$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: BVqPmWnXfaU7fcUaDEexSSO03+CTRwo9KpiPXOlysbs= Subject key identifier: FC:90:87:DF:D9:6C:25:28:3A:F9:9D:67:02:6B:26:22:FA:F1:11:7F Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A7A Signing time: Wed 20 May 2026 19:44:35 +0000 Manifest this update: Wed 20 May 2026 19:44:35 +0000 Manifest next update: Wed 27 May 2026 19:44:35 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 0HxWSsPb9bteRU8BVk1zF34xXPAukomnTyDCwN9YvN4=) 2: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: wJPqhmG5nuh5KFi1IkyAbZsHhxJ058Q16pbeljhvYhk=) 3: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: y7NLJGyijlqNL+Ovztz61BvAvfEsk7Q6tTmB6qAz1wY=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: aRixXq7ui35CkBZ1WtgzAKTz2bGqo7mI3c5dVkJhwD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: May 20 19:44:35 2026 GMT Not After : May 27 19:44:35 2026 GMT Subject: CN=6a0e0f23-5c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:f0:4e:24:fd:e3:67:cc:0f:cc:4b:50:0b: 13:94:00:e8:73:73:57:3e:0c:30:0e:6f:42:4f:b8: e4:f2:77:f5:c5:f2:62:7b:65:14:9a:98:38:e1:40: d0:ed:37:cf:dd:9c:c7:66:62:14:72:a6:81:60:bd: 59:42:99:ad:40:92:76:e0:57:88:85:ec:1f:37:b4: 78:68:6a:44:ea:67:45:e9:aa:3c:3b:06:69:f2:40: d4:73:04:de:cf:f8:cd:ea:20:90:ab:60:56:5f:de: 79:16:fb:11:99:07:c9:85:3c:6e:e8:eb:d4:22:e9: e1:e9:1d:9d:73:ad:d0:05:80:a0:74:94:fb:c1:00: eb:a2:93:5c:61:9f:4c:d2:b4:24:8b:c1:aa:ea:ec: 16:d0:b3:3b:62:ad:bb:9a:ac:0d:6b:a1:9d:2a:a3: 45:72:ae:b3:a4:8e:c1:fc:a1:ab:8a:0d:19:97:2b: fa:52:6c:1e:16:4b:b4:27:23:1d:90:0a:d0:b0:ef: f4:57:a7:0e:bb:8b:85:c0:a5:10:37:97:fd:a8:aa: be:63:97:3e:93:db:f3:19:8c:01:b7:04:bd:10:fe: 9e:29:e1:bb:ea:8d:d4:7a:da:e0:d0:66:62:e6:7f: 92:8c:24:8e:19:4e:5e:ff:1c:29:c4:76:f0:cb:9b: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:87:DF:D9:6C:25:28:3A:F9:9D:67:02:6B:26:22:FA:F1:11:7F X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:cb:68:de:5e:aa:71:3e:7a:41:f6:dd:32:cd:3b:6a:ca:e9: 63:37:20:ce:d5:96:f7:3a:49:96:aa:2f:ca:22:ea:18:72:93: 5c:f9:2b:12:cc:35:9b:32:ea:2a:a2:23:40:1f:62:f6:89:19: 14:e9:de:38:4c:f1:58:ec:37:19:2f:0e:a6:9a:bd:d8:76:64: e0:50:9b:1e:c7:6f:f5:0b:26:8b:81:35:77:24:e5:6e:3b:c7: 0f:c5:24:76:7a:74:7e:61:84:55:c3:4a:b1:fd:e7:e6:1b:73: 07:9b:86:44:8b:41:76:16:64:b8:d0:d3:e7:bf:a6:f6:f3:c1: 86:72:2f:2c:1f:a2:76:7d:07:f3:66:2f:07:42:de:87:07:d1: e8:df:15:8d:65:4f:1d:25:c8:ed:79:07:83:95:4b:f7:56:30: 45:25:6b:9e:05:a4:aa:e4:32:5e:a2:7d:52:02:e6:5b:fd:28: 8a:b7:4e:5b:38:15:ce:96:c3:5d:a7:ec:93:e9:00:23:f1:91: 7a:14:b9:81:ab:d7:85:41:59:cf:a6:fc:22:1f:83:79:21:a3: 2b:3e:d4:6a:44:df:5c:fb:0b:15:cc:85:c3:44:ef:54:e5:15: 02:43:03:f3:88:b8:a6:70:54:9c:65:df:8e:fd:08:13:73:28: 16:ca:48:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjYwNTIwMTk0NDM1WhcNMjYwNTI3MTk0NDM1WjAYMRYwFAYD VQQDEw02YTBlMGYyMy01YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY7wTiT942fMD8xLUAsTlADoc3NXPgwwDm9CT7jk8nf1xfJie2UUmpg44UDQ 7TfP3ZzHZmIUcqaBYL1ZQpmtQJJ24FeIhewfN7R4aGpE6mdF6ao8OwZp8kDUcwTe z/jN6iCQq2BWX955FvsRmQfJhTxu6OvUIunh6R2dc63QBYCgdJT7wQDropNcYZ9M 0rQki8Gq6uwW0LM7Yq27mqwNa6GdKqNFcq6zpI7B/KGrig0Zlyv6UmweFku0JyMd kArQsO/0V6cOu4uFwKUQN5f9qKq+Y5c+k9vzGYwBtwS9EP6eKeG76o3Uetrg0GZi 5n+SjCSOGU5e/xwpxHbwy5ul1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyQh9/Z bCUoOvmdZwJrJiL68RF/MB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGcto3l6qcT56QfbdMs07asrpYzcgztWW9zpJlqovyiLqGHKTXPkrEsw1mzLq KqIjQB9i9okZFOneOEzxWOw3GS8Oppq92HZk4FCbHsdv9Qsmi4E1dyTlbjvHD8Uk dnp0fmGEVcNKsf3n5htzB5uGRItBdhZkuNDT57+m9vPBhnIvLB+idn0H82YvB0Le hwfR6N8VjWVPHSXI7XkHg5VL91YwRSVrngWkquQyXqJ9UgLmW/0oirdOWzgVzpbD Xafsk+kAI/GRehS5gavXhUFZz6b8Ih+DeSGjKz7UakTfXPsLFcyFw0TvVOUVAkMD 84i4pnBUnGXfjv0IE3MoFspIrQ== -----END CERTIFICATE-----Generated at Thu May 21 10:39:57 2026 by rpki-client