$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json) Hash identifier: 43DmpV2Fmg1SSe5zazvpzNivs7f4F5IkC5yclA3yD4M= Subject key identifier: 2B:74:77:90:0F:25:45:E3:39:90:F0:9A:D6:BB:9E:77:7B:06:5C:37 Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft Manifest number: 3E Signing time: Mon 11 May 2026 08:40:57 +0000 Manifest this update: Mon 11 May 2026 08:40:57 +0000 Manifest next update: Mon 18 May 2026 08:40:57 +0000 Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: CNiTHUWG+nEiJDJtRUxeN/ECYOXmAryhrEu5CG53K3w=) 2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: May 11 08:40:57 2026 GMT Not After : May 18 08:40:57 2026 GMT Subject: CN=6a019619-c422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:a9:5c:3c:93:23:17:55:32:4e:57:df:24: 81:f2:93:46:92:a9:e2:ad:82:6a:b5:cf:df:49:3f: 04:bc:48:e1:8a:d8:f3:b8:b4:5a:f0:6c:4c:2e:9f: 9a:d0:fa:21:b0:4c:fa:e2:68:95:54:97:43:8d:95: 7d:9e:d8:56:0e:57:a4:eb:cc:59:40:1a:65:a3:3a: ef:b8:6d:59:0d:64:aa:05:19:d0:56:8b:66:44:f4: 31:d8:03:6c:d3:a8:1a:2c:f5:12:f3:8e:98:58:c8: de:0b:0d:18:7a:17:db:74:3f:26:ef:d3:48:a7:80: a3:e4:b4:24:e4:f0:d4:b5:3d:f0:55:82:50:20:62: 1b:ec:9d:9e:9a:67:6a:0b:5c:13:1c:d0:84:d3:09: 5b:ab:22:90:ab:6b:b3:3e:5e:12:34:ee:ce:4c:e8: c4:3a:ab:6c:18:9f:c9:1d:38:35:07:3d:42:1c:07: 94:58:70:97:27:b0:3d:24:36:b3:9d:83:13:c2:1b: 5c:a3:ad:91:1b:d8:0f:00:db:d9:41:53:da:80:e9: c7:48:76:5c:68:1d:26:ba:a8:05:6c:c8:5f:5d:5b: ed:6f:39:f0:45:40:94:b8:9f:e8:26:97:c5:6f:c2: 90:57:64:9e:0c:6b:3a:98:ba:5d:a1:37:b1:5a:00: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:74:77:90:0F:25:45:E3:39:90:F0:9A:D6:BB:9E:77:7B:06:5C:37 X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e4:23:a1:d8:7a:a7:7a:2b:80:f4:14:0a:07:c4:71:51:17: 1b:94:d1:f4:f7:60:99:c4:12:2b:81:37:2f:d7:0a:52:95:37: 18:14:8e:0d:56:d9:60:9b:7e:75:5d:7f:e8:60:34:e1:02:97: ff:fc:9d:9c:ac:e4:ba:0b:ac:f6:e5:3e:c8:a3:2f:2e:8f:00: a0:66:e1:87:e4:10:88:b5:08:1a:2a:be:6a:bd:dd:94:1b:95: 3d:80:95:d6:38:62:80:16:ea:b4:1f:65:11:12:fc:73:52:34: 1f:e4:6d:15:73:bc:3d:8f:45:d8:33:ed:41:3b:44:9b:32:c2: 2f:c6:64:7b:fd:55:41:55:76:9c:f5:9b:4c:93:c9:5b:c1:9e: b9:d3:92:5d:9e:60:12:93:d5:b7:f1:d0:aa:29:eb:de:aa:5c: 6b:59:5e:28:d4:75:08:aa:b1:9d:75:8f:4b:b8:6b:2e:9e:f1: 11:19:6e:3f:2e:f7:f4:ab:92:1e:d7:42:84:df:d2:ef:5d:85: cd:6f:70:5d:0a:e5:72:94:1e:fe:62:01:c5:34:39:f4:f3:b0: f9:5f:4e:8b:1a:9a:3a:e4:f5:50:c7:a9:e0:a0:c4:03:17:ae: 6f:70:60:37:63:8a:92:90:5c:28:18:61:6d:71:d9:87:1d:cc: 93:5c:f4:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjA1MTEwODQwNTdaFw0yNjA1MTgwODQwNTdaMBgxFjAUBgNV BAMTDTZhMDE5NjE5LWM0MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSRqlcPJMjF1UyTlffJIHyk0aSqeKtgmq1z99JPwS8SOGK2PO4tFrwbEwun5rQ +iGwTPriaJVUl0ONlX2e2FYOV6TrzFlAGmWjOu+4bVkNZKoFGdBWi2ZE9DHYA2zT qBos9RLzjphYyN4LDRh6F9t0Pybv00ingKPktCTk8NS1PfBVglAgYhvsnZ6aZ2oL XBMc0ITTCVurIpCra7M+XhI07s5M6MQ6q2wYn8kdODUHPUIcB5RYcJcnsD0kNrOd gxPCG1yjrZEb2A8A29lBU9qA6cdIdlxoHSa6qAVsyF9dW+1vOfBFQJS4n+gml8Vv wpBXZJ4MazqYul2hN7FaADRrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK3R3kA8l ReM5kPCa1rued3sGXDcwHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QjA5L0YzMDJFNTM0RjRGRTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4 VWVLdzZ0V3BxdFBuQnZVWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBo5COh2HqneiuA9BQKB8RxURcblNH092CZxBIrgTcv1wpSlTcYFI4NVtlgm351 XX/oYDThApf//J2crOS6C6z25T7Ioy8ujwCgZuGH5BCItQgaKr5qvd2UG5U9gJXW OGKAFuq0H2UREvxzUjQf5G0Vc7w9j0XYM+1BO0SbMsIvxmR7/VVBVXac9ZtMk8lb wZ6505JdnmASk9W38dCqKeveqlxrWV4o1HUIqrGddY9LuGsunvERGW4/Lvf0q5Ie 10KE39LvXYXNb3BdCuVylB7+YgHFNDn087D5X06LGpo65PVQx6ngoMQDF65vcGA3 Y4qSkFwoGGFtcdmHHcyTXPTZ -----END CERTIFICATE-----Generated at Wed May 13 04:07:23 2026 by rpki-client