$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: kGtZxfb/FDPm5jPD8Eyr86p+ldycXP9olbNoIsYWQAY= Subject key identifier: 0C:29:76:02:36:04:93:3B:06:34:09:7A:B7:CF:96:C5:EB:EC:E9:4E Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0ADA Signing time: Tue 12 May 2026 19:29:07 +0000 Manifest this update: Tue 12 May 2026 19:29:07 +0000 Manifest next update: Tue 19 May 2026 19:29:07 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: vtEk/hSxlc0D2fLYK2EgTDqAAqxx+uXa7fJJ4AsGw1g=) 2: 631E45669D2511F092B08685C4F9AE02.roa (hash: oE0udGN+SutLxt/AfcTk4Go1StJ+DmNSlYRBs9ZP8J0=) 3: 62B22A709D2511F092B08685C4F9AE02.roa (hash: DbJt5uAKex9huMofhvsxlPhtfALGiwZmq+7JtduRU3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: May 12 19:29:07 2026 GMT Not After : May 19 19:29:07 2026 GMT Subject: CN=6a037f83-92ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:19:d8:65:ee:d9:31:2c:96:c2:7a:3c:56: 50:be:d6:be:8d:98:7f:fb:ba:5d:95:bd:5f:9c:99: 7b:cd:ea:b3:c9:bf:96:ba:2a:da:c1:3e:0e:96:e4: 24:a2:25:e6:ac:47:aa:c9:3b:ae:7b:74:51:20:86: 05:c7:d6:e0:70:b2:1d:a7:51:a1:84:2a:3e:e4:1f: 67:90:c8:c9:2f:a4:a0:10:c5:b6:e1:30:41:6a:df: 6d:91:c5:32:07:c2:7a:8b:43:cf:00:df:c2:4b:36: b5:02:56:03:61:cf:04:23:09:90:c4:5e:a7:43:40: e7:b9:7d:c5:ca:09:b9:1b:91:38:ef:a6:48:ac:64: 3e:14:0e:52:18:d7:97:0e:88:44:46:bc:96:7d:0a: 56:44:4e:f9:65:6c:3a:5d:eb:e3:07:dd:1f:65:0f: a4:78:7f:09:3c:09:9d:ed:73:c3:ec:b3:b6:86:bc: de:b4:a1:a1:ef:b2:17:4e:16:43:a9:f4:66:5d:fd: 11:33:47:f7:41:4b:42:26:8a:7d:7b:d0:5a:c6:ac: 35:d2:78:d9:3e:f8:4f:99:41:59:ea:f2:82:b9:a0: 0a:99:22:7a:5f:cf:5f:f8:05:d1:1c:11:f8:4f:04: 23:04:90:b5:64:33:d8:00:40:06:7d:cc:5d:30:ed: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:29:76:02:36:04:93:3B:06:34:09:7A:B7:CF:96:C5:EB:EC:E9:4E X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:13:fe:0c:2a:27:82:5e:97:a9:8a:68:ec:a1:64:81:a5:f6: 97:95:e1:ea:52:2a:c9:ef:ff:33:e3:49:6e:36:23:7b:a8:a0: 5a:58:ed:a9:5d:10:d4:83:fc:1b:68:ef:7d:4d:79:d1:48:25: ff:ed:a8:f6:95:0e:3c:51:45:ce:ca:aa:b6:ae:3c:2b:3e:2d: dc:63:3c:fb:ce:31:16:88:1b:5b:ae:8e:61:fb:bc:0e:4a:0f: 52:6a:d5:e3:80:39:23:5b:a9:64:f5:c9:7a:cb:d9:2d:6e:80: df:0c:ec:54:87:c7:d0:75:64:4d:ca:9c:b4:97:07:16:72:9b: 90:98:be:4a:41:34:f9:e4:c2:67:dc:e8:10:ca:b0:e6:25:8a: 12:ef:5a:84:c2:c2:17:c1:94:ac:15:7d:d8:87:f1:dc:0c:e0: ca:f1:9e:b0:49:73:ea:78:71:a1:c9:f7:0e:70:1a:6e:ab:3a: ee:5a:e0:e9:e0:2f:33:46:33:ed:85:68:cd:3d:ad:f5:8c:0a: fa:5d:2d:68:41:d0:c6:9b:fb:32:5b:6b:14:f3:f4:db:5a:06: 4c:6e:be:1d:4a:45:23:f8:2c:dd:0c:c9:9e:93:a4:95:cc:3b: c2:89:d1:d8:ca:11:05:da:66:13:9b:2a:81:ac:12:44:04:b2: 3a:a8:5d:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjYwNTEyMTkyOTA3WhcNMjYwNTE5MTkyOTA3WjAYMRYwFAYD VQQDEw02YTAzN2Y4My05MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnsZ2GXu2TEslsJ6PFZQvta+jZh/+7pdlb1fnJl7zeqzyb+WuirawT4OluQk oiXmrEeqyTuue3RRIIYFx9bgcLIdp1GhhCo+5B9nkMjJL6SgEMW24TBBat9tkcUy B8J6i0PPAN/CSza1AlYDYc8EIwmQxF6nQ0DnuX3Fygm5G5E476ZIrGQ+FA5SGNeX DohERryWfQpWRE75ZWw6XevjB90fZQ+keH8JPAmd7XPD7LO2hrzetKGh77IXThZD qfRmXf0RM0f3QUtCJop9e9Baxqw10njZPvhPmUFZ6vKCuaAKmSJ6X89f+AXRHBH4 TwQjBJC1ZDPYAEAGfcxdMO3XnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwpdgI2 BJM7BjQJerfPlsXr7OlOMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxP+DCongl6XqYpo7KFkgaX2l5Xh6lIqye//M+NJbjYje6igWljtqV0Q1IP8 G2jvfU150Ugl/+2o9pUOPFFFzsqqtq48Kz4t3GM8+84xFogbW66OYfu8DkoPUmrV 44A5I1upZPXJesvZLW6A3wzsVIfH0HVkTcqctJcHFnKbkJi+SkE0+eTCZ9zoEMqw 5iWKEu9ahMLCF8GUrBV92Ifx3AzgyvGesElz6nhxocn3DnAabqs67lrg6eAvM0Yz 7YVozT2t9YwK+l0taEHQxpv7MltrFPP021oGTG6+HUpFI/gs3QzJnpOklcw7wonR 2MoRBdpmE5sqgawSRASyOqhdWw== -----END CERTIFICATE-----Generated at Wed May 13 01:17:21 2026 by rpki-client