$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: n5NMKciou9vU1o6NL1YkJF+AOUFJ+V6n49QyWhp7LUs= Subject key identifier: 47:C6:CA:8F:76:19:06:D5:E8:75:3A:55:01:F2:09:D9:83:1C:BA:DF Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0BE2 Signing time: Tue 12 May 2026 18:57:54 +0000 Manifest this update: Tue 12 May 2026 18:57:53 +0000 Manifest next update: Tue 19 May 2026 18:57:53 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: HSM/KExbVHNPI3N6Cq377iiQPeJ3VueGo7pJfMTnzLo=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: May 12 18:57:53 2026 GMT Not After : May 19 18:57:53 2026 GMT Subject: CN=6a037832-4e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:5b:e8:50:44:3c:6a:ba:0f:d2:cb:1f:21: fc:62:17:e2:68:39:49:26:e2:fc:55:ec:24:2e:31: 51:ec:98:b9:25:70:a6:14:78:0c:a2:84:5e:6e:75: fa:62:df:af:d7:08:a8:07:b8:14:54:d1:b3:bc:f3: 42:45:cc:1d:4a:8b:77:06:65:27:d3:f3:46:bb:a3: d3:29:5e:0b:2a:6a:d8:69:bf:8e:63:96:9e:44:ba: 6c:d2:ce:2d:81:06:19:0e:5e:6f:10:11:7e:3b:dd: 60:a7:f4:47:9d:7e:a5:c6:36:a4:71:bd:d0:12:69: 66:22:e1:ba:83:72:7e:51:61:71:77:10:6c:35:d7: 95:6f:f6:e5:c4:92:c9:bf:87:c4:96:5d:88:7c:bd: 53:a7:ba:f6:7e:32:cf:f1:78:cf:45:1d:ba:0d:33: 7d:03:9d:2d:2e:bd:cd:1d:a5:16:bd:61:d5:da:69: d5:79:17:a8:d2:4b:8a:82:94:78:16:5d:ff:56:38: 60:82:f0:86:8a:a0:47:d8:c7:c1:fb:61:73:22:3f: e8:7c:92:58:eb:31:99:2f:ae:f5:e0:60:35:cd:d2: f6:cb:0d:a0:b7:f9:25:06:55:12:9b:ae:1f:52:7c: a0:f3:3d:89:76:96:9e:53:d8:67:f4:31:ba:f3:4e: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C6:CA:8F:76:19:06:D5:E8:75:3A:55:01:F2:09:D9:83:1C:BA:DF X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b2:0b:f2:ef:17:6e:d3:b9:51:b1:0b:fe:52:0d:f5:8f:0b: 9a:15:3c:ec:05:41:0c:69:c1:9a:c0:e5:35:e8:0c:7f:54:fb: 67:c0:96:dd:ae:e6:63:f0:90:8e:84:9f:57:a2:74:e4:80:3c: 7a:8f:de:25:9b:93:88:90:76:92:40:b1:cf:b0:2f:cf:f6:36: d3:57:f3:58:d8:ba:8a:a9:23:31:c9:d9:b9:a5:bd:7b:3c:b5: 64:08:a3:01:22:0b:2b:fc:3e:f6:70:29:90:b8:b6:df:c5:2a: 59:fd:ef:3a:a6:f1:31:c4:f6:5c:90:ac:46:22:ca:b3:f7:87: 79:9b:74:fb:64:ae:06:2a:89:62:af:d6:1f:62:5e:aa:11:49: 95:07:1d:3e:05:2c:bf:e8:a0:25:55:15:b1:8e:77:25:c4:7a: b1:dd:9f:ce:3e:d8:ee:23:1e:68:06:21:94:d2:6e:db:db:23: 98:5c:c4:55:70:ee:56:03:23:42:72:41:da:07:e1:28:e5:b2: a9:8a:28:aa:f6:74:5b:49:db:52:b3:54:69:73:b3:22:f2:75: 4d:ba:25:25:14:9b:76:f4:27:e1:61:98:fd:a3:74:26:8f:21: f7:bc:b3:0b:24:67:89:dc:8f:a0:c9:15:b6:9e:99:6b:0d:55: b9:52:cf:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjYwNTEyMTg1NzUzWhcNMjYwNTE5MTg1NzUzWjAYMRYwFAYD VQQDEw02YTAzNzgzMi00ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Dhb6FBEPGq6D9LLHyH8YhfiaDlJJuL8VewkLjFR7Ji5JXCmFHgMooRebnX6 Yt+v1wioB7gUVNGzvPNCRcwdSot3BmUn0/NGu6PTKV4LKmrYab+OY5aeRLps0s4t gQYZDl5vEBF+O91gp/RHnX6lxjakcb3QEmlmIuG6g3J+UWFxdxBsNdeVb/blxJLJ v4fEll2IfL1Tp7r2fjLP8XjPRR26DTN9A50tLr3NHaUWvWHV2mnVeReo0kuKgpR4 Fl3/VjhggvCGiqBH2MfB+2FzIj/ofJJY6zGZL6714GA1zdL2yw2gt/klBlUSm64f Unyg8z2JdpaeU9hn9DG6805XNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfGyo92 GQbV6HU6VQHyCdmDHLrfMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABrIL8u8XbtO5UbEL/lIN9Y8LmhU87AVBDGnBmsDlNegMf1T7Z8CW3a7mY/CQ joSfV6J05IA8eo/eJZuTiJB2kkCxz7Avz/Y201fzWNi6iqkjMcnZuaW9ezy1ZAij ASILK/w+9nApkLi238UqWf3vOqbxMcT2XJCsRiLKs/eHeZt0+2SuBiqJYq/WH2Je qhFJlQcdPgUsv+igJVUVsY53JcR6sd2fzj7Y7iMeaAYhlNJu29sjmFzEVXDuVgMj QnJB2gfhKOWyqYooqvZ0W0nbUrNUaXOzIvJ1TbolJRSbdvQn4WGY/aN0Jo8h97yz CyRnidyPoMkVtp6Zaw1VuVLPeQ== -----END CERTIFICATE-----Generated at Wed May 13 04:59:21 2026 by rpki-client