$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json) Hash identifier: LYcQPsNELroGk4JWS8nadRULxk+epiP6Qe+kmtcbJF8= Subject key identifier: B7:30:28:49:A1:E4:9A:84:B9:00:BE:0B:FF:85:4A:E4:56:08:D1:D7 Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2C88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft Manifest number: 2C21 Signing time: Mon 14 Sep 2026 15:31:19 +0000 Manifest this update: Mon 14 Sep 2026 15:31:18 +0000 Manifest next update: Mon 21 Sep 2026 15:31:18 +0000 Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: SMnGMZYKbCDfez01SuVzVRD+3jrw53mibYpQjREgxXE=) 2: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: W75lhz8qeJnkZlqY0a8HErBGtduWKn0r2gMd7akKn1I=) 3: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: b4dUJUsflstBmfkTo+6WB27BRTM43w5uV9OUP+GZroI=) 4: E8573BE8F1C111F098487417396F56BC.roa (hash: DXYFlPFZJbTgCXiYCSA164GI8iIK5udt+JzmMbupbPs=) 5: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: ZRgcko4mZDU94zW1mE2zsmeg1CEm3cVuoBFvJp8bDbw=) 6: 67651980457511F1A878DB0BB4833773.roa (hash: CbnlijH2x4Ft1TEKptp1p5G8ICI1ZcbvpB+WwaI4aoo=) 7: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: lm86AbCRcdzPDBKNa+uwq/jScnKUTOerK/ZRzjBHp4k=) 8: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: O1KjNFYquoWK1QcR2byS/JmrbBhF5FfSwYJTB0+MwzI=) 9: 994EDA7E477011F19156235992833773.roa (hash: 1hC10MLLED1ieGexLaVRyCq07RG6S3oek0GO+3joQEk=) 10: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: yhb7QiTNwaWZ43QEtEdSQmUgbkqueVHBiH7mFyaEGz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11400 (0x2c88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Sep 14 15:31:18 2026 GMT Not After : Sep 21 15:31:18 2026 GMT Subject: CN=6aa81347-804a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:f8:8f:66:bd:7b:a7:2b:4c:15:d9:05:22: f0:8b:c2:eb:96:e4:75:1c:c0:52:5a:db:5e:54:ba: 7d:e0:50:d5:9b:21:37:f3:21:b9:06:8b:66:db:ff: c1:6b:8d:b7:02:35:ef:76:43:90:54:f7:65:f8:67: 0a:de:5a:6a:17:f8:0c:85:3d:c1:32:12:e0:fb:2f: 9f:cd:d9:44:43:3e:df:91:8d:44:eb:41:26:65:26: 45:94:58:02:e4:7f:37:39:83:6d:21:04:fe:5c:4e: 86:ae:71:a0:a3:d7:b3:b5:3c:33:89:7e:5d:72:d3: 54:34:46:98:81:63:1f:59:20:2d:20:e3:4a:ab:f6: b4:ff:cb:86:30:b9:0b:c6:7b:a0:86:22:7d:59:76: 7b:d4:4b:89:2a:b5:ad:30:41:bb:d8:58:c6:19:49: 57:9a:7a:e6:99:7b:18:a5:0e:cc:dc:b8:f8:a6:de: 49:94:ad:5d:f6:4c:7b:48:2e:d3:ab:31:dd:4f:29: 35:18:4f:c8:03:66:91:d5:9c:a8:81:03:14:f5:7f: ce:41:9f:20:c6:56:f1:09:a5:19:3c:a1:50:c7:db: 70:ef:e9:58:1f:f3:3c:d1:90:0e:bd:e0:a2:39:0e: 2c:e0:f5:40:c2:01:ae:0e:d9:32:d2:16:62:39:79: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:28:49:A1:E4:9A:84:B9:00:BE:0B:FF:85:4A:E4:56:08:D1:D7 X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c5:c1:aa:8d:76:c5:e7:fa:ad:69:f7:16:c6:94:56:59:2b: 2f:68:c6:9e:b5:bd:f9:2b:bb:1d:49:e1:fa:ff:74:04:dc:c5: a3:6f:c8:73:aa:2a:a6:24:95:16:45:02:d0:5e:01:d8:66:10: 12:50:ef:df:31:66:7a:fb:1f:5d:9e:fa:c4:bb:b2:fa:8a:53: 0f:ef:18:91:d0:45:32:55:1f:aa:d9:27:a4:4f:63:e1:d9:bc: 9d:cb:68:ca:a8:cd:cf:3e:9d:8a:90:d7:2e:b3:e4:38:7e:9f: b9:9e:35:d9:38:e0:79:6d:43:ed:d0:a6:c7:0e:82:fb:0d:29: 6d:39:73:d2:75:5c:bd:1d:3c:55:1b:35:7b:9e:8a:37:77:ad: 46:33:01:90:95:87:67:96:61:8b:f9:8e:40:92:12:65:59:37: e1:67:5a:3a:fd:16:14:25:db:93:cf:0e:ca:14:c6:52:6d:34: 07:cf:29:43:c4:ff:8a:88:d0:2c:db:a3:6b:e1:a5:f6:7e:cf: 83:79:9d:6f:43:1e:50:8e:f6:71:b9:83:4d:61:47:cd:69:2a: ef:cf:af:b2:55:f5:72:fb:1e:45:de:49:a5:b9:e3:84:86:28: f9:c4:3b:f9:db:d2:ca:d7:05:b1:d7:e6:ba:35:00:a2:02:0f: 21:df:d0:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjYwOTE0MTUzMTE4WhcNMjYwOTIxMTUzMTE4WjAYMRYwFAYD VQQDEw02YWE4MTM0Ny04MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlj4j2a9e6crTBXZBSLwi8LrluR1HMBSWtteVLp94FDVmyE38yG5Botm2//B a423AjXvdkOQVPdl+GcK3lpqF/gMhT3BMhLg+y+fzdlEQz7fkY1E60EmZSZFlFgC 5H83OYNtIQT+XE6GrnGgo9eztTwziX5dctNUNEaYgWMfWSAtIONKq/a0/8uGMLkL xnughiJ9WXZ71EuJKrWtMEG72FjGGUlXmnrmmXsYpQ7M3Lj4pt5JlK1d9kx7SC7T qzHdTyk1GE/IA2aR1ZyogQMU9X/OQZ8gxlbxCaUZPKFQx9tw7+lYH/M80ZAOveCi OQ4s4PVAwgGuDtky0hZiOXmGKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcwKEmh 5JqEuQC+C/+FSuRWCNHXMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ M09XUTk4U0pCM2xoLUNxVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicXBqo12xef6rWn3FsaUVlkrL2jGnrW9+Su7HUnh+v90BNzFo2/Ic6oqpiSV FkUC0F4B2GYQElDv3zFmevsfXZ76xLuy+opTD+8YkdBFMlUfqtknpE9j4dm8ncto yqjNzz6dipDXLrPkOH6fuZ412TjgeW1D7dCmxw6C+w0pbTlz0nVcvR08VRs1e56K N3etRjMBkJWHZ5Zhi/mOQJISZVk34WdaOv0WFCXbk88OyhTGUm00B88pQ8T/iojQ LNuja+Gl9n7Pg3mdb0MeUI72cbmDTWFHzWkq78+vslX1cvseRd5JpbnjhIYo+cQ7 +dvSytcFsdfmujUAogIPId/Q8g== -----END CERTIFICATE-----Generated at Wed Sep 16 11:51:24 2026 by rpki-client