$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: AL+lvdAPkmUr4av7MoTb7LIwJBD1D7j0gU78BvZTbDA= Subject key identifier: 53:10:0D:9E:34:38:44:AC:78:AA:BB:EF:D3:1D:3C:C5:00:67:D3:FA Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0431 Signing time: Wed 13 May 2026 01:31:26 +0000 Manifest this update: Wed 13 May 2026 01:31:25 +0000 Manifest next update: Wed 20 May 2026 01:31:25 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: q9mvL5xMoRHydEkQdXM4tU/rODJasHX/7a+F8lAPXlM=) 2: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=) 3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=) 4: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=) 6: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=) 7: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: May 13 01:31:25 2026 GMT Not After : May 20 01:31:25 2026 GMT Subject: CN=6a03d46e-42c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:4b:38:9f:b2:b3:9a:8f:65:9f:c7:fe:ad: 6d:5c:b8:0a:b9:70:01:82:4f:8f:f8:30:bc:96:c0: 2e:7c:79:b5:6a:36:fc:ff:13:3c:fc:c6:cf:a0:e5: 61:42:1e:bb:7f:2b:f9:dd:d8:7b:ea:19:0d:cb:a1: f6:9e:6b:93:64:b2:f9:e1:ce:cb:f6:a0:53:6d:84: d5:a8:48:f2:d6:cf:35:6f:ff:1b:ca:0e:c0:43:b8: d8:31:7e:8c:14:61:22:47:76:42:43:e9:80:60:d8: 07:2c:bc:c7:33:06:82:0a:62:b0:80:3c:ac:ac:76: a2:c5:ec:bc:93:98:e8:ac:4a:80:5e:28:2e:cd:2e: 61:ad:09:71:36:06:9e:d2:c1:15:00:bc:49:51:b6: 91:5d:97:dc:ad:13:47:8d:0f:64:d8:af:fc:57:1b: 36:d3:b2:d5:ce:18:68:a7:92:ce:b7:df:57:68:9a: 61:de:90:f5:5c:e7:d3:15:bf:d6:26:96:f2:12:7f: f8:07:d6:04:0f:f0:7e:c5:1a:af:08:44:5a:04:56: a3:dd:44:cd:b4:25:6f:8d:14:a6:85:13:46:9b:e6: 6f:c2:88:c2:c1:b4:65:c2:ac:ea:b5:4f:a9:16:af: af:8a:35:bb:6b:60:43:a9:4c:c8:13:21:20:34:ce: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:10:0D:9E:34:38:44:AC:78:AA:BB:EF:D3:1D:3C:C5:00:67:D3:FA X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ea:77:c8:0b:c5:f2:92:50:9d:bc:e9:e0:bd:4d:da:03:b0: da:a3:b7:74:7b:1f:25:8d:b1:de:f2:37:26:13:cf:f9:73:86: 34:b1:cb:4d:11:6d:ba:86:98:2c:f9:c1:41:ba:03:55:cc:db: 00:a0:50:fe:62:71:c1:1a:18:24:41:e1:5e:c5:ec:e5:26:ed: 63:0f:94:ef:b4:28:76:00:6e:db:a2:96:2f:ee:51:17:97:c7: 97:52:77:ea:c1:e4:75:38:b4:32:a7:79:c8:53:87:c6:8d:08: f6:47:1a:8b:97:bb:09:85:f0:c8:dc:4d:bc:34:8b:cc:5d:51: 7c:f5:2e:f3:2c:52:64:8c:0c:22:02:b1:fc:5c:62:7e:e3:b1: f1:54:00:84:20:25:41:a9:8c:97:b7:64:ac:67:ea:64:a9:93: 53:ac:25:19:b7:c3:d1:64:1d:7c:a1:d0:d6:40:fd:1e:97:54: b0:24:15:71:9d:2d:52:60:7f:94:e1:20:f5:37:c5:b1:0a:ad: 92:c3:34:c9:b0:4f:9c:ea:a2:fb:32:93:69:64:b3:ce:fb:fe: 48:a9:50:00:e1:f8:2a:13:f8:b8:ba:c0:66:db:dd:dc:dc:99: dd:c3:1c:86:37:00:f4:e8:64:15:91:63:14:da:8f:16:94:73: 4d:42:0f:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwNTEzMDEzMTI1WhcNMjYwNTIwMDEzMTI1WjAYMRYwFAYD VQQDEw02YTAzZDQ2ZS00MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt71LOJ+ys5qPZZ/H/q1tXLgKuXABgk+P+DC8lsAufHm1ajb8/xM8/MbPoOVh Qh67fyv53dh76hkNy6H2nmuTZLL54c7L9qBTbYTVqEjy1s81b/8byg7AQ7jYMX6M FGEiR3ZCQ+mAYNgHLLzHMwaCCmKwgDysrHaixey8k5jorEqAXiguzS5hrQlxNgae 0sEVALxJUbaRXZfcrRNHjQ9k2K/8Vxs207LVzhhop5LOt99XaJph3pD1XOfTFb/W JpbyEn/4B9YED/B+xRqvCERaBFaj3UTNtCVvjRSmhRNGm+ZvwojCwbRlwqzqtU+p Fq+vijW7a2BDqUzIEyEgNM5bjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMQDZ40 OESseKq779MdPMUAZ9P6MB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf+p3yAvF8pJQnbzp4L1N2gOw2qO3dHsfJY2x3vI3JhPP+XOGNLHLTRFtuoaY LPnBQboDVczbAKBQ/mJxwRoYJEHhXsXs5SbtYw+U77QodgBu26KWL+5RF5fHl1J3 6sHkdTi0Mqd5yFOHxo0I9kcai5e7CYXwyNxNvDSLzF1RfPUu8yxSZIwMIgKx/Fxi fuOx8VQAhCAlQamMl7dkrGfqZKmTU6wlGbfD0WQdfKHQ1kD9HpdUsCQVcZ0tUmB/ lOEg9TfFsQqtksM0ybBPnOqi+zKTaWSzzvv+SKlQAOH4KhP4uLrAZtvd3NyZ3cMc hjcA9OhkFZFjFNqPFpRzTUIP3g== -----END CERTIFICATE-----Generated at Wed May 13 04:35:19 2026 by rpki-client