$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.mft (raw, json) Hash identifier: fFkfB1blIjdxhOm+oeAY1SySTveGkY51flcXZ+t5Y94= Subject key identifier: 1F:93:71:67:9D:26:41:F3:25:CA:5F:05:0B:BF:58:A1:C2:30:9E:F1 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft Manifest number: 1C Signing time: Thu 21 May 2026 07:39:02 +0000 Manifest this update: Thu 21 May 2026 07:39:00 +0000 Manifest next update: Thu 28 May 2026 07:39:00 +0000 Files and hashes: 1: 7DaNWC4Rd-CZFeM_RO253k7zLFI.crl (hash: N/9BDaGMvJPNKcY2hwBGFklyTM0fjGNQpycQFB+1f64=) 2: 04CC57B2541011F1884CD63093833773.roa (hash: 6kqlAupcd6adVeI2fau6YBcqllS4KzKqITZ4pQWC2JU=) 3: 05684FB4541011F1884CD63093833773.roa (hash: yD58uqoazC2s+Sv0Qiq7WKw5nDFhLfiguBaXgnz9iEM=) 4: FFF1E08E502E11F198DE5D87C9833773.roa (hash: epsRKPeN2DsUj5PvFuEX3GKPxB2TNVkVQCWsUlIKFIE=) 5: 7477CBBE54E211F18AED7F659B833773.roa (hash: 8BMPa9lX6lad58IkwY6kbmSLfADfQn5UQZc/d7Fw8t4=) 6: 06A10448541011F1884CD63093833773.roa (hash: 6HuRjlixmtBwUNgYtybQszEYe0FzlDiikZKlp6t1LjA=) 7: B987F59254E411F1A8787FAE9C833773.roa (hash: gvmEeTCPFjKCI17kJKuZFDvUtGT6zAORKlMeY/KtA00=) 8: B872988654D711F1992D5F9296833773.roa (hash: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=) 9: 05FFB28C541011F1884CD63093833773.roa (hash: nZNbTG9D57VNDEfS92o6SlQ1C8tNAf0Dyyn1HciDklo=) 10: 4CF8B176528E11F1AB5B86DACA833773.roa (hash: 0h5ie0wC/CKq4QIqr24iarbu+tQ7UIp7l2HNC//MJ8g=) 11: 74FC2C3854E211F18AED7F659B833773.roa (hash: DWFQ8tlseU77C+z/L0t2R4JvWmP9WGmE3xRsukb2cr0=) 12: BA8443D854E411F1A8787FAE9C833773.roa (hash: S61KvmMGetAArR3tvbC65AtQoB4AV6hZSTQy2LRVhMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: May 21 07:39:00 2026 GMT Not After : May 28 07:39:00 2026 GMT Subject: CN=6a0eb695-4bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:5e:c3:20:11:46:b7:f8:84:03:12:82:c2: 87:00:62:6a:49:09:96:36:25:df:5e:29:db:7e:fb: cc:98:b6:22:72:8d:11:9a:0d:e4:c5:c0:72:65:76: f1:d5:b5:33:97:06:02:47:e5:a1:31:7c:5d:2a:71: 15:e0:b8:62:fc:93:1b:f1:4f:66:e7:6b:be:d2:4e: c7:c4:8f:aa:e7:7c:c1:17:68:0b:e3:a1:59:39:92: 19:8f:63:12:18:d1:40:94:fc:b3:a4:59:b0:37:49: a3:95:6e:e9:e9:c6:36:41:24:e5:f5:9f:aa:f0:13: 22:48:31:6b:b0:92:8c:7e:0c:74:19:73:1b:96:ab: 1f:74:35:6a:0d:69:5b:b4:b6:91:e6:cb:c7:c7:7e: 32:14:f1:b7:7f:49:7a:41:32:71:ac:47:83:13:e5: d2:d6:80:21:14:f2:61:cc:e3:6f:cb:dc:ea:a3:40: 2f:fa:7f:c0:49:d8:b5:1b:c4:54:3c:b0:4b:a8:a4: 2e:70:55:38:9e:76:32:66:75:63:0f:a0:8d:55:c3: 79:4c:5d:a9:d3:88:86:b9:8f:5b:0e:5d:94:3a:98: f5:90:d4:1a:8f:ad:b2:49:c1:ef:18:0c:56:d7:04: 5f:65:0f:fe:7a:e1:02:3f:16:c3:3e:f0:b9:d2:08: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:71:67:9D:26:41:F3:25:CA:5F:05:0B:BF:58:A1:C2:30:9E:F1 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:69:5c:8e:0b:4d:e9:6f:fb:a4:40:34:48:33:71:36:bd:23: 79:00:e0:19:98:65:56:e3:6b:24:1a:90:33:c0:a0:14:09:cb: 8b:57:c8:b3:13:0c:c7:ce:f3:39:b3:73:68:54:95:e1:d4:1f: 23:72:bf:c2:a2:68:80:06:ae:f8:25:9a:15:a3:9f:61:6d:f1: 22:62:7f:e4:63:06:66:92:76:50:25:ab:3a:03:21:ca:74:1e: 38:09:ae:02:95:f7:8a:1f:a5:ca:71:5d:65:b0:0a:b6:56:28: 37:09:24:e2:bb:1a:c7:51:40:3d:0c:f4:5c:6d:22:03:ed:94: 2a:6c:2a:54:24:db:74:30:c9:4a:ae:fc:4e:e9:29:c5:fd:1a: 46:f2:35:65:62:b7:77:55:4a:61:b5:2f:3e:f6:1d:11:33:ef: ab:92:a2:56:95:3c:e7:ae:ac:c7:96:4c:0f:f5:7f:e4:86:ab: 1c:7c:d1:b1:95:d1:60:b0:56:22:b0:1a:9b:cc:90:27:0d:25: e5:8d:5e:c1:02:bd:ff:bc:92:f9:78:85:c8:b0:66:19:44:f3: 48:3c:5e:bd:8b:46:51:06:10:64:ad:4a:f1:1e:34:62:1a:03: 6f:6f:ba:2d:33:26:92:b6:09:e1:06:58:c9:d1:e3:d6:af:bd: 5a:11:95:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njc4QzExMC8GA1UEBRMoRUMzNjhENTgyRTExNzdFMDk5MTVFMzNGNDRFREI5REU0 RUYzMkM1MjAeFw0yNjA1MjEwNzM5MDBaFw0yNjA1MjgwNzM5MDBaMBgxFjAUBgNV BAMTDTZhMGViNjk1LTRiY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpDF7DIBFGt/iEAxKCwocAYmpJCZY2Jd9eKdt++8yYtiJyjRGaDeTFwHJldvHV tTOXBgJH5aExfF0qcRXguGL8kxvxT2bna77STsfEj6rnfMEXaAvjoVk5khmPYxIY 0UCU/LOkWbA3SaOVbunpxjZBJOX1n6rwEyJIMWuwkox+DHQZcxuWqx90NWoNaVu0 tpHmy8fHfjIU8bd/SXpBMnGsR4MT5dLWgCEU8mHM42/L3OqjQC/6f8BJ2LUbxFQ8 sEuopC5wVTiedjJmdWMPoI1Vw3lMXanTiIa5j1sOXZQ6mPWQ1BqPrbJJwe8YDFbX BF9lD/564QI/FsM+8LnSCLJHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH5NxZ50m QfMlyl8FC79YocIwnvEwHwYDVR0jBBgwFoAU7DaNWC4Rd+CZFeM/RO253k7zLFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NzhDLzNCREUxRDZFNEYy QzExRjFCQkUyRjZFQTlCRUU1MjhFLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvN0RhTldDNFJkLUNaRmVNX1JPMjUzazd6TEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 NzhDLzNCREUxRDZFNEYyQzExRjFCQkUyRjZFQTlCRUU1MjhFLzdEYU5XQzRSZC1D WkZlTV9STzI1M2s3ekxGSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdaVyOC03pb/ukQDRIM3E2vSN5AOAZmGVW42skGpAzwKAUCcuLV8izEwzHzvM5 s3NoVJXh1B8jcr/ComiABq74JZoVo59hbfEiYn/kYwZmknZQJas6AyHKdB44Ca4C lfeKH6XKcV1lsAq2Vig3CSTiuxrHUUA9DPRcbSID7ZQqbCpUJNt0MMlKrvxO6SnF /RpG8jVlYrd3VUphtS8+9h0RM++rkqJWlTznrqzHlkwP9X/khqscfNGxldFgsFYi sBqbzJAnDSXljV7BAr3/vJL5eIXIsGYZRPNIPF69i0ZRBhBkrUrxHjRiGgNvb7ot MyaStgnhBljJ0ePWr71aEZUe -----END CERTIFICATE-----Generated at Thu May 21 12:14:30 2026 by rpki-client