$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json) Hash identifier: LWW3qgm4qtH5yIjyONDzFKhVpD56d1Eif+Iuk1Xo4Yw= Subject key identifier: DD:0B:A3:08:D7:0B:3E:9B:1E:52:5B:E3:72:02:4A:B2:94:B0:73:DB Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft Manifest number: 8E Signing time: Fri 17 Jul 2026 08:45:11 +0000 Manifest this update: Fri 17 Jul 2026 08:45:11 +0000 Manifest next update: Fri 24 Jul 2026 08:45:11 +0000 Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: 7TNNAQKeRlfN3QBzGm3qa2MYJoMUvFy8OQU6R8V71YA=) 2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 2OKnQg5qjmkKGEleLvBDwSd2bcC+02+QaHkt9b4fvyA=) 3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: N9DbzZhWjh9222Zzdpzo8MyanGXgo1s4o7cCfBAxME8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Validity Not Before: Jul 17 08:45:11 2026 GMT Not After : Jul 24 08:45:11 2026 GMT Subject: CN=6a59eb97-2875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:3b:89:fe:7b:1c:23:34:c7:4c:20:2c:a0: 54:d1:81:1d:5f:69:59:94:03:53:b9:03:cf:e0:68: f3:b6:d2:7a:16:03:79:3e:a7:ce:9e:31:ea:37:24: ab:19:e5:d5:d9:d9:b1:23:d7:ea:0e:3e:ed:20:ac: e5:c8:91:30:c5:53:33:ba:a7:fe:e2:62:9f:4a:a4: 44:7a:24:07:79:fc:40:48:71:98:24:f2:42:04:92: 4a:72:42:d5:75:73:13:8e:c9:a0:90:63:5e:9b:8b: 11:3d:69:8f:cc:6a:60:3c:44:df:70:80:66:ee:30: 54:f6:d6:c6:30:ad:f0:85:c6:f7:da:fc:f4:73:7a: e7:0c:bc:68:3b:ff:a2:cf:5e:c2:d7:b5:e1:ac:51: 3d:3a:ff:b2:00:e0:26:45:e6:26:3f:ee:2d:85:27: 2b:76:62:52:9a:fd:ce:8d:d4:e9:f8:64:e3:96:38: a1:cc:0d:c2:49:a2:6c:61:81:61:44:e2:89:4a:af: 0f:a0:f2:f8:5f:a8:a1:a7:83:39:9d:9b:c9:6d:1d: a9:be:5c:2f:7d:9a:21:be:53:5b:d8:a2:b2:1e:bb: 01:2c:b5:1c:04:99:70:9e:ca:d7:78:96:e9:85:17: bb:43:e9:6f:f6:e4:c4:0a:3d:04:01:9e:c8:bb:14: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:A3:08:D7:0B:3E:9B:1E:52:5B:E3:72:02:4A:B2:94:B0:73:DB X509v3 Authority Key Identifier: keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:69:f9:01:30:83:07:63:78:ac:60:16:ec:01:b0:8d:74:e2: 93:1d:74:70:9e:3e:4c:bc:29:4a:04:c0:8b:43:f6:7d:f8:41: 73:d6:6f:c4:e4:41:15:d2:39:fb:12:40:0c:83:7f:54:16:be: fc:1d:94:53:d9:89:4e:d0:0a:da:33:60:55:2c:6e:6f:b9:06: 7d:77:60:78:5f:d3:75:a6:68:b4:0f:61:68:d2:15:6f:90:da: 77:7c:4e:d7:54:50:ce:65:68:1d:84:c5:55:ae:4f:ac:17:5c: 6c:50:5d:2e:4f:f6:b6:4a:ee:6e:68:73:d3:5e:69:56:0b:68: 6c:d3:df:4b:7d:60:f5:79:d4:a7:61:84:a2:9c:aa:04:50:41: 77:dd:bb:93:11:fa:f7:79:c1:10:c0:d6:3e:5b:41:0f:13:83: ed:36:aa:9a:d0:52:f9:86:1b:c6:45:93:7b:a8:25:ac:60:45: e8:8f:68:07:c2:07:1b:19:b0:ad:df:98:f6:78:b5:a9:53:0c: a5:62:06:95:e2:47:ff:66:c6:23:c3:33:c0:d5:44:18:b9:a5: 30:99:62:a9:35:02:1b:64:0b:17:94:98:08:57:5f:d1:54:73: bb:f4:0d:72:83:a4:50:68:92:f8:d5:fe:4d:72:90:3e:6c:d1: d5:90:90:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0QxMTAvBgNVBAUTKDNDQ0VFQjlEMjA1OUNGRTlGNjA4NTY3N0Q0QjdGQTI2 NEY1MzNBMEYwHhcNMjYwNzE3MDg0NTExWhcNMjYwNzI0MDg0NTExWjAYMRYwFAYD VQQDEw02YTU5ZWI5Ny0yODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMs7if57HCM0x0wgLKBU0YEdX2lZlANTuQPP4GjzttJ6FgN5PqfOnjHqNySr GeXV2dmxI9fqDj7tIKzlyJEwxVMzuqf+4mKfSqREeiQHefxASHGYJPJCBJJKckLV dXMTjsmgkGNem4sRPWmPzGpgPETfcIBm7jBU9tbGMK3whcb32vz0c3rnDLxoO/+i z17C17XhrFE9Ov+yAOAmReYmP+4thScrdmJSmv3OjdTp+GTjljihzA3CSaJsYYFh ROKJSq8PoPL4X6ihp4M5nZvJbR2pvlwvfZohvlNb2KKyHrsBLLUcBJlwnsrXeJbp hRe7Q+lv9uTECj0EAZ7IuxSYEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0LowjX Cz6bHlJb43ICSrKUsHPbMB8GA1UdIwQYMBaAFDzO650gWc/p9ghWd9S3+iZPUzoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzRC9COTc2OUJEOEIw OTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnotbjJDRlozMUxmNkprOVRP ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzRC9COTc2OUJEOEIwOTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnot bjJDRlozMUxmNkprOVRPZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWn5ATCDB2N4rGAW7AGwjXTikx10cJ4+TLwpSgTAi0P2ffhBc9ZvxORBFdI5 +xJADIN/VBa+/B2UU9mJTtAK2jNgVSxub7kGfXdgeF/TdaZotA9haNIVb5Dad3xO 11RQzmVoHYTFVa5PrBdcbFBdLk/2tkrubmhz015pVgtobNPfS31g9XnUp2GEopyq BFBBd927kxH693nBEMDWPltBDxOD7TaqmtBS+YYbxkWTe6glrGBF6I9oB8IHGxmw rd+Y9ni1qVMMpWIGleJH/2bGI8MzwNVEGLmlMJliqTUCG2QLF5SYCFdf0VRzu/QN coOkUGiS+NX+TXKQPmzR1ZCQJQ== -----END CERTIFICATE-----Generated at Sat Jul 18 03:28:12 2026 by rpki-client