$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json) Hash identifier: MUryb6F+JLrgkF+wdJHRNVC0z8W1rv/6SgV5Pw0WBnE= Subject key identifier: 2D:86:48:1C:A8:ED:59:A5:FF:AD:44:62:23:59:4D:1F:7B:C8:68:D4 Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft Manifest number: 0887 Signing time: Wed 20 May 2026 20:40:08 +0000 Manifest this update: Wed 20 May 2026 20:40:08 +0000 Manifest next update: Wed 27 May 2026 20:40:08 +0000 Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: mIh+1QztbRPxTN3+KF9b9nqeR1rwqNMlqMaAP/ey4dE=) 2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: May 20 20:40:08 2026 GMT Not After : May 27 20:40:08 2026 GMT Subject: CN=6a0e1c28-cc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:c4:55:5f:62:e4:f5:f3:3d:8b:3d:97:28: c0:04:78:8b:a6:4d:1f:71:8f:41:dc:a4:1c:80:25: 37:7f:16:7f:e8:71:d6:56:55:0e:16:60:df:b2:92: 98:e0:62:fc:3d:77:e9:7d:1a:4b:f7:01:50:40:24: d5:a7:1c:33:92:67:43:9f:19:e0:b8:c2:1c:51:43: a0:19:33:dd:c1:2b:8b:22:e8:99:cb:7b:e3:44:10: ed:1c:70:c7:a5:67:94:7a:e7:04:9e:42:81:55:53: 39:ec:8f:e0:5e:9e:c8:c0:8a:7f:23:36:de:b1:56: ae:1b:89:cd:f8:19:92:e9:05:c5:36:52:f6:9b:54: 53:d9:4d:24:dd:a8:74:c6:74:53:b6:c4:70:b0:f1: 9d:06:43:07:93:66:c4:1c:ea:2c:54:41:a3:71:f2: b3:69:8a:6d:8f:bf:2f:da:87:7a:99:41:f6:27:39: b9:d1:c9:7e:a5:7e:f2:2e:98:27:90:20:d0:44:46: c2:60:ca:c2:3b:27:33:20:c5:79:78:35:60:0b:13: a3:02:17:a9:9a:09:29:63:eb:b2:05:98:ad:ec:fd: bd:4b:81:86:2a:c6:e1:86:03:55:b9:35:0c:8b:dd: 13:8d:97:5a:5c:87:5e:21:f3:4b:69:d9:bc:26:ed: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:48:1C:A8:ED:59:A5:FF:AD:44:62:23:59:4D:1F:7B:C8:68:D4 X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:59:79:3c:55:a7:c5:8d:15:f8:a9:57:3c:ce:63:fa:f6:48: c7:7a:6a:83:d7:a6:2d:79:4e:72:14:63:18:1c:a0:64:58:1e: 2e:e8:0f:57:ab:2e:24:4a:ce:e4:e5:50:6e:08:6e:b1:93:bb: 8b:fb:6e:af:23:90:8c:1f:36:32:e7:ce:7c:9a:d3:fa:c4:10: 61:e3:be:20:22:25:a1:51:27:51:bc:9d:b8:59:b4:4c:33:7a: e6:41:71:77:6b:c6:af:6b:78:5f:7d:8d:fb:70:5f:1d:b5:9e: c0:41:e9:ae:cf:5e:6a:04:2a:8f:8a:9f:8a:bc:0c:1c:2c:08: 99:bb:ac:0f:d8:fe:be:fb:f2:23:60:7d:5c:46:81:7e:3b:80: 6e:37:43:eb:4b:35:8f:b7:1e:cf:57:6d:02:92:a1:5c:36:cb: aa:c3:96:53:db:ac:8e:da:72:3f:80:64:8b:d4:9c:f2:0c:23: fe:ed:f5:f4:94:46:5c:b7:47:2e:8e:13:22:81:0f:be:82:ed: f3:93:fa:f3:32:0c:66:93:95:50:c7:43:2d:38:de:a1:0c:00: e4:d7:a2:73:8f:93:bd:ad:ee:b8:41:f0:6d:f7:56:3a:08:b5: cf:2e:ac:04:77:95:0c:3f:c5:48:76:ad:a8:53:14:2d:84:81: ce:0e:77:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjYwNTIwMjA0MDA4WhcNMjYwNTI3MjA0MDA4WjAYMRYwFAYD VQQDEw02YTBlMWMyOC1jYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt/EVV9i5PXzPYs9lyjABHiLpk0fcY9B3KQcgCU3fxZ/6HHWVlUOFmDfspKY 4GL8PXfpfRpL9wFQQCTVpxwzkmdDnxnguMIcUUOgGTPdwSuLIuiZy3vjRBDtHHDH pWeUeucEnkKBVVM57I/gXp7IwIp/IzbesVauG4nN+BmS6QXFNlL2m1RT2U0k3ah0 xnRTtsRwsPGdBkMHk2bEHOosVEGjcfKzaYptj78v2od6mUH2Jzm50cl+pX7yLpgn kCDQREbCYMrCOyczIMV5eDVgCxOjAhepmgkpY+uyBZit7P29S4GGKsbhhgNVuTUM i90TjZdaXIdeIfNLadm8Ju1KKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2GSByo 7Vml/61EYiNZTR97yGjUMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp S3hISXgtbEs2d1FPM1dxd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO1l5PFWnxY0V+KlXPM5j+vZIx3pqg9emLXlOchRjGBygZFgeLugPV6suJErO 5OVQbghusZO7i/turyOQjB82MufOfJrT+sQQYeO+ICIloVEnUbyduFm0TDN65kFx d2vGr2t4X32N+3BfHbWewEHprs9eagQqj4qfirwMHCwImbusD9j+vvvyI2B9XEaB fjuAbjdD60s1j7cez1dtApKhXDbLqsOWU9usjtpyP4Bki9Sc8gwj/u319JRGXLdH Lo4TIoEPvoLt85P68zIMZpOVUMdDLTjeoQwA5Neic4+Tva3uuEHwbfdWOgi1zy6s BHeVDD/FSHatqFMULYSBzg53yg== -----END CERTIFICATE-----Generated at Thu May 21 11:58:44 2026 by rpki-client