$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: XVrVxit32JcFjtR13dEvD3jEblwnvKNqOzMkbKZfkXs= Subject key identifier: 01:83:B7:DA:9E:5E:7C:D9:DA:E4:36:8F:66:EA:0D:16:99:E0:2D:BE Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 029B Signing time: Wed 13 May 2026 01:41:42 +0000 Manifest this update: Wed 13 May 2026 01:41:41 +0000 Manifest next update: Wed 20 May 2026 01:41:41 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: wGijZsnELX1GM627sEPbaWlzCDyUWrW2SkWtKGxF6fs=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: mfyyZsTnZSgcx20FOWESFBLlMkoZEqoTypZc1yf3CyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: May 13 01:41:41 2026 GMT Not After : May 20 01:41:41 2026 GMT Subject: CN=6a03d6d5-28e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:2a:da:16:00:c3:9a:61:eb:7a:99:ed:70: bd:c9:d6:b0:50:38:fc:c0:cb:32:d4:cf:7a:bb:0e: ad:89:0e:24:7d:00:24:78:d1:d7:ef:59:1e:a8:bb: 13:99:0d:42:31:8b:97:18:4a:27:5b:74:0c:87:0b: d2:17:69:27:e8:72:40:64:c5:f4:c7:63:f1:26:9d: d6:78:40:f8:7a:b3:61:cc:00:90:bb:0f:c1:1c:25: 99:fc:26:30:17:70:a0:a8:8f:6f:45:46:93:07:78: 33:e7:f4:44:73:0c:73:85:dd:84:ba:eb:5b:60:b1: 9f:f1:af:6b:3e:9c:6f:69:01:d0:d0:7d:48:b8:2f: 50:59:37:0f:d6:81:33:ed:77:2b:99:bc:f8:60:65: c5:f8:16:ad:b0:df:b9:93:f4:d4:fe:0b:7b:6a:6b: d0:f8:aa:47:ee:9f:43:a8:00:86:32:4d:5c:c8:6a: 3c:b6:21:0c:b9:ed:28:af:59:0e:39:03:8a:1b:76: 54:e0:a9:c7:90:1f:ab:3c:43:19:7d:85:03:f1:70: 07:ef:d8:59:dc:26:a0:ce:18:8d:7f:f9:02:3e:3b: d7:0c:4b:83:3c:21:e7:0c:71:4f:34:55:61:92:d5: 37:16:9e:9b:47:73:b2:34:52:33:05:33:c2:c2:14: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:83:B7:DA:9E:5E:7C:D9:DA:E4:36:8F:66:EA:0D:16:99:E0:2D:BE X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8c:08:a8:dd:5f:dc:76:36:90:18:f2:c1:66:8e:1c:06:b5: 88:83:27:f8:41:07:ef:2f:a7:c8:0a:6f:a7:2e:50:7d:62:23: 4e:06:78:53:73:60:f0:d3:92:2d:ed:15:3d:d0:a7:6a:9b:cf: 7d:17:41:73:86:fc:a6:b6:b9:34:54:90:d4:bb:dd:57:9f:db: 64:45:8c:7e:11:dc:05:41:ca:a7:82:05:16:5f:5f:9e:f1:48: 4d:46:26:d9:69:e5:8e:cc:34:50:77:b3:d9:21:93:11:57:51: f9:be:a2:33:a2:33:d0:f5:f2:b3:3d:97:29:b3:a8:be:5e:6f: 4e:8b:ca:07:62:8d:2b:78:ce:21:ed:36:2c:7e:23:90:fa:49: a5:fb:9e:ea:83:9b:90:49:55:51:5a:f0:29:68:e7:73:99:41: d1:37:09:68:28:1e:b7:cc:96:c2:b0:ba:7d:89:df:28:85:17: 55:b1:d3:0e:94:e9:c6:ce:8b:f7:29:1f:6c:bb:eb:4c:0d:5f: 6e:b9:98:a8:bd:96:d3:69:82:42:ec:40:4b:88:94:c5:2a:cb: fa:10:39:d0:97:cf:8e:d7:e7:09:4c:ae:66:c2:11:21:5a:f5: 59:ad:a9:32:87:f6:50:66:2f:88:98:9b:45:5d:41:ca:db:92: 8f:2d:ee:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjYwNTEzMDE0MTQxWhcNMjYwNTIwMDE0MTQxWjAYMRYwFAYD VQQDEw02YTAzZDZkNS0yOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0gq2hYAw5ph63qZ7XC9ydawUDj8wMsy1M96uw6tiQ4kfQAkeNHX71keqLsT mQ1CMYuXGEonW3QMhwvSF2kn6HJAZMX0x2PxJp3WeED4erNhzACQuw/BHCWZ/CYw F3CgqI9vRUaTB3gz5/REcwxzhd2EuutbYLGf8a9rPpxvaQHQ0H1IuC9QWTcP1oEz 7Xcrmbz4YGXF+BatsN+5k/TU/gt7amvQ+KpH7p9DqACGMk1cyGo8tiEMue0or1kO OQOKG3ZU4KnHkB+rPEMZfYUD8XAH79hZ3CagzhiNf/kCPjvXDEuDPCHnDHFPNFVh ktU3Fp6bR3OyNFIzBTPCwhRObQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGDt9qe XnzZ2uQ2j2bqDRaZ4C2+MB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARYwIqN1f3HY2kBjywWaOHAa1iIMn+EEH7y+nyApvpy5QfWIjTgZ4U3Ng8NOS Le0VPdCnapvPfRdBc4b8pra5NFSQ1LvdV5/bZEWMfhHcBUHKp4IFFl9fnvFITUYm 2Wnljsw0UHez2SGTEVdR+b6iM6Iz0PXysz2XKbOovl5vTovKB2KNK3jOIe02LH4j kPpJpfue6oObkElVUVrwKWjnc5lB0TcJaCget8yWwrC6fYnfKIUXVbHTDpTpxs6L 9ykfbLvrTA1fbrmYqL2W02mCQuxAS4iUxSrL+hA50JfPjtfnCUyuZsIRIVr1Wa2p Mof2UGYviJibRV1BytuSjy3uWg== -----END CERTIFICATE-----Generated at Wed May 13 14:35:18 2026 by rpki-client