$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json) Hash identifier: RBLnad86tr5ehuKNcA/MKj2nQB8yHwM4HYeBXIrdryY= Subject key identifier: 93:B2:47:9C:E2:47:D9:4A:60:AF:7B:95:7A:90:B4:D7:D7:4F:0B:EF Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft Manifest number: A5 Signing time: Wed 13 May 2026 07:23:03 +0000 Manifest this update: Wed 13 May 2026 07:23:03 +0000 Manifest next update: Wed 20 May 2026 07:23:03 +0000 Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: HRlgc36YGr1/067EaQByiCMIkGslUM/mwJb3+uHQeDU=) 2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: vaeeD9A4QxOANnmAmiWS0iabhsevE39S0swYTABF/54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Validity Not Before: May 13 07:23:03 2026 GMT Not After : May 20 07:23:03 2026 GMT Subject: CN=6a0426d7-f64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:7a:8d:1c:c2:39:04:95:22:d8:d5:5e:58: a9:21:90:f0:59:8d:9e:a9:77:2f:a3:be:27:11:c3: f3:28:b1:6f:14:e6:ef:6a:c7:94:71:65:75:43:30: 0b:7a:17:52:ec:83:3f:ca:07:9f:09:f9:48:c4:9f: 88:09:82:61:4c:fe:5c:d9:cf:2c:17:98:ab:2a:fa: 32:99:91:21:38:8d:4d:8c:95:4d:b8:14:71:f6:4f: 4f:a7:be:06:f3:4f:5a:c7:3f:17:60:61:d5:36:71: 6d:14:d3:97:42:e2:2b:76:40:ff:6a:a9:7d:e0:e8: c6:c6:be:d3:1a:59:f7:b0:64:13:de:59:3a:69:75: 71:3f:5e:ec:b0:40:b0:b6:c5:a0:f2:e4:63:54:ea: f6:bb:f4:2f:70:0b:c4:bb:42:8a:23:c0:ab:c5:2d: 4e:21:a2:52:f9:7d:05:59:a4:7e:71:05:1b:26:53: d4:cc:c4:53:ea:f0:df:5d:b8:6e:30:de:e4:40:6d: 52:c6:7d:51:5b:c7:b7:3d:d9:85:ea:3e:9c:34:1b: 0c:b0:c7:93:f1:1b:0d:aa:f1:87:c5:05:97:fa:87: e3:b3:5a:98:6f:0c:6d:aa:09:05:cd:d2:e7:9a:11: fb:fa:9a:d8:c9:5e:55:b5:21:05:e0:0d:47:24:e4: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B2:47:9C:E2:47:D9:4A:60:AF:7B:95:7A:90:B4:D7:D7:4F:0B:EF X509v3 Authority Key Identifier: keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4c:ca:03:16:56:9f:e7:02:ab:f9:ce:16:dc:01:39:29:93: 42:17:f3:d5:46:29:ba:29:98:54:63:88:ea:91:c1:d5:a7:3d: bf:ff:d9:4d:05:53:fb:94:0d:bc:95:fa:14:1f:1e:d3:34:0f: f8:03:38:14:66:9f:9d:a6:d6:aa:8c:ab:a9:60:f3:32:6d:22: e1:e2:64:7d:99:7d:26:0c:37:f9:7e:5d:9f:63:e9:53:6c:3e: 89:7b:3f:e9:88:1c:c8:4a:89:62:2a:75:9b:49:e6:2f:a6:3d: 9b:33:60:4a:8b:05:f0:f7:8f:ad:2e:c8:c3:ac:f0:91:27:20: a6:ba:37:aa:7b:32:74:30:c4:40:3f:e7:df:f2:08:bd:b6:b0: 5c:2f:98:92:e1:ae:0c:72:62:fa:ed:e7:39:dc:73:67:13:96: b3:dc:6b:20:83:b5:70:a9:af:70:f2:0f:31:21:e2:15:dd:f3: 78:ff:73:9a:1a:4c:9b:f8:40:57:8a:f6:cc:ee:27:ec:cf:56: 82:17:28:be:3c:b0:c5:23:f3:57:85:f0:e1:02:b0:00:49:a5: d0:ad:63:c7:16:34:19:a2:7f:52:1c:ae:f2:3b:7a:37:44:76: 20:af:ab:80:72:d9:e1:c4:e9:7e:4f:ac:23:4b:c6:40:fa:15: 7a:b9:04:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3QzExMTAvBgNVBAUTKEEyQjlGRkVENDcwQzVCNzFDNTJGM0I2NEIzQjZFREE0 MTlCRTEzQjMwHhcNMjYwNTEzMDcyMzAzWhcNMjYwNTIwMDcyMzAzWjAYMRYwFAYD VQQDEw02YTA0MjZkNy1mNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvph6jRzCOQSVItjVXlipIZDwWY2eqXcvo74nEcPzKLFvFObvaseUcWV1QzAL ehdS7IM/ygefCflIxJ+ICYJhTP5c2c8sF5irKvoymZEhOI1NjJVNuBRx9k9Pp74G 809axz8XYGHVNnFtFNOXQuIrdkD/aql94OjGxr7TGln3sGQT3lk6aXVxP17ssECw tsWg8uRjVOr2u/QvcAvEu0KKI8CrxS1OIaJS+X0FWaR+cQUbJlPUzMRT6vDfXbhu MN7kQG1Sxn1RW8e3PdmF6j6cNBsMsMeT8RsNqvGHxQWX+ofjs1qYbwxtqgkFzdLn mhH7+prYyV5VtSEF4A1HJOTQYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOyR5zi R9lKYK97lXqQtNfXTwvvMB8GA1UdIwQYMBaAFKK5/+1HDFtxxS87ZLO27aQZvhOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdDMS8yNjMxQzhCNDU3 MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVczSEZMenRrczdidHBCbS1F N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29ybl83VWNNVzNIRkx6dGtzN2J0cEJtLUU3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdDMS8yNjMxQzhCNDU3MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVcz SEZMenRrczdidHBCbS1FN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxEzKAxZWn+cCq/nOFtwBOSmTQhfz1UYpuimYVGOI6pHB1ac9v//ZTQVT+5QN vJX6FB8e0zQP+AM4FGafnabWqoyrqWDzMm0i4eJkfZl9Jgw3+X5dn2PpU2w+iXs/ 6YgcyEqJYip1m0nmL6Y9mzNgSosF8PePrS7Iw6zwkScgpro3qnsydDDEQD/n3/II vbawXC+YkuGuDHJi+u3nOdxzZxOWs9xrIIO1cKmvcPIPMSHiFd3zeP9zmhpMm/hA V4r2zO4n7M9WghcovjywxSPzV4Xw4QKwAEml0K1jxxY0GaJ/Uhyu8jt6N0R2IK+r gHLZ4cTpfk+sI0vGQPoVerkEUA== -----END CERTIFICATE-----Generated at Wed May 13 12:56:40 2026 by rpki-client