$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: lzpedHTX+zPWdJ5PgBVBEEm227ErueT98OF6VnLvS0U= Subject key identifier: 7D:EC:B5:55:C4:9B:08:E6:23:67:CE:0A:AE:D6:14:B4:86:28:A8:A2 Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 07EB Signing time: Tue 12 May 2026 21:22:10 +0000 Manifest this update: Tue 12 May 2026 21:22:09 +0000 Manifest next update: Tue 19 May 2026 21:22:09 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: JDY28ZwZ6DzaE64B8h/jH/NgFxPLHcY93VSxAZC43gU=) 2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=) 3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: May 12 21:22:09 2026 GMT Not After : May 19 21:22:09 2026 GMT Subject: CN=6a039a02-f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:51:3d:d4:12:cc:e1:96:b6:62:7f:2e:97: 79:7c:b4:a3:33:d0:78:27:7e:8d:a6:e4:f3:81:5f: b0:bd:ce:85:c1:61:84:e2:8e:33:a4:b2:2d:08:fa: b4:50:7c:79:64:5b:4e:6a:0b:d2:0c:28:d2:2e:4a: b5:3a:f9:37:54:73:01:ad:92:1f:c8:b1:19:93:c3: a7:a9:cd:4f:7c:12:f9:b2:24:e7:b6:f9:04:46:85: 1a:eb:45:4f:23:75:05:80:aa:12:10:89:fa:a6:81: d0:4b:2f:26:5d:70:52:e6:b5:f4:38:05:91:bc:fb: 1c:e1:c0:fb:8c:92:f4:6f:b2:9d:97:4d:d2:9c:30: 65:d7:0e:e1:48:83:58:fc:9d:13:56:2c:49:33:eb: be:4f:0a:11:44:02:14:73:14:56:c9:1e:79:e6:84: f9:2f:ac:65:08:b6:ae:40:24:4d:5c:50:f3:5b:4d: 51:f6:9e:99:29:ce:1b:d9:a6:75:4f:83:ee:f0:ec: 68:e4:6e:5c:3d:9f:3b:78:ba:25:3e:48:e5:00:96: 4c:55:a0:b1:4a:87:69:d7:d3:59:f4:68:46:18:cc: 05:fe:96:4a:92:05:70:c5:ca:c7:a7:30:95:7a:65: 55:c6:7d:31:91:d2:e7:e0:7a:0f:0c:f3:31:1d:d1: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EC:B5:55:C4:9B:08:E6:23:67:CE:0A:AE:D6:14:B4:86:28:A8:A2 X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:fd:bf:42:1b:4d:26:6f:e5:98:be:9a:df:f8:f7:a7:ec:a6: 59:d3:cd:e0:32:ee:1c:3e:d6:a4:99:75:89:fa:3f:09:60:12: 54:90:03:fa:a5:ec:eb:60:42:8a:b3:74:c6:26:2f:75:5f:d7: 55:8b:6d:17:80:3d:e4:fa:c1:41:51:c2:6b:3f:4e:5a:b4:52: 90:b6:57:c3:5f:e4:92:21:3f:f5:60:04:43:83:ce:ea:89:b6: 34:52:46:6a:4b:73:02:83:ee:b2:90:2f:c0:2c:d0:34:bc:f4: 8c:3b:9f:05:0b:70:4a:37:6e:ea:36:46:1c:26:db:df:d4:e7: 85:6c:e8:73:ea:e3:9c:70:54:06:be:29:3e:73:b4:bf:57:fa: af:c4:20:61:da:f6:8c:61:2e:bd:75:14:99:71:12:95:bd:cb: 39:8a:91:22:65:c2:50:e0:e3:59:db:1d:7c:26:f0:72:4e:30: 9c:1b:6c:2f:8f:d8:91:b2:0c:f2:35:2b:30:ba:53:b0:7e:6e: 0f:05:3d:63:e1:0e:07:0d:81:bb:80:4e:f4:d9:a6:fc:be:e1: 14:95:ea:14:8a:59:6f:44:21:2b:29:97:64:98:07:5a:ae:4a: bb:a7:bd:55:33:63:00:90:0a:a6:48:58:e5:56:16:41:57:4c: 23:ae:92:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjYwNTEyMjEyMjA5WhcNMjYwNTE5MjEyMjA5WjAYMRYwFAYD VQQDEw02YTAzOWEwMi1mM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkZRPdQSzOGWtmJ/Lpd5fLSjM9B4J36NpuTzgV+wvc6FwWGE4o4zpLItCPq0 UHx5ZFtOagvSDCjSLkq1Ovk3VHMBrZIfyLEZk8Onqc1PfBL5siTntvkERoUa60VP I3UFgKoSEIn6poHQSy8mXXBS5rX0OAWRvPsc4cD7jJL0b7Kdl03SnDBl1w7hSINY /J0TVixJM+u+TwoRRAIUcxRWyR555oT5L6xlCLauQCRNXFDzW01R9p6ZKc4b2aZ1 T4Pu8Oxo5G5cPZ87eLolPkjlAJZMVaCxSodp19NZ9GhGGMwF/pZKkgVwxcrHpzCV emVVxn0xkdLn4HoPDPMxHdEWFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3stVXE mwjmI2fOCq7WFLSGKKiiMB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsv2/QhtNJm/lmL6a3/j3p+ymWdPN4DLuHD7WpJl1ifo/CWASVJAD+qXs62BC irN0xiYvdV/XVYttF4A95PrBQVHCaz9OWrRSkLZXw1/kkiE/9WAEQ4PO6om2NFJG aktzAoPuspAvwCzQNLz0jDufBQtwSjdu6jZGHCbb39TnhWzoc+rjnHBUBr4pPnO0 v1f6r8QgYdr2jGEuvXUUmXESlb3LOYqRImXCUODjWdsdfCbwck4wnBtsL4/YkbIM 8jUrMLpTsH5uDwU9Y+EOBw2Bu4BO9Nmm/L7hFJXqFIpZb0QhKymXZJgHWq5Ku6e9 VTNjAJAKpkhY5VYWQVdMI66ShQ== -----END CERTIFICATE-----Generated at Wed May 13 19:34:27 2026 by rpki-client