$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: 1GPHhFL5C9UDzcyBwA7iKyKWSYJj22G+TqZTqV/k3t0= Subject key identifier: B2:1E:55:BB:47:4E:5F:DA:A3:D6:B4:DB:B3:31:2B:FB:95:63:52:7F Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 02B7 Signing time: Mon 17 Aug 2026 01:56:05 +0000 Manifest this update: Mon 17 Aug 2026 01:56:05 +0000 Manifest next update: Mon 24 Aug 2026 01:56:05 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: 0uQIwrt5daK9DHeQQIopjFxYO/vnIm2vQZyXUicr8WI=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Aug 17 01:56:05 2026 GMT Not After : Aug 24 01:56:05 2026 GMT Subject: CN=6a826a35-17aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:89:90:e9:fe:f8:9d:fa:55:3c:20:50:99: 23:8b:a9:1e:b6:57:4a:06:95:66:dc:31:77:78:c0: ad:25:33:99:cd:2d:bd:3c:a6:5c:60:4e:3b:c0:af: 63:47:f5:9a:a4:6f:77:3b:ff:fc:73:33:d3:6f:61: ec:ce:20:24:39:99:15:9f:d5:03:75:94:00:f6:7a: 1d:1c:f0:03:0a:fe:90:67:e3:bd:bb:28:6f:54:5d: d0:81:06:26:22:2c:38:74:c1:dc:1a:50:89:86:40: ed:0b:37:ad:0c:22:cd:68:52:0a:75:af:c0:e2:d7: b9:95:c9:81:b5:12:9e:bf:36:cf:4f:19:8d:ec:28: 2a:c6:8a:03:ce:78:8d:2a:da:a4:2d:d3:99:d5:ed: f1:2b:d5:3f:9e:44:9e:56:3a:f8:30:6f:77:d8:58: da:b5:be:3e:27:fd:b0:08:59:fb:be:f9:15:f8:b7: b5:e4:99:11:97:ce:b6:8b:1b:a1:81:19:a1:cb:2a: cb:18:b3:ba:d9:69:b1:44:37:45:7c:ca:b2:63:82: 84:fc:6d:b0:53:26:5f:fb:49:51:06:a8:2f:19:99: 61:06:2f:21:e7:95:4c:57:58:12:92:bb:65:c8:23: 53:93:09:e0:3b:7c:29:a5:ef:4c:ea:39:26:5e:36: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:55:BB:47:4E:5F:DA:A3:D6:B4:DB:B3:31:2B:FB:95:63:52:7F X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f2:96:05:63:51:24:6e:8c:3b:38:3c:6f:49:3c:59:38:67: 3d:63:0c:c0:d4:00:76:e0:f0:fa:0b:9f:cb:48:09:e8:3e:22: 3c:5f:f5:59:85:7a:df:00:de:b3:e5:f0:30:f9:25:bd:63:38: 59:f5:46:b3:f3:aa:99:a4:94:53:e7:b4:0d:6f:cc:c1:a4:b1: 62:83:26:24:ce:64:35:70:f3:1a:53:80:f0:97:01:3f:ce:80: 90:ee:ec:5f:07:78:71:2c:14:48:7f:7f:10:39:6c:80:35:e3: f5:c9:3a:8e:bb:97:82:c2:e5:81:75:7a:04:12:97:c2:bf:17: af:86:8e:9d:a2:b8:c2:9d:fb:22:92:c3:68:c6:2c:17:f5:99: 8a:9d:64:f5:3b:7b:96:e9:a3:5e:6e:e5:a4:ad:db:9a:1e:0a: 7e:ad:72:79:9b:64:2d:74:39:4f:56:70:22:39:c5:ef:41:96: 79:94:a4:fc:48:5a:97:71:1b:eb:62:a0:f7:4c:9a:74:9e:e4: de:15:2f:a9:ea:00:38:3d:ba:21:31:41:d6:91:44:d1:f8:0b: 2c:ae:06:38:96:27:c9:9f:a0:96:05:68:65:bd:30:2a:5d:66: a1:77:2b:cc:1c:78:94:79:b3:3c:cd:13:91:4e:ac:05:40:8e: 07:2a:97:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjYwODE3MDE1NjA1WhcNMjYwODI0MDE1NjA1WjAYMRYwFAYD VQQDEw02YTgyNmEzNS0xN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDyJkOn++J36VTwgUJkji6ketldKBpVm3DF3eMCtJTOZzS29PKZcYE47wK9j R/WapG93O//8czPTb2HsziAkOZkVn9UDdZQA9nodHPADCv6QZ+O9uyhvVF3QgQYm Iiw4dMHcGlCJhkDtCzetDCLNaFIKda/A4te5lcmBtRKevzbPTxmN7CgqxooDzniN KtqkLdOZ1e3xK9U/nkSeVjr4MG932Fjatb4+J/2wCFn7vvkV+Le15JkRl862ixuh gRmhyyrLGLO62WmxRDdFfMqyY4KE/G2wUyZf+0lRBqgvGZlhBi8h55VMV1gSkrtl yCNTkwngO3wppe9M6jkmXjZJvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIeVbtH Tl/ao9a027MxK/uVY1J/MB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPKWBWNRJG6MOzg8b0k8WThnPWMMwNQAduDw+gufy0gJ6D4iPF/1WYV63wDe s+XwMPklvWM4WfVGs/OqmaSUU+e0DW/MwaSxYoMmJM5kNXDzGlOA8JcBP86AkO7s Xwd4cSwUSH9/EDlsgDXj9ck6jruXgsLlgXV6BBKXwr8Xr4aOnaK4wp37IpLDaMYs F/WZip1k9Tt7lumjXm7lpK3bmh4Kfq1yeZtkLXQ5T1ZwIjnF70GWeZSk/Ehal3Eb 62Kg90yadJ7k3hUvqeoAOD26ITFB1pFE0fgLLK4GOJYnyZ+glgVoZb0wKl1moXcr zBx4lHmzPM0TkU6sBUCOByqXgg== -----END CERTIFICATE-----Generated at Mon Aug 17 13:27:17 2026 by rpki-client