$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: RwsIOcnIAHRgVsH7+p/X3dcLvFdshZ6knGhDhnFdyFM= Subject key identifier: CD:52:00:2B:1F:EB:53:75:5E:79:47:82:C5:68:DE:85:43:1D:05:81 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: EC Signing time: Wed 05 Aug 2026 08:24:06 +0000 Manifest this update: Wed 05 Aug 2026 08:24:06 +0000 Manifest next update: Wed 12 Aug 2026 08:24:06 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: OH++dYNW8wdKht1eyjndIfduodv/y67GXEAAaBREiRw=) 2: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 3: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 4: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 5: E12AF83A718411F19EC4F12F8DA30FBC.roa (hash: /06lVIawu5ZFpT6lyrtNFRn6XgMDzR3BtSSDKpiMdlw=) 6: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 7: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: Xu7NiqZL9JdGnjrkCnt/wdoZ7leyujbZwGzelNxEsxs=) 8: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Aug 5 08:24:06 2026 GMT Not After : Aug 12 08:24:06 2026 GMT Subject: CN=6a72f326-edc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:42:57:ca:31:d0:c4:67:6e:e6:67:16:12: 36:1b:86:31:3b:1e:d5:46:49:68:22:e7:3a:01:c2: 19:6f:16:ad:7e:08:0d:49:f2:7a:5a:26:dc:a4:a9: 94:ab:7c:0b:42:c5:b7:0a:4f:1d:fa:75:84:5d:02: bc:d8:9c:06:f7:d9:57:75:6a:76:9c:71:ee:6b:ef: c2:81:5e:18:b7:6e:f2:68:27:97:bc:4c:51:7c:04: 34:c5:2b:92:20:ed:40:a0:bf:1a:60:62:31:0e:a1: 7d:ee:af:c4:aa:36:de:d6:0c:d9:89:82:99:12:ad: 94:d1:91:13:d9:81:08:95:82:e8:1e:ab:63:c2:03: 08:03:a0:42:57:7b:dc:e9:48:d5:ed:6b:f9:37:10: d6:8b:5a:52:e6:47:7c:fb:c2:f0:d2:77:fa:e8:86: bc:dc:a3:db:d0:22:26:68:9e:83:bb:07:5e:be:a7: 16:37:db:38:f4:5a:aa:ed:03:ef:83:c4:1d:c8:bd: 1e:d4:a8:2b:56:f1:10:9d:64:66:69:17:f0:a9:e2: 14:6a:e1:74:7c:6e:19:6a:d9:2d:fa:71:60:0d:f8: 01:17:13:fb:ea:73:60:63:89:0b:62:a0:d0:2e:be: 25:51:ed:02:4e:ba:54:a4:2a:07:a4:05:e9:8b:ca: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:52:00:2B:1F:EB:53:75:5E:79:47:82:C5:68:DE:85:43:1D:05:81 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:af:17:85:b9:17:b1:d9:dd:28:d2:ac:9d:af:22:cb:ee:8b: 58:ef:68:7b:ed:8e:48:f7:73:ff:7c:3b:f0:d0:b9:41:5b:ec: 35:49:ed:1a:b1:79:4e:54:b1:cc:a4:c2:14:83:ef:50:d3:c3: df:cb:67:2f:c7:f1:62:ba:ce:43:0c:49:a7:08:aa:b4:9d:95: f0:c3:d6:5d:08:af:5b:e5:b2:29:a6:e3:89:c4:5c:5e:dc:4d: eb:2d:5e:4b:5d:dc:4f:b1:3d:47:28:c8:77:56:a7:54:4e:98: 19:65:46:bc:9a:67:f5:24:e0:38:1d:ea:71:80:a2:c9:9b:f4: ac:be:b9:e8:1a:4d:78:86:6e:28:99:d4:10:75:83:80:91:c0: 3f:01:6c:9a:60:2a:92:6e:0c:82:3d:4b:75:ed:eb:16:be:7f: 69:01:20:04:4d:cd:cf:e6:7c:5c:32:7a:3c:c4:b4:2d:0f:df: db:4c:db:5f:19:1a:1c:e1:60:c2:ce:9f:b4:98:c1:ec:f1:40: b5:76:2e:c0:b0:5a:37:ca:d7:46:d2:81:8e:35:4d:ab:f8:03: 4c:ef:19:54:48:58:8f:96:b0:d6:6f:22:97:7d:6c:aa:ea:96: a1:f6:58:f3:f9:15:e2:43:35:aa:4c:d4:fc:85:fe:21:86:82: e4:13:c0:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwODA1MDgyNDA2WhcNMjYwODEyMDgyNDA2WjAYMRYwFAYD VQQDEw02YTcyZjMyNi1lZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAVCV8ox0MRnbuZnFhI2G4YxOx7VRkloIuc6AcIZbxatfggNSfJ6WibcpKmU q3wLQsW3Ck8d+nWEXQK82JwG99lXdWp2nHHua+/CgV4Yt27yaCeXvExRfAQ0xSuS IO1AoL8aYGIxDqF97q/Eqjbe1gzZiYKZEq2U0ZET2YEIlYLoHqtjwgMIA6BCV3vc 6UjV7Wv5NxDWi1pS5kd8+8Lw0nf66Ia83KPb0CImaJ6DuwdevqcWN9s49Fqq7QPv g8QdyL0e1KgrVvEQnWRmaRfwqeIUauF0fG4Zatkt+nFgDfgBFxP76nNgY4kLYqDQ Lr4lUe0CTrpUpCoHpAXpi8ooJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1SACsf 61N1XnlHgsVo3oVDHQWBMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE68XhbkXsdndKNKsna8iy+6LWO9oe+2OSPdz/3w78NC5QVvsNUntGrF5TlSx zKTCFIPvUNPD38tnL8fxYrrOQwxJpwiqtJ2V8MPWXQivW+WyKabjicRcXtxN6y1e S13cT7E9RyjId1anVE6YGWVGvJpn9STgOB3qcYCiyZv0rL656BpNeIZuKJnUEHWD gJHAPwFsmmAqkm4Mgj1Lde3rFr5/aQEgBE3Nz+Z8XDJ6PMS0LQ/f20zbXxkaHOFg ws6ftJjB7PFAtXYuwLBaN8rXRtKBjjVNq/gDTO8ZVEhYj5aw1m8il31squqWofZY 8/kV4kM1qkzU/IX+IYaC5BPA/A== -----END CERTIFICATE-----Generated at Wed Aug 5 13:42:04 2026 by rpki-client