$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: reBPs0oIC6sMRnJOq6E3hc+R1vsOfYJM/O9nDpW0+ro= Subject key identifier: 09:3F:E4:BA:23:8F:1F:10:F2:44:0E:F1:3B:A3:25:C7:D4:56:EC:68 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: BE Signing time: Mon 11 May 2026 07:30:12 +0000 Manifest this update: Mon 11 May 2026 07:30:11 +0000 Manifest next update: Mon 18 May 2026 07:30:11 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: q2me8LMvXAGqRHazlvrC3rdSWj/6Sw6S2LuRsaatfnY=) 2: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 3: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 4: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 5: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) 6: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 7: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: pxyEkBwPYXvAD+2QjsKqnPjRJ2vw6CaCkMBO2KcYyvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: May 11 07:30:11 2026 GMT Not After : May 18 07:30:11 2026 GMT Subject: CN=6a018584-042f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:3e:84:12:65:a9:f0:5a:fe:7f:78:4d:4e: 92:e6:d4:a4:61:62:56:7f:26:e2:cf:eb:ab:9d:2b: 3a:45:21:9c:13:31:37:99:f8:c3:10:80:20:8a:d1: 12:ab:89:27:ef:46:60:53:f1:7b:5d:e2:63:5d:a3: 7c:39:ba:c7:6a:27:87:8f:55:43:ab:58:ed:93:c3: 3e:46:ab:5e:d0:f7:de:2e:a8:46:6c:66:7a:4c:51: a6:f7:d9:15:af:eb:02:fa:70:ce:53:7a:66:ad:1b: e2:c9:a2:5b:d1:6e:28:fc:18:63:28:ee:d5:1d:25: 2b:eb:96:b8:21:6c:b1:5c:9b:ab:b2:83:45:32:47: 8e:55:28:39:fe:ad:10:5a:ca:38:c1:2a:c2:57:c2: a6:e8:c4:b0:2d:7b:b8:8e:d8:61:0e:09:4d:4c:ad: a9:70:ab:90:ed:39:3c:d9:ac:52:b5:68:ee:99:5e: de:5c:01:9f:3b:f0:95:57:8e:40:8b:ba:6a:3a:f3: c1:01:a0:40:f2:9b:6d:3e:ab:8b:b3:e1:d1:7e:8d: 4b:64:d3:9a:cc:3a:e6:59:85:90:3f:60:83:51:29: 55:3a:27:4a:e9:96:5a:ae:c2:f2:5b:fa:99:9c:92: 0d:88:4d:8e:0c:b2:12:89:bb:bf:8b:23:89:a0:9f: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3F:E4:BA:23:8F:1F:10:F2:44:0E:F1:3B:A3:25:C7:D4:56:EC:68 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:02:42:f6:01:88:8b:bd:4b:8e:ec:d9:1f:34:47:07:7a:e3: 16:78:19:01:5e:84:a7:62:e7:62:e1:bf:f3:b1:4d:14:1a:b8: b7:26:22:06:a8:fc:2b:8a:aa:cb:7f:cd:71:d2:24:1b:79:d5: 96:3a:65:a8:0d:45:aa:87:b5:63:3c:c0:d6:55:51:d6:08:91: 0c:d0:17:77:1f:ed:5b:0f:99:f4:9d:9e:e8:75:2e:25:e0:4f: 72:d9:e8:40:45:e1:08:f0:46:65:70:6f:9d:0a:9d:21:69:27: dc:8c:48:99:d8:7a:81:5c:6b:35:fb:ac:92:e6:c4:c7:f5:55: 15:b3:8f:f0:d9:b4:3e:c1:05:82:8a:44:02:4c:4d:60:fb:9e: 17:83:3e:55:54:39:b5:32:4b:6f:4a:dc:2d:89:37:65:a5:c4: 78:58:a7:19:2f:06:80:d6:ee:a4:05:df:90:ae:54:1b:74:1c: 33:b8:6d:77:98:3d:c0:a5:fb:59:50:55:0e:bc:27:38:71:52: 71:42:7c:64:7b:1f:13:7b:69:c1:d9:19:c2:73:1e:8e:a4:e9: de:56:fe:3b:ce:79:26:d4:43:4b:5f:0a:ad:08:e2:9b:8f:7d: af:a2:f4:87:63:60:07:3c:4a:27:2a:e5:b8:64:70:37:10:dd: 23:d3:d1:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwNTExMDczMDExWhcNMjYwNTE4MDczMDExWjAYMRYwFAYD VQQDEw02YTAxODU4NC0wNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJc+hBJlqfBa/n94TU6S5tSkYWJWfybiz+urnSs6RSGcEzE3mfjDEIAgitES q4kn70ZgU/F7XeJjXaN8ObrHaieHj1VDq1jtk8M+Rqte0PfeLqhGbGZ6TFGm99kV r+sC+nDOU3pmrRviyaJb0W4o/BhjKO7VHSUr65a4IWyxXJursoNFMkeOVSg5/q0Q Wso4wSrCV8Km6MSwLXu4jthhDglNTK2pcKuQ7Tk82axStWjumV7eXAGfO/CVV45A i7pqOvPBAaBA8pttPquLs+HRfo1LZNOazDrmWYWQP2CDUSlVOidK6ZZarsLyW/qZ nJINiE2ODLISibu/iyOJoJ8MWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk/5Loj jx8Q8kQO8TujJcfUVuxoMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIwJC9gGIi71LjuzZHzRHB3rjFngZAV6Ep2LnYuG/87FNFBq4tyYiBqj8K4qq y3/NcdIkG3nVljplqA1Fqoe1YzzA1lVR1giRDNAXdx/tWw+Z9J2e6HUuJeBPctno QEXhCPBGZXBvnQqdIWkn3IxImdh6gVxrNfuskubEx/VVFbOP8Nm0PsEFgopEAkxN YPueF4M+VVQ5tTJLb0rcLYk3ZaXEeFinGS8GgNbupAXfkK5UG3QcM7htd5g9wKX7 WVBVDrwnOHFScUJ8ZHsfE3tpwdkZwnMejqTp3lb+O855JtRDS18KrQjim499r6L0 h2NgBzxKJyrluGRwNxDdI9PRFg== -----END CERTIFICATE-----Generated at Wed May 13 05:07:08 2026 by rpki-client