$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: kh6LaOTYjbhHBA+KcmSs7Dsg+LzzjGiPFhKADycAitg= Subject key identifier: B2:B8:86:DF:23:46:94:4A:AE:5E:9F:70:30:8C:48:A3:AE:50:E9:9C Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 07AA Signing time: Tue 12 May 2026 21:33:44 +0000 Manifest this update: Tue 12 May 2026 21:33:44 +0000 Manifest next update: Tue 19 May 2026 21:33:44 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: z9Oa/CxDcsXqHUcNeVrNHVzz3CNH7waK0+Rvo/EsZYw=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: v0xqswgei3klkM48UKau+ZFSqGoqNY8ubfB94GPpoto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: May 12 21:33:44 2026 GMT Not After : May 19 21:33:44 2026 GMT Subject: CN=6a039cb8-6a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:34:41:55:71:f2:e8:bf:8f:4d:f9:a1:e2: 5b:17:6e:87:9c:53:62:28:13:15:d6:ff:68:eb:9b: a4:a8:b6:4a:55:7a:06:9b:6f:66:0c:87:64:09:64: c3:b2:4e:eb:3b:99:23:46:98:5e:fd:6a:07:ab:cc: 8f:25:d0:ad:cb:7d:04:92:93:55:53:4a:8a:1f:e7: 68:b5:f8:dc:30:ac:12:99:98:0c:47:b1:37:30:fb: 42:1a:d5:a4:ae:56:45:e9:67:4d:65:d2:8d:ed:2c: 83:cf:9f:45:f6:1e:97:fd:e2:e7:82:45:ed:b4:58: fc:6b:fe:44:d2:9c:b5:7d:3b:bf:28:0d:9f:7c:61: a5:9c:0d:8f:c6:fc:88:4d:58:58:7e:9e:2e:bd:69: ea:0a:66:58:4a:f1:9d:81:ab:c8:d8:63:3f:ba:d4: 6a:a5:e8:e7:92:87:91:9f:12:6d:f9:1e:77:6b:b9: 31:39:12:a3:6f:27:ae:3a:09:f1:e7:85:16:a0:02: 69:ce:52:8e:83:70:98:0f:77:dd:12:e9:01:9e:a6: b5:1b:bc:30:31:6b:cf:35:2c:da:56:14:3c:cf:54: 76:7d:f2:f7:76:d2:c9:be:30:3a:be:3f:ac:ee:04: 7b:6a:d6:28:45:3b:27:7b:5c:2b:b0:8b:b5:76:5c: 2c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:86:DF:23:46:94:4A:AE:5E:9F:70:30:8C:48:A3:AE:50:E9:9C X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6c:cf:e1:bd:51:0f:a1:62:63:68:61:6f:61:f7:49:97:b2: c3:9e:84:0e:ba:c7:5b:16:90:1e:d0:7f:1c:68:cd:88:cd:ee: 00:93:cf:a6:46:ee:e3:4f:89:39:1c:c8:8b:22:9f:89:c3:ca: ca:a1:6d:f6:76:d0:ac:3d:1e:64:de:86:8d:f2:fc:7d:4a:63: 76:42:f1:b2:99:1a:5c:a7:a7:f4:a8:65:01:51:d9:0b:d7:fd: 8e:55:5d:45:2a:ea:4a:b7:51:33:6a:59:4f:66:3c:3f:c4:34: c8:cc:b2:c6:ee:08:bd:30:4b:12:c3:3b:f3:38:9e:ce:75:47: 0f:f1:e4:37:d7:23:77:65:cc:f5:32:3b:28:40:40:43:ec:5d: 68:54:14:03:33:1f:a0:83:09:cc:28:7d:7e:6a:16:d9:00:93: 98:db:54:98:a8:e5:c2:46:56:af:cc:02:24:c9:4d:f7:56:38: 76:a2:3d:cc:3a:97:01:9d:f3:dd:f6:e2:3b:79:2c:15:95:fe: 69:d3:f0:2b:17:f1:21:14:04:23:e4:88:3c:44:76:58:74:b7: 57:2a:6e:15:c5:be:43:85:62:8a:2d:7c:d9:79:63:db:23:0c: 7f:bf:63:b0:2d:8a:3c:64:c9:d5:c0:66:02:cb:2a:d4:92:20: c2:03:aa:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjYwNTEyMjEzMzQ0WhcNMjYwNTE5MjEzMzQ0WjAYMRYwFAYD VQQDEw02YTAzOWNiOC02YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeI0QVVx8ui/j035oeJbF26HnFNiKBMV1v9o65ukqLZKVXoGm29mDIdkCWTD sk7rO5kjRphe/WoHq8yPJdCty30EkpNVU0qKH+dotfjcMKwSmZgMR7E3MPtCGtWk rlZF6WdNZdKN7SyDz59F9h6X/eLngkXttFj8a/5E0py1fTu/KA2ffGGlnA2PxvyI TVhYfp4uvWnqCmZYSvGdgavI2GM/utRqpejnkoeRnxJt+R53a7kxORKjbyeuOgnx 54UWoAJpzlKOg3CYD3fdEukBnqa1G7wwMWvPNSzaVhQ8z1R2ffL3dtLJvjA6vj+s 7gR7atYoRTsne1wrsIu1dlwsewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLK4ht8j RpRKrl6fcDCMSKOuUOmcMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFWzP4b1RD6FiY2hhb2H3SZeyw56EDrrHWxaQHtB/HGjNiM3uAJPPpkbu40+J ORzIiyKficPKyqFt9nbQrD0eZN6GjfL8fUpjdkLxspkaXKen9KhlAVHZC9f9jlVd RSrqSrdRM2pZT2Y8P8Q0yMyyxu4IvTBLEsM78zieznVHD/HkN9cjd2XM9TI7KEBA Q+xdaFQUAzMfoIMJzCh9fmoW2QCTmNtUmKjlwkZWr8wCJMlN91Y4dqI9zDqXAZ3z 3fbiO3ksFZX+adPwKxfxIRQEI+SIPER2WHS3VypuFcW+Q4Viii182Xlj2yMMf79j sC2KPGTJ1cBmAssq1JIgwgOqjw== -----END CERTIFICATE-----Generated at Wed May 13 11:27:44 2026 by rpki-client