a:06:98:1c:c3:ee:68:de:fb:0b:33:ff: 5e:04:57:75:18:af:ac:5d:d6:27:5f:c8:9c:fd:95: 10:8b:8c:84:6c:d8:c1:68:49:4f:c9:dc:51:9d:56: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E0:90:9D:20:0C:00:0C:41:E6:BB:63:F9:90:E4:E0:E6:57:54:01 X509v3 Authority Key Identifier: keyid:EF:E2:2D:CB:07:DD:5E:F3:CD:80:25:FA:B3:F5:58:A6:7C:18:08:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7-ItywfdXvPNgCX6s_VYpnwYCFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B5CE/5A24840CAB4311F183533DDD7011F970/7-ItywfdXvPNgCX6s_VYpnwYCFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:dc:2e:5d:e8:3b:d3:6a:38:a0:df:7e:2a:d5:e1:cb:29:4f: fb:3b:f0:53:82:43:7d:88:7e:28:bf:d0:cf:f6:1d:cf:4e:89: 1d:28:c0:39:62:24:f9:0e:dd:02:bb:f1:66:d4:b2:72:6b:f7: 0a:df:18:8d:30:17:a4:64:1a:09:c3:80:c2:a6:2d:62:3f:f0: f1:1b:80:c6:cd:dd:bf:e7:43:a6:cf:a9:7e:b5:59:1a:cb:f7: af:68:4c:54:3a:72:cf:8e:30:f1:9f:e1:42:37:45:e1:68:84: 65:0b:a5:ff:10:3f:c8:f4:53:d4:8d:bc:a7:d2:91:c4:9e:e7: 60:1e:9c:cb:73:1d:03:2d:af:1e:33:59:02:75:fc:18:c4:a1: 13:54:d6:f3:25:0a:0f:b4:70:17:e3:40:ab:65:3c:fe:04:e6: b4:5d:2e:9b:9d:e9:bf:c4:04:d4:bb:52:b0:7f:49:f7:dc:7a: 37:72:e0:ac:c1:fc:99:df:1f:7a:df:ec:c1:cd:38:be:85:41: ba:79:2a:b9:1f:97:b0:c3:81:01:67:17:cd:bb:70:94:da:7e: 92:c2:21:3d:b6:b1:80:f6:dc:bc:12:14:51:9f:6f:47:5b:6a: ee:4b:e1:0e:eb:10:37:12:e8:d1:98:7e:09:34:f5:5c:2f:8e: 40:c7:34:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjVDRTExMC8GA1UEBRMoRUZFMjJEQ0IwN0RENUVGM0NEODAyNUZBQjNGNTU4QTY3 QzE4MDg1NDAeFw0yNjEwMjEwOTM4MDRaFw0yNjEwMjgwOTM4MDRaMBgxFjAUBgNV BAMTDTZhZDg4N2ZjLTBiYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTf1ZqGob1ncYjpsiOeaFRsHqfY2MgPqHDFu2cMHz69n+UYsgaMV13TRiWHLV1 wMBnN24enyjBFBNQVrFvgVYpauWjEZ1+O4onHQhFxodqFJ3JXVkU0xK0vLJNxLP3 bBU6yzIJzEC1r8ZEHU+z03rLmMcYbKLAQeFEkYiVQALD3NbmiwrKJzHdATy1jV56 jOJdJHAMp75khnA1HeegB8xBrw7XBhwTSqctUY7bXRHiGscUJqc3ESRCGenJUlEN rNk/3elu/1wngj/733Ne0f2F3jFBKooGmBzD7mje+wsz/14EV3UYr6xd1idfyJz9 lRCLjIRs2MFoSU/J3FGdVv65AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU+CQnSAM AAxB5rtj+ZDk4OZXVAEwHwYDVR0jBBgwFoAU7+ItywfdXvPNgCX6s/VYpnwYCFQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNUNFLzVBMjQ4NDBDQUI0 MzExRjE4MzUzM0RERDcwMTFGOTcwLzctSXR5d2ZkWHZQTmdDWDZzX1ZZcG53WUNG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNy1JdHl3ZmRYdlBOZ0NYNnNfVllwbndZQ0ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NUNFLzVBMjQ4NDBDQUI0MzExRjE4MzUzM0RERDcwMTFGOTcwLzctSXR5d2ZkWHZQ TmdDWDZzX1ZZcG53WUNGUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAB3C5d6DvTajig334q1eHLKU/7O/BTgkN9iH4ov9DP9h3PTokdKMA5YiT5Dt0C u/Fm1LJya/cK3xiNMBekZBoJw4DCpi1iP/DxG4DGzd2/50Omz6l+tVkay/evaExU OnLPjjDxn+FCN0XhaIRlC6X/ED/I9FPUjbyn0pHEnudgHpzLcx0DLa8eM1kCdfwY xKETVNbzJQoPtHAX40CrZTz+BOa0XS6bnem/xATUu1Kwf0n33Ho3cuCswfyZ3x96 3+zBzTi+hUG6eSq5H5eww4EBZxfNu3CU2n6SwiE9trGA9ty8EhRRn29HW2ruS+EO 6xA3EujRmH4JNPVcL45AxzRz -----END CERTIFICATE-----Generated at Wed Oct 21 20:14:53 2026 by rpki-client