$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: aYWR7hnyzODg9GPwRiJVWGjedePzIfuS2Mm7wKyAkjU= Subject key identifier: 04:23:1B:17:CC:E4:7B:AE:EA:BB:75:17:89:AB:8C:B5:7A:D4:88:74 Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 019B Signing time: Thu 21 May 2026 04:21:00 +0000 Manifest this update: Thu 21 May 2026 04:20:59 +0000 Manifest next update: Thu 28 May 2026 04:20:59 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: h6Rn1D34QPPhMiPt45Js2R3T7fOQXLJvbytYBxHg4Mo=) 2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: 68XN8JwBJBbdfUKGQscZWuVbBuf4F1dhpvRpl2kDoG0=) 3: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: dxCV5oDwm0iQGfDR4O8HOe4IbiLXLU4mPTUlx835jPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: May 21 04:20:59 2026 GMT Not After : May 28 04:20:59 2026 GMT Subject: CN=6a0e882c-01ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:fd:f0:9d:96:da:19:1a:c1:b7:3c:b1:28: b3:05:64:fc:a4:bf:d4:ed:3e:6f:36:cc:ee:b6:d8: 2f:ed:06:12:bc:59:dd:37:c0:c5:ff:9e:ca:14:d1: 61:3c:95:f2:ad:2a:2e:a3:51:1d:91:1f:ec:1f:58: e1:2b:92:d2:9d:87:0c:f8:05:42:b9:90:cc:a2:21: 19:f5:4c:cf:e7:a0:89:c4:b8:8d:f6:af:c9:90:51: 5c:78:19:78:48:09:d3:c3:21:c8:7f:c9:31:58:13: 8f:6b:4d:d7:c0:e4:ab:e7:41:6b:af:47:1c:d2:36: 9e:e2:e0:57:26:56:d3:4b:3a:9f:85:b4:c2:3f:ee: 89:a1:f7:d7:4b:50:b7:c8:46:df:0b:4f:97:db:b2: b8:4d:49:e9:b9:6a:bd:0e:28:b9:51:9b:bb:46:3b: 11:4b:c9:62:e0:96:c9:51:14:df:ff:ba:c1:86:31: ec:b4:7c:f0:d2:47:43:65:d1:59:92:61:60:d5:9a: aa:22:e8:1b:40:f4:7f:25:52:f1:60:d0:90:8b:29: 83:4f:7c:ad:37:cc:c2:50:0f:87:18:b7:7c:16:b6: 2b:4c:a5:73:6c:29:67:a9:25:11:77:06:53:7b:6c: df:30:78:e8:bb:4e:7f:2c:b0:48:5f:33:e3:da:04: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:1B:17:CC:E4:7B:AE:EA:BB:75:17:89:AB:8C:B5:7A:D4:88:74 X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:7a:dc:fd:7f:b5:f4:7a:76:93:44:00:74:db:e4:b7:45:19: 28:2f:87:ec:57:f7:ff:b4:34:cc:3c:b4:d4:2e:44:25:67:93: 5b:9f:9f:36:46:89:7a:c6:1a:7b:25:0d:b8:9a:1d:74:49:27: e8:92:a2:02:e2:39:89:e3:43:a3:59:c8:39:e0:fa:82:32:a6: cd:bb:f5:e5:67:e6:a3:ad:a4:88:02:3a:40:02:fc:3d:a8:58: 53:25:f4:82:b0:39:61:b8:5e:8e:df:3b:1c:60:12:e0:de:74: 52:57:92:ba:7e:c8:dd:3c:a0:61:c1:aa:9c:f7:fd:65:c7:c2: d7:21:11:1f:a0:a6:f4:b5:f7:0d:b3:45:4f:77:01:da:47:a5: dc:2f:9a:49:34:26:2e:44:5c:5d:59:4b:1a:38:c5:28:fc:a3: 9a:3f:10:65:1a:e3:42:0c:a8:15:63:ac:74:c6:da:10:06:9c: 72:b9:da:81:61:7f:0d:3a:88:a5:81:c4:b1:82:07:64:e2:54: c3:56:7e:9a:92:2e:be:b2:ec:09:c8:67:e1:a9:63:27:88:40: 01:97:70:be:5f:b4:a3:82:0a:c3:42:8f:e8:27:19:6e:47:d2: f0:41:54:d4:68:0e:98:1e:7f:b5:9a:11:59:5c:66:76:4c:db: 7f:71:77:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjYwNTIxMDQyMDU5WhcNMjYwNTI4MDQyMDU5WjAYMRYwFAYD VQQDEw02YTBlODgyYy0wMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iD98J2W2hkawbc8sSizBWT8pL/U7T5vNszuttgv7QYSvFndN8DF/57KFNFh PJXyrSouo1EdkR/sH1jhK5LSnYcM+AVCuZDMoiEZ9UzP56CJxLiN9q/JkFFceBl4 SAnTwyHIf8kxWBOPa03XwOSr50Frr0cc0jae4uBXJlbTSzqfhbTCP+6JoffXS1C3 yEbfC0+X27K4TUnpuWq9Dii5UZu7RjsRS8li4JbJURTf/7rBhjHstHzw0kdDZdFZ kmFg1ZqqIugbQPR/JVLxYNCQiymDT3ytN8zCUA+HGLd8FrYrTKVzbClnqSURdwZT e2zfMHjou05/LLBIXzPj2gTa4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQjGxfM 5Huu6rt1F4mrjLV61Ih0MB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApHrc/X+19Hp2k0QAdNvkt0UZKC+H7Ff3/7Q0zDy01C5EJWeTW5+fNkaJesYa eyUNuJoddEkn6JKiAuI5ieNDo1nIOeD6gjKmzbv15Wfmo62kiAI6QAL8PahYUyX0 grA5Ybhejt87HGAS4N50UleSun7I3TygYcGqnPf9ZcfC1yERH6Cm9LX3DbNFT3cB 2kel3C+aSTQmLkRcXVlLGjjFKPyjmj8QZRrjQgyoFWOsdMbaEAaccrnagWF/DTqI pYHEsYIHZOJUw1Z+mpIuvrLsCchn4aljJ4hAAZdwvl+0o4IKw0KP6CcZbkfS8EFU 1GgOmB5/tZoRWVxmdkzbf3F3Zw== -----END CERTIFICATE-----Generated at Thu May 21 09:38:26 2026 by rpki-client