$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: iO/6Arrnqru2SxS/8PFjhVuafg/d+8HAtr1oGsMQ2/I= Subject key identifier: 84:66:84:36:66:8A:0B:A1:34:FF:2B:8B:4D:D2:3D:4F:F8:90:FF:36 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0AC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A76 Signing time: Tue 12 May 2026 19:47:01 +0000 Manifest this update: Tue 12 May 2026 19:47:00 +0000 Manifest next update: Tue 19 May 2026 19:47:00 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: oOAiJkjLgtFldP3Pun3rgfUhCjWIimHDJbRUg2KZ0+Y=) 2: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: aRixXq7ui35CkBZ1WtgzAKTz2bGqo7mI3c5dVkJhwD8=) 3: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: y7NLJGyijlqNL+Ovztz61BvAvfEsk7Q6tTmB6qAz1wY=) 4: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: wJPqhmG5nuh5KFi1IkyAbZsHhxJ058Q16pbeljhvYhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2755 (0xac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: May 12 19:47:00 2026 GMT Not After : May 19 19:47:00 2026 GMT Subject: CN=6a0383b5-b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:1c:02:1c:ec:f3:01:29:45:0a:8b:b8:76: e7:57:6a:5b:c4:4c:e1:d6:8a:d7:9a:06:8e:33:44: 25:8f:f5:7e:40:40:fc:55:63:52:a0:8e:e3:4f:43: aa:24:87:a0:e9:af:f6:2c:cb:06:7f:00:3d:98:d0: b7:c7:05:a8:7d:b6:66:e4:1d:e6:d8:18:d9:6b:35: 56:ae:62:3a:65:a2:e3:74:c3:79:97:e9:1e:2b:9a: 03:0e:97:7c:e7:56:47:62:51:2f:8c:41:c3:d3:16: 24:20:68:70:8d:93:b8:8f:24:69:e4:ca:17:a4:7c: e7:08:79:14:4e:d3:71:21:b5:fc:db:2a:ad:49:1d: 25:b8:92:5b:35:38:d3:42:5c:10:2e:44:36:f5:5e: ca:52:98:33:cb:8f:13:7f:7f:4a:a1:cb:4a:e0:41: a2:fe:d0:23:c0:02:b5:d2:7e:4f:eb:f8:d1:e5:d9: 34:b8:51:d3:94:0a:3f:5a:8d:8b:e2:0e:1d:45:ec: 9d:c1:18:cc:aa:21:41:2f:2f:c7:9d:84:c3:da:82: b7:75:a5:07:e7:1b:94:ba:f8:21:07:a3:eb:cc:e0: 7c:e5:a1:d2:60:74:fe:d8:9d:96:80:64:9a:48:49: 73:93:7c:b6:d5:5e:df:82:37:57:6f:05:20:0e:b5: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:66:84:36:66:8A:0B:A1:34:FF:2B:8B:4D:D2:3D:4F:F8:90:FF:36 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:65:39:d0:d0:97:ab:7c:8e:91:ab:a7:8b:0d:68:ae:b2:d1: b1:82:8a:c7:8b:8e:9d:07:80:c5:c2:a8:8f:f5:58:cd:71:34: e8:1d:25:e8:81:1c:0e:5a:b8:9e:6a:27:f3:d6:45:8c:64:40: dd:47:50:29:1f:d5:56:b4:63:27:63:c7:ad:2c:a9:de:e2:8f: 0a:7e:33:f6:10:be:ec:c9:5d:c4:bf:de:3f:e4:67:48:ff:19: 74:e6:78:bb:83:4d:bb:ab:d1:12:6b:68:a2:72:be:21:9e:47: b1:86:81:0c:87:40:6f:b7:68:49:62:c5:51:be:55:98:af:7a: ab:49:27:71:37:af:48:c6:96:10:d7:28:47:0c:b8:7d:09:a5: c5:61:54:d8:71:89:11:c6:ca:f7:28:7f:3f:e9:31:81:9e:77: e7:4c:65:6e:1f:6f:71:0d:ff:fd:88:18:8f:ed:a7:17:e6:f6: a1:4f:5a:a7:a6:9c:f2:f9:20:14:31:22:9e:e4:84:0a:dc:db: 86:81:d5:27:f3:68:4b:d1:3c:52:d8:1a:83:17:87:0b:5d:de: 1e:dd:24:b2:14:69:c1:cb:d5:c3:16:28:e9:82:e2:67:a4:7a: b0:49:06:1e:c8:91:a6:1a:7f:a5:5f:4e:e9:22:fa:46:e5:93: b6:86:cf:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjYwNTEyMTk0NzAwWhcNMjYwNTE5MTk0NzAwWjAYMRYwFAYD VQQDEw02YTAzODNiNS1iNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu20cAhzs8wEpRQqLuHbnV2pbxEzh1orXmgaOM0Qlj/V+QED8VWNSoI7jT0Oq JIeg6a/2LMsGfwA9mNC3xwWofbZm5B3m2BjZazVWrmI6ZaLjdMN5l+keK5oDDpd8 51ZHYlEvjEHD0xYkIGhwjZO4jyRp5MoXpHznCHkUTtNxIbX82yqtSR0luJJbNTjT QlwQLkQ29V7KUpgzy48Tf39KoctK4EGi/tAjwAK10n5P6/jR5dk0uFHTlAo/Wo2L 4g4dReydwRjMqiFBLy/HnYTD2oK3daUH5xuUuvghB6PrzOB85aHSYHT+2J2WgGSa SElzk3y21V7fgjdXbwUgDrV5AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRmhDZm iguhNP8ri03SPU/4kP82MB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuGU50NCXq3yOkauniw1orrLRsYKKx4uOnQeAxcKoj/VYzXE06B0l6IEcDlq4 nmon89ZFjGRA3UdQKR/VVrRjJ2PHrSyp3uKPCn4z9hC+7MldxL/eP+RnSP8ZdOZ4 u4NNu6vREmtoonK+IZ5HsYaBDIdAb7doSWLFUb5VmK96q0kncTevSMaWENcoRwy4 fQmlxWFU2HGJEcbK9yh/P+kxgZ5350xlbh9vcQ3//YgYj+2nF+b2oU9ap6ac8vkg FDEinuSECtzbhoHVJ/NoS9E8UtgagxeHC13eHt0kshRpwcvVwxYo6YLiZ6R6sEkG HsiRphp/pV9O6SL6RuWTtobPgA== -----END CERTIFICATE-----Generated at Wed May 13 15:42:20 2026 by rpki-client