$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: H/jHUJNheM265PECk+ZwoQnHV/jOylx2rujLnxG67yE= Subject key identifier: 4F:86:BD:2A:B9:A0:C5:3E:B9:91:AA:AF:3C:EE:E1:87:ED:3A:B8:67 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0C0C Signing time: Wed 20 May 2026 18:50:39 +0000 Manifest this update: Wed 20 May 2026 18:50:38 +0000 Manifest next update: Wed 27 May 2026 18:50:38 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: C8b8kpP8BeQ31S2nnx8bs89IY8vC+7PSz/CuIXxAwI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: May 20 18:50:38 2026 GMT Not After : May 27 18:50:38 2026 GMT Subject: CN=6a0e027f-cf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:60:f8:58:95:a5:7d:b1:40:a3:2c:2e:87: 97:ab:1f:c8:15:67:12:dc:49:1f:55:36:1b:50:51: 30:8c:aa:c5:f0:c7:8d:e9:1f:e8:18:8e:27:17:96: 6d:cf:63:71:73:ad:aa:d2:c8:6e:f6:8f:e0:e8:65: 1a:2f:9f:a0:2b:03:53:2a:fa:04:4e:2d:4f:92:aa: d0:45:b3:5d:a8:e5:18:54:f0:72:26:88:7e:1e:c2: f2:fb:da:07:80:5d:31:53:cf:68:48:01:3c:73:31: 91:10:8d:6f:68:ff:4d:97:19:79:7b:a4:a3:4e:b1: a8:b1:bc:51:d0:32:be:67:91:02:78:ad:bc:ed:31: f7:70:b2:c8:e5:17:b2:f9:7f:32:a2:2d:0d:95:e6: 2f:c6:2e:cb:34:ff:01:78:61:3e:37:b9:69:ee:9d: 8a:01:60:26:f8:de:12:53:72:53:f8:e5:b1:b5:39: 6b:15:fd:76:77:e4:e0:29:ac:fc:66:6c:68:9d:b4: 4f:92:3e:c9:98:7c:3f:cd:5b:92:76:ff:be:bf:f6: aa:5b:97:a6:32:76:45:e5:aa:f7:90:e0:94:ba:46: c9:dc:56:b1:a1:9c:d5:e3:ff:50:63:74:d4:0d:d1: 5b:f8:e5:bf:e6:e7:85:a1:7e:83:8f:db:26:10:96: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:86:BD:2A:B9:A0:C5:3E:B9:91:AA:AF:3C:EE:E1:87:ED:3A:B8:67 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:6c:08:13:0e:b4:60:be:8d:a7:e3:fd:f1:e1:97:af:d3:d9: 50:bd:ca:70:47:7b:b1:b5:3e:de:72:22:27:63:c5:7a:91:bd: 66:21:28:d9:98:08:fb:23:78:5e:1b:4a:ba:d1:17:8c:02:23: 6b:10:fd:99:b9:54:41:db:11:f3:24:a8:2b:ae:47:84:d1:94: 2c:6f:f3:73:f4:44:bf:82:d1:2e:f0:81:4c:d4:2a:e5:33:d6: 48:be:9f:ab:21:3a:2d:ab:00:86:65:09:ec:e1:36:b1:fc:43: 20:79:56:42:48:ab:d7:4b:90:de:c1:a9:b1:b7:e2:fd:0b:dd: 9a:93:48:e9:94:6b:42:c4:11:16:44:e6:07:fa:b3:5e:7c:c8: 3d:97:44:0f:a8:9d:06:c8:a0:c2:aa:15:c2:53:6d:0d:74:e9: f9:c4:6f:55:a2:2c:ed:9c:12:0e:8a:fe:af:d2:d3:0e:51:72: ca:18:00:a3:c2:8d:a0:df:c0:a0:fa:bd:4f:7a:d7:a6:8c:3f: 87:4a:01:3f:16:68:19:d2:20:97:2d:36:4a:33:88:1f:0f:a3: 34:b8:57:6e:c9:ba:8b:4d:30:06:5a:47:f3:38:fc:dd:5f:03: 5b:35:ce:41:61:73:a2:1f:db:be:69:3e:5d:b6:bf:ca:e5:00: b6:d9:68:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjYwNTIwMTg1MDM4WhcNMjYwNTI3MTg1MDM4WjAYMRYwFAYD VQQDEw02YTBlMDI3Zi1jZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZVg+FiVpX2xQKMsLoeXqx/IFWcS3EkfVTYbUFEwjKrF8MeN6R/oGI4nF5Zt z2Nxc62q0shu9o/g6GUaL5+gKwNTKvoETi1PkqrQRbNdqOUYVPByJoh+HsLy+9oH gF0xU89oSAE8czGREI1vaP9Nlxl5e6SjTrGosbxR0DK+Z5ECeK287TH3cLLI5Rey +X8yoi0NleYvxi7LNP8BeGE+N7lp7p2KAWAm+N4SU3JT+OWxtTlrFf12d+TgKaz8 ZmxonbRPkj7JmHw/zVuSdv++v/aqW5emMnZF5ar3kOCUukbJ3FaxoZzV4/9QY3TU DdFb+OW/5ueFoX6Dj9smEJYhbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+GvSq5 oMU+uZGqrzzu4YftOrhnMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJmwIEw60YL6Np+P98eGXr9PZUL3KcEd7sbU+3nIiJ2PFepG9ZiEo2ZgI+yN4 XhtKutEXjAIjaxD9mblUQdsR8ySoK65HhNGULG/zc/REv4LRLvCBTNQq5TPWSL6f qyE6LasAhmUJ7OE2sfxDIHlWQkir10uQ3sGpsbfi/QvdmpNI6ZRrQsQRFkTmB/qz XnzIPZdED6idBsigwqoVwlNtDXTp+cRvVaIs7ZwSDor+r9LTDlFyyhgAo8KNoN/A oPq9T3rXpow/h0oBPxZoGdIgly02SjOIHw+jNLhXbsm6i00wBlpH8zj83V8DWzXO QWFzoh/bvmk+Xba/yuUAttloFw== -----END CERTIFICATE-----Generated at Thu May 21 10:27:46 2026 by rpki-client