$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: O9FHFM8CLjBUWYuvlM9vmJUclgBcmLa2awZ1v7iXbbs= Subject key identifier: 62:4C:13:51:5B:E7:EE:9F:47:22:DF:41:8F:C8:99:A8:B6:C5:AF:6A Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 2675 Signing time: Tue 12 May 2026 15:43:54 +0000 Manifest this update: Tue 12 May 2026 15:43:53 +0000 Manifest next update: Tue 19 May 2026 15:43:53 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: a0rLQdvEoww1QRHr6tHXc7xRvCMlCbw56CSKBu2IgGs=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: ueVNReZo6meY996fdhGVkYb8RWaLqcwirYFMYjvQObc=) 3: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: sZ7QoJwAQq/VrcUzyBizkuANhsPDhewG/+ZjToDxJjI=) 4: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: +Oja7U4t8Lb0LZ6fvOYpK5rIngmBRvyB89ZXtC/NBOI=) 5: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: toFZWG4e9XZyczzfjTX6cXsPpN+8LUyofu/rvS6jkb0=) 6: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: NZdmLOsnZDNXAMGcOdhI3q4yB4aAOv7p2/cOPmiJe3c=) 7: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: DgtUOB2WpmAwriA13XT1e6HnKLeJSw2MXGDQTJbwll8=) 8: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: RTOGKejUdNcBVaptPhu6f0aYuxe1ymwva6QLNzjueuk=) 9: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 45iqKZ00KElDKa9iNeZor0xEQ36vS3Q2LgeqdVDPoiM=) 10: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: WN9q7rQQBf46/jC5IO4qXkvHnVaxKh9FNi0LfFFu2KQ=) 11: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: NjuhjolNH8v8Btpog7H4mhNstJVuaTFcnmqdSWxxhHE=) 12: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: XYzNXz1bE+l2XGJ3ebIjddpWT2dkbew2K443TSmAkNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10017 (0x2721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: May 12 15:43:53 2026 GMT Not After : May 19 15:43:53 2026 GMT Subject: CN=6a034aba-9ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:0d:98:47:1b:b0:70:c7:5b:0e:c7:d0:9a: 42:f8:10:f4:d5:b4:84:cc:3c:b8:74:1b:a1:83:2d: ec:51:a3:e2:fc:c8:29:d8:97:89:b0:4a:41:cd:2c: df:87:bb:1a:bb:fc:e9:35:f5:4f:8e:6e:30:35:8f: ca:b3:48:cb:04:ac:f2:8e:c5:0d:b8:2c:cb:b9:aa: c7:3e:42:f5:13:eb:51:82:c0:f4:8b:11:18:4e:2f: d3:71:35:54:05:4d:5b:69:40:97:a0:48:db:23:82: 44:ea:49:d4:55:59:2e:9f:6b:06:58:c1:23:dd:51: 55:b0:eb:96:60:20:d6:73:25:e0:cb:35:74:95:89: 85:b1:52:a1:8d:1e:f1:02:ab:e2:fd:4e:ca:ad:55: 7a:5d:2a:f5:1c:79:fa:8f:b2:00:cb:d5:77:a8:37: 63:e1:60:0c:ee:11:85:db:58:12:fd:fe:8f:0f:00: 81:46:b4:99:b9:e7:59:e8:b5:72:1c:12:7b:58:3d: 89:8a:4b:28:77:aa:a3:42:df:53:59:dd:16:e8:78: d2:eb:53:65:16:46:d0:1e:bb:88:e7:a1:68:10:68: 3c:3b:90:0c:ff:20:38:13:d0:b0:7b:7f:aa:40:77: 20:e6:f7:84:d5:f5:b9:b8:74:a9:22:62:de:b8:84: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4C:13:51:5B:E7:EE:9F:47:22:DF:41:8F:C8:99:A8:B6:C5:AF:6A X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:56:ee:47:c2:db:2f:21:e5:3a:78:d9:eb:15:0a:c1:86:6a: 7e:99:67:e6:ce:40:79:f4:83:39:6c:fe:36:6b:a6:ca:44:b1: 76:8f:b6:e8:cb:1b:c8:e3:ca:41:4b:ed:db:92:5a:2b:d4:57: f0:3c:da:21:1d:72:25:f1:65:f8:03:49:14:68:2d:b8:af:f7: 30:22:68:1e:a5:d9:f1:1e:38:07:80:39:22:86:37:c1:80:5e: 4b:75:3f:a1:60:0e:ab:e1:7a:c2:9c:98:f9:b5:6e:9f:32:b1: e6:c5:d2:a4:8d:ff:f1:9f:80:d1:3a:d4:d7:2b:07:0b:bf:08: 1e:31:48:99:d9:66:f9:71:2c:39:74:08:8c:3b:e0:43:c7:8f: e1:31:3c:d9:16:94:3d:a6:5d:6c:38:ea:f1:03:95:30:40:cb: 6b:61:7f:fb:53:cc:7c:e7:99:fe:e0:4e:af:53:e8:e4:ce:a3: b1:a2:91:5f:06:6b:7e:74:a2:d5:1d:69:70:59:fa:d0:ce:56: 01:a7:46:9e:49:c7:a5:67:b4:ce:be:bf:bd:92:da:0f:b1:01: 67:9a:a8:18:c6:9e:c1:38:ce:d2:27:80:90:95:c1:25:b1:b4: 7c:3e:e8:3f:d1:2b:36:1a:61:60:0c:b2:9a:89:cb:46:bd:c1: e8:9d:a1:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjYwNTEyMTU0MzUzWhcNMjYwNTE5MTU0MzUzWjAYMRYwFAYD VQQDEw02YTAzNGFiYS05ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcoNmEcbsHDHWw7H0JpC+BD01bSEzDy4dBuhgy3sUaPi/Mgp2JeJsEpBzSzf h7sau/zpNfVPjm4wNY/Ks0jLBKzyjsUNuCzLuarHPkL1E+tRgsD0ixEYTi/TcTVU BU1baUCXoEjbI4JE6knUVVkun2sGWMEj3VFVsOuWYCDWcyXgyzV0lYmFsVKhjR7x Aqvi/U7KrVV6XSr1HHn6j7IAy9V3qDdj4WAM7hGF21gS/f6PDwCBRrSZuedZ6LVy HBJ7WD2Jiksod6qjQt9TWd0W6HjS61NlFkbQHruI56FoEGg8O5AM/yA4E9Cwe3+q QHcg5veE1fW5uHSpImLeuITZ3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJME1Fb 5+6fRyLfQY/Imai2xa9qMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApFbuR8LbLyHlOnjZ6xUKwYZqfpln5s5AefSDOWz+NmumykSxdo+26MsbyOPK QUvt25JaK9RX8DzaIR1yJfFl+ANJFGgtuK/3MCJoHqXZ8R44B4A5IoY3wYBeS3U/ oWAOq+F6wpyY+bVunzKx5sXSpI3/8Z+A0TrU1ysHC78IHjFImdlm+XEsOXQIjDvg Q8eP4TE82RaUPaZdbDjq8QOVMEDLa2F/+1PMfOeZ/uBOr1Po5M6jsaKRXwZrfnSi 1R1pcFn60M5WAadGnknHpWe0zr6/vZLaD7EBZ5qoGMaewTjO0ieAkJXBJbG0fD7o P9ErNhphYAyymonLRr3B6J2h1w== -----END CERTIFICATE-----Generated at Wed May 13 15:21:59 2026 by rpki-client