$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: OGxHXaUUGIG4X+UtT+4/HGfv727+LgMiCRvXvGwprLc= Subject key identifier: 7B:D1:2E:13:CA:2B:1B:3A:A5:9E:14:45:C7:A4:E4:A0:C3:55:63:B8 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 7A Signing time: Thu 21 May 2026 07:49:22 +0000 Manifest this update: Thu 21 May 2026 07:49:22 +0000 Manifest next update: Thu 28 May 2026 07:49:22 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: IpYhM6AtHNa3Mi2HRArfEQrstf1km6EOFebHeuW51q4=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: May 21 07:49:22 2026 GMT Not After : May 28 07:49:22 2026 GMT Subject: CN=6a0eb902-ce9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:f6:4c:7b:03:21:93:98:08:e1:84:1b:59: 4e:40:6a:54:ec:97:26:e8:ed:50:8d:97:0d:49:6b: a9:14:81:d5:1e:cb:02:92:95:40:c5:ec:2f:7a:3a: 3d:40:c8:7c:4a:ad:98:73:db:36:a9:49:c9:17:87: 39:f3:b4:fe:2c:b1:4b:56:31:53:8e:07:7f:9b:4b: e6:13:0b:24:fb:f6:99:18:d2:67:ef:78:89:36:b6: 82:54:ae:7c:ac:e5:61:33:ed:9d:23:0e:80:9b:ac: 81:26:d1:3b:6f:0b:a1:44:35:52:d7:6c:05:90:6c: de:58:ac:8c:4b:ca:08:14:4b:ac:25:e1:f4:1c:e5: 98:c2:44:e9:ae:8b:90:42:1c:b7:ec:21:89:42:30: 7c:39:6c:2a:97:0e:75:ed:0a:4e:01:b3:80:17:a9: 03:b1:0c:8e:53:45:0f:dc:ea:e2:09:cc:9d:5f:ad: 51:5b:4f:2f:26:2f:56:98:30:30:65:47:77:e2:49: cf:f2:be:19:dc:0e:cd:57:ec:77:a6:1b:29:d4:26: f7:1d:8d:1f:f5:00:a2:9d:f3:a0:c7:d2:8d:19:24: 61:fd:91:45:30:7a:d6:b0:43:73:80:cb:e6:0f:48: ae:54:de:9d:78:74:13:15:c1:30:a6:e9:89:3f:31: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D1:2E:13:CA:2B:1B:3A:A5:9E:14:45:C7:A4:E4:A0:C3:55:63:B8 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ed:31:92:9b:cf:ce:bd:c3:c8:af:78:f9:e9:0c:b1:3a:15: 5b:0c:e3:3e:ba:d0:e9:8e:5e:36:81:60:a0:3a:98:a2:33:85: 7d:7e:bf:bf:64:95:b8:09:a6:01:d6:8a:43:6c:d7:1f:99:58: 88:59:05:29:ca:ff:7a:b2:03:ba:6c:5d:49:b3:5e:4f:b1:d6: b7:b9:e4:c3:67:ed:49:c3:ee:f3:01:26:9a:25:81:8a:fa:44: 1c:4f:9a:da:79:7f:56:3b:20:74:70:25:35:7a:b7:f7:e8:f9: 55:e5:38:b4:59:ef:82:d3:a9:36:b1:bd:24:10:bf:3d:80:09: cf:16:9d:b3:54:39:7c:bb:58:35:9f:f7:78:53:da:04:ca:31: 90:3f:a3:60:45:28:42:b5:33:1c:63:74:20:91:79:5c:70:ee: 6d:e9:84:0a:07:cc:83:43:e9:d0:f1:d2:e7:84:35:94:7b:69: 30:e2:a0:48:78:4e:8f:c9:51:00:11:16:d6:30:1e:03:44:63: 82:cc:37:c9:59:1e:96:df:d4:27:77:fd:1e:7f:f2:1d:7c:22: b2:51:8a:3f:76:52:5f:08:22:b6:1f:d7:c9:78:8e:92:b1:a0: fd:20:94:28:06:e1:00:a5:c1:6e:d6:00:50:d4:d9:2c:cb:de: e5:22:81:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNjA1MjEwNzQ5MjJaFw0yNjA1MjgwNzQ5MjJaMBgxFjAUBgNV BAMTDTZhMGViOTAyLWNlOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnV/ZMewMhk5gI4YQbWU5AalTslybo7VCNlw1Ja6kUgdUeywKSlUDF7C96Oj1A yHxKrZhz2zapSckXhznztP4ssUtWMVOOB3+bS+YTCyT79pkY0mfveIk2toJUrnys 5WEz7Z0jDoCbrIEm0TtvC6FENVLXbAWQbN5YrIxLyggUS6wl4fQc5ZjCROmui5BC HLfsIYlCMHw5bCqXDnXtCk4Bs4AXqQOxDI5TRQ/c6uIJzJ1frVFbTy8mL1aYMDBl R3fiSc/yvhncDs1X7HemGynUJvcdjR/1AKKd86DH0o0ZJGH9kUUwetawQ3OAy+YP SK5U3p14dBMVwTCm6Yk/MdcpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe9EuE8or GzqlnhRFx6TkoMNVY7gwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAf7TGSm8/OvcPIr3j56QyxOhVbDOM+utDpjl42gWCgOpiiM4V9fr+/ZJW4CaYB 1opDbNcfmViIWQUpyv96sgO6bF1Js15Psda3ueTDZ+1Jw+7zASaaJYGK+kQcT5ra eX9WOyB0cCU1erf36PlV5Ti0We+C06k2sb0kEL89gAnPFp2zVDl8u1g1n/d4U9oE yjGQP6NgRShCtTMcY3QgkXlccO5t6YQKB8yDQ+nQ8dLnhDWUe2kw4qBIeE6PyVEA ERbWMB4DRGOCzDfJWR6W39Qnd/0ef/IdfCKyUYo/dlJfCCK2H9fJeI6SsaD9IJQo BuEApcFu1gBQ1Nksy97lIoFm -----END CERTIFICATE-----Generated at Thu May 21 10:14:20 2026 by rpki-client