$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: 8e/s7jKh19B85nd7mZjnOQy8vdXeX+/eo9/Gf5KjOvY= Subject key identifier: 1A:B3:7D:E0:A7:84:A7:61:E4:A4:C0:2C:2A:A4:D7:33:5C:FC:E2:6B Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 02BF Signing time: Tue 01 Sep 2026 01:28:59 +0000 Manifest this update: Tue 01 Sep 2026 01:28:58 +0000 Manifest next update: Tue 08 Sep 2026 01:28:58 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: WZv3q1A4JMKdTI5nDVVAP9L8xyWCS9CL2c2NXyIuesQ=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 01:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Sep 1 01:28:58 2026 GMT Not After : Sep 8 01:28:58 2026 GMT Subject: CN=6a962a5b-9c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:95:1b:84:35:4e:4f:ef:6e:85:fd:83:d1:11: 7d:ef:a9:c6:fd:52:73:48:50:d6:b3:74:04:2f:2e: 23:3b:1f:02:d1:a1:10:30:34:28:97:7a:0d:9e:67: ed:4c:9f:e7:af:36:7f:58:96:87:02:b2:81:52:59: 95:2a:29:8b:9c:37:48:2f:6b:56:a1:d8:68:9f:a1: d5:33:df:d9:cd:5b:f1:54:6d:dd:f6:4f:e1:59:7d: 50:24:9d:17:c3:7a:4c:76:c4:72:21:80:74:3d:b2: bd:90:68:28:00:34:21:11:93:52:8e:37:21:aa:6f: e0:16:74:7c:84:ce:0e:87:cd:2e:bb:d2:a8:82:8f: be:1f:a6:6f:c9:25:32:0c:15:db:77:f9:f5:7e:18: 7c:76:20:4e:ff:b4:c0:05:1d:f3:c5:17:44:7c:36: 67:ae:e6:a9:d3:87:85:10:a3:6a:c6:a4:7a:4d:de: 34:73:6e:f6:8f:fe:40:8f:11:c8:5b:d7:48:94:27: af:fd:ab:42:b2:55:7d:01:67:74:0d:5b:c2:59:66: 0b:87:02:2a:4a:9c:01:56:18:67:0d:43:8f:f3:51: e5:57:1e:7b:ff:b5:a0:4e:ea:8f:84:2c:6a:bb:16: 55:b4:b8:23:7e:c8:04:7e:41:98:82:a3:37:22:71: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B3:7D:E0:A7:84:A7:61:E4:A4:C0:2C:2A:A4:D7:33:5C:FC:E2:6B X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ed:12:19:d6:82:43:e1:13:5a:92:88:90:26:b1:1a:5e:ac: fc:cb:d4:0f:48:c8:5a:fd:9d:b8:85:d6:e4:29:b0:9f:f7:88: 66:9e:1c:b5:93:4d:a5:71:7c:a0:6c:3f:31:dd:5e:a5:3f:ee: 0f:96:b8:54:e2:27:4f:8c:43:df:84:ac:19:ce:60:2e:ff:84: 26:a9:1d:37:94:60:2e:63:5b:68:7a:02:f1:82:97:16:e6:8c: 6a:bb:80:2b:7d:16:d4:be:d7:22:02:86:4c:3b:53:9c:e1:8e: 75:09:b7:42:1b:65:05:4a:49:2a:f8:79:8e:a4:8d:5a:68:56: 04:ad:2f:db:24:c1:75:a1:62:0a:5c:d9:48:38:d8:30:2f:a3: 5a:f7:ec:ce:22:1c:cc:df:d0:33:04:12:a7:5b:70:27:ce:a3: 73:97:cd:fe:27:38:e2:fe:7a:c8:d3:5b:25:3f:ea:da:94:b4: 74:e6:8e:34:5f:fe:ac:3e:6c:59:4f:fd:99:1e:39:6c:fc:d2: a6:27:52:7d:73:cf:83:ea:2e:48:bb:14:67:74:8e:0c:ec:de: 65:65:db:cd:a9:74:4c:d0:c0:d9:bd:c0:37:7d:df:51:b5:e6: 98:e2:aa:bb:c6:ff:0e:47:b1:31:9b:23:17:c8:22:89:5b:1c: 5e:2b:9d:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjYwOTAxMDEyODU4WhcNMjYwOTA4MDEyODU4WjAYMRYwFAYD VQQDEw02YTk2MmE1Yi05YzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85UbhDVOT+9uhf2D0RF976nG/VJzSFDWs3QELy4jOx8C0aEQMDQol3oNnmft TJ/nrzZ/WJaHArKBUlmVKimLnDdIL2tWodhon6HVM9/ZzVvxVG3d9k/hWX1QJJ0X w3pMdsRyIYB0PbK9kGgoADQhEZNSjjchqm/gFnR8hM4Oh80uu9Kogo++H6ZvySUy DBXbd/n1fhh8diBO/7TABR3zxRdEfDZnruap04eFEKNqxqR6Td40c272j/5AjxHI W9dIlCev/atCslV9AWd0DVvCWWYLhwIqSpwBVhhnDUOP81HlVx57/7WgTuqPhCxq uxZVtLgjfsgEfkGYgqM3InHAywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqzfeCn hKdh5KTALCqk1zNc/OJrMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF+0SGdaCQ+ETWpKIkCaxGl6s/MvUD0jIWv2duIXW5Cmwn/eIZp4ctZNNpXF8 oGw/Md1epT/uD5a4VOInT4xD34SsGc5gLv+EJqkdN5RgLmNbaHoC8YKXFuaMaruA K30W1L7XIgKGTDtTnOGOdQm3QhtlBUpJKvh5jqSNWmhWBK0v2yTBdaFiClzZSDjY MC+jWvfsziIczN/QMwQSp1twJ86jc5fN/ic44v56yNNbJT/q2pS0dOaONF/+rD5s WU/9mR45bPzSpidSfXPPg+ouSLsUZ3SODOzeZWXbzal0TNDA2b3AN33fUbXmmOKq u8b/DkexMZsjF8giiVscXiudbw== -----END CERTIFICATE-----Generated at Tue Sep 1 17:03:50 2026 by rpki-client