$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json) Hash identifier: dcxa55g8fjIVzPv1XpOdvSFqoiDcPuEnFpnbD6GChAo= Subject key identifier: 36:09:F5:37:E4:D7:89:F4:08:0E:63:64:AD:AA:47:E3:9D:FE:07:3F Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft Manifest number: 2D Signing time: Mon 11 May 2026 08:57:10 +0000 Manifest this update: Mon 11 May 2026 08:57:10 +0000 Manifest next update: Mon 18 May 2026 08:57:10 +0000 Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: t19+r/AHXCNqiiGGWgABBOktFegSaNg+slCyRAizAvw=) 2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Validity Not Before: May 11 08:57:10 2026 GMT Not After : May 18 08:57:10 2026 GMT Subject: CN=6a0199e6-4a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:a3:65:11:9d:2b:a2:0a:36:97:7b:ec:07: ef:f7:89:90:34:5f:09:ba:e7:32:b4:1f:72:85:0e: c7:ec:a1:c9:f6:4b:66:85:66:e7:9e:c7:03:cf:25: 43:17:18:e7:87:d9:44:0e:49:f1:30:31:83:06:d3: 20:74:42:a7:b3:cd:0e:33:21:0a:f8:01:ef:a8:92: d0:90:84:c8:42:5f:97:d9:4f:63:49:c6:89:b8:28: ed:5e:91:76:3f:96:fe:92:00:9c:20:85:83:70:15: 59:dc:9b:69:5c:c3:d6:c8:80:c7:c0:67:a6:7e:50: 02:3c:8c:84:4a:a9:b0:bb:23:28:20:1f:b9:58:84: 5b:ec:ac:92:45:1e:e0:5d:a3:35:ad:dc:56:4b:52: 8c:b2:78:7a:0a:c3:e5:a8:64:83:62:37:4b:9a:dd: 57:4e:6c:9d:be:85:52:cb:54:f6:d1:22:51:70:54: 64:68:a4:7d:03:ac:a4:c4:61:73:e9:3a:0a:03:1b: cf:9d:c8:d3:0d:87:88:54:96:8d:83:82:97:df:a0: e0:00:21:79:c9:99:ca:89:4d:06:b7:2b:7f:95:71: b7:28:8f:9e:23:76:9c:09:56:58:b5:1e:4d:b4:21: c9:79:c5:69:f8:97:73:d6:05:28:e6:79:49:17:70: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:09:F5:37:E4:D7:89:F4:08:0E:63:64:AD:AA:47:E3:9D:FE:07:3F X509v3 Authority Key Identifier: keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:39:fd:5d:a7:81:28:cd:dd:e9:18:e9:92:31:29:87:ac:e3: 68:5b:be:50:dc:a3:03:90:07:e0:c0:14:25:a8:f4:b8:6e:63: 15:91:ca:17:c0:66:96:cb:d2:94:fa:e0:41:75:60:a5:10:81: 5a:77:b9:db:da:36:c7:f8:09:55:a5:c7:62:5e:d9:c5:d2:16: 56:0d:b7:ce:1b:7b:d6:b5:47:4f:4b:48:27:ca:48:25:4c:bd: 51:1a:59:eb:45:c0:f5:fd:20:17:a7:8b:b4:f7:99:7f:64:37: 5d:b0:14:c8:0e:0f:5c:3b:88:6d:22:ce:cd:38:aa:2a:7c:7f: 04:ec:80:58:51:08:d8:94:3b:68:ca:9d:c6:3a:ef:1e:0b:7d: 62:35:4d:8c:73:96:c5:64:d0:ca:04:fb:f8:94:83:ad:50:1e: 0c:c8:d6:8b:48:0a:2c:f2:ff:0d:b4:53:20:02:d8:f7:e7:df: 8c:8d:55:23:9d:0f:93:25:f8:b2:49:40:92:a1:52:d6:c5:7c: 9b:1d:bb:c5:00:6c:27:f0:cf:78:0d:c1:70:c8:3c:45:25:f6: fd:90:52:2f:09:ff:4d:cd:7a:a4:ef:79:42:bb:1b:bc:56:47: 1f:3c:51:18:c2:62:1a:ab:e1:05:51:20:ec:c1:54:ce:4d:a1: 3e:aa:5e:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoOTdCNDQ2MjE2Mzc5ODU3NzAwQUQ2NUI5RkFGRUVDN0M5 MjJDMjJEODAeFw0yNjA1MTEwODU3MTBaFw0yNjA1MTgwODU3MTBaMBgxFjAUBgNV BAMTDTZhMDE5OWU2LTRhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeUaNlEZ0rogo2l3vsB+/3iZA0Xwm65zK0H3KFDsfsocn2S2aFZueexwPPJUMX GOeH2UQOSfEwMYMG0yB0QqezzQ4zIQr4Ae+oktCQhMhCX5fZT2NJxom4KO1ekXY/ lv6SAJwghYNwFVncm2lcw9bIgMfAZ6Z+UAI8jIRKqbC7IyggH7lYhFvsrJJFHuBd ozWt3FZLUoyyeHoKw+WoZINiN0ua3VdObJ2+hVLLVPbRIlFwVGRopH0DrKTEYXPp OgoDG8+dyNMNh4hUlo2DgpffoOAAIXnJmcqJTQa3K3+Vcbcoj54jdpwJVli1Hk20 Icl5xWn4l3PWBSjmeUkXcMq9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNgn1N+TX ifQIDmNkrapH453+Bz8wHwYDVR0jBBgwFoAUl7RGIWN5hXcArWW5+v7sfJIsItgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzM5NjlCM0NBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhjQXJXVzUtdjdzZkpJc0l0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDdSR0lXTjVoWGNBcldXNS12N3NmSklzSXRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzM5NjlCM0NBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhj QXJXVzUtdjdzZkpJc0l0Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgOf1dp4Eozd3pGOmSMSmHrONoW75Q3KMDkAfgwBQlqPS4bmMVkcoXwGaWy9KU +uBBdWClEIFad7nb2jbH+AlVpcdiXtnF0hZWDbfOG3vWtUdPS0gnykglTL1RGlnr RcD1/SAXp4u095l/ZDddsBTIDg9cO4htIs7NOKoqfH8E7IBYUQjYlDtoyp3GOu8e C31iNU2Mc5bFZNDKBPv4lIOtUB4MyNaLSAos8v8NtFMgAtj359+MjVUjnQ+TJfiy SUCSoVLWxXybHbvFAGwn8M94DcFwyDxFJfb9kFIvCf9NzXqk73lCuxu8VkcfPFEY wmIaq+EFUSDswVTOTaE+ql71 -----END CERTIFICATE-----Generated at Wed May 13 03:02:10 2026 by rpki-client