$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: hq8y6cXEM2c+4tD0iYLdQe8+I7nOpDZuao5bgk4N8pA= Subject key identifier: EE:47:D7:3D:CB:8A:57:F4:1D:C3:98:FD:06:EE:DB:5F:98:0C:0E:D9 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0A3F Signing time: Sun 26 Jul 2026 20:12:27 +0000 Manifest this update: Sun 26 Jul 2026 20:12:27 +0000 Manifest next update: Sun 02 Aug 2026 20:12:27 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: tLLcs3VEnzDUjLR6G3XBSOlJZ+drcPTkuOSLd0Dd+A8=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: luj1jghbJUSAlg+pJVieNyEPVcwUND8/JqGx36FNESg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Jul 26 20:12:27 2026 GMT Not After : Aug 2 20:12:27 2026 GMT Subject: CN=6a666a2b-9417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:2f:38:c8:ba:ca:cb:2d:39:4b:64:aa:ef: a7:c6:67:be:9e:89:53:8b:ee:58:ec:ab:90:11:2f: 99:cd:a7:ba:e9:2e:b0:24:03:67:d5:6c:8f:e5:0c: 56:69:01:2c:b8:45:bf:cc:b0:c4:9d:45:f6:76:b8: 9b:05:5a:b9:85:ed:34:92:2b:90:54:19:3b:e0:62: 82:57:a8:53:6d:a8:ba:4b:09:46:4e:ad:10:3e:85: 87:9c:e1:09:62:c5:70:26:a8:99:d6:dc:98:61:2d: f4:b1:a6:de:0a:b1:69:6c:33:1b:e5:5d:5c:9b:29: 30:53:4d:66:34:e8:5f:d6:6d:20:c8:7b:75:4a:a8: 23:af:0b:db:5b:cc:fe:de:3a:9c:92:23:d9:ce:19: ce:21:2c:93:ec:16:9c:81:e2:b1:bb:91:c7:b5:dd: b4:8e:8a:80:b7:39:a2:6b:65:f6:47:0f:0c:4c:18: 44:ed:36:98:97:9e:b5:bf:10:7e:07:49:33:34:3b: 62:9f:7c:47:db:95:10:cc:41:9b:d4:e5:d5:4c:3b: f4:e5:d9:31:63:44:7f:07:92:e5:b8:c6:5b:52:0a: 1d:4b:7b:d8:76:fc:89:4e:67:c7:05:63:5f:60:35: 9e:87:4b:80:21:e9:28:9d:9a:d1:9a:2f:ab:d9:90: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:47:D7:3D:CB:8A:57:F4:1D:C3:98:FD:06:EE:DB:5F:98:0C:0E:D9 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cf:3d:29:04:78:ea:52:32:29:e3:6d:9d:aa:90:29:80:95: a5:cd:4c:21:a6:6a:68:d0:13:c8:b7:ad:2f:f7:20:6b:67:39: 86:b5:4b:5b:b0:54:a1:e2:e1:e7:7d:24:0f:90:b1:ff:ed:44: ef:b5:b9:93:80:86:79:5d:98:a2:bd:28:f0:de:4d:b3:5a:77: d4:9a:d6:47:1d:44:e2:c9:dc:f7:23:ef:8e:b5:27:ee:f2:9e: 82:e0:e9:34:b3:ab:34:e9:64:8e:6d:d4:1f:6d:e6:0a:c0:68: 23:4f:5f:31:f5:2e:50:b7:57:21:8b:2b:60:6b:26:5a:72:54: 41:08:7d:07:ea:b4:dd:e0:b4:bc:aa:1c:d4:46:b2:33:b0:d5: af:64:26:0d:1d:0a:36:5b:f3:7b:e1:18:c4:46:21:f2:0b:dd: 30:3a:eb:7c:de:77:54:d4:5d:e6:da:b5:15:81:87:f4:22:ce: c1:9b:7e:3f:a1:23:4d:7f:7b:2c:fc:18:b5:22:9f:a6:f3:ee: f4:0e:71:50:8f:99:1a:e7:c1:88:a0:93:b8:f2:c5:98:71:dd: c9:99:67:6a:90:ca:44:7a:0a:e6:ff:7a:16:8d:53:d3:93:d3: c9:4d:7d:96:73:98:6a:ab:cf:8f:0f:08:ee:90:65:6b:a3:2a: e3:5b:d9:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjYwNzI2MjAxMjI3WhcNMjYwODAyMjAxMjI3WjAYMRYwFAYD VQQDEw02YTY2NmEyYi05NDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcwvOMi6ysstOUtkqu+nxme+nolTi+5Y7KuQES+Zzae66S6wJANn1WyP5QxW aQEsuEW/zLDEnUX2dribBVq5he00kiuQVBk74GKCV6hTbai6SwlGTq0QPoWHnOEJ YsVwJqiZ1tyYYS30sabeCrFpbDMb5V1cmykwU01mNOhf1m0gyHt1SqgjrwvbW8z+ 3jqckiPZzhnOISyT7BacgeKxu5HHtd20joqAtzmia2X2Rw8MTBhE7TaYl561vxB+ B0kzNDtin3xH25UQzEGb1OXVTDv05dkxY0R/B5LluMZbUgodS3vYdvyJTmfHBWNf YDWeh0uAIekonZrRmi+r2ZCYPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5H1z3L ilf0HcOY/Qbu21+YDA7ZMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHc89KQR46lIyKeNtnaqQKYCVpc1MIaZqaNATyLetL/cga2c5hrVLW7BUoeLh 530kD5Cx/+1E77W5k4CGeV2Yor0o8N5Ns1p31JrWRx1E4snc9yPvjrUn7vKeguDp NLOrNOlkjm3UH23mCsBoI09fMfUuULdXIYsrYGsmWnJUQQh9B+q03eC0vKoc1Eay M7DVr2QmDR0KNlvze+EYxEYh8gvdMDrrfN53VNRd5tq1FYGH9CLOwZt+P6EjTX97 LPwYtSKfpvPu9A5xUI+ZGufBiKCTuPLFmHHdyZlnapDKRHoK5v96Fo1T05PTyU19 lnOYaqvPjw8I7pBla6Mq41vZQw== -----END CERTIFICATE-----Generated at Tue Jul 28 03:30:40 2026 by rpki-client