$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: gp7qfCnc5U1kQSy+hM48Aqeb8XnTZDrdfusXGBL9fVo= Subject key identifier: 0C:FC:D3:8F:31:CC:DA:36:5F:68:A6:FB:D5:48:C5:E6:52:32:47:85 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1D26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1CCB Signing time: Wed 20 May 2026 16:11:55 +0000 Manifest this update: Wed 20 May 2026 16:11:54 +0000 Manifest next update: Wed 27 May 2026 16:11:54 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: q4AocHtyPOwtW4Uh4uoVBT0saK+uiuR+muE/Iyn4ouk=) 2: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: XTPwHAE+RSrJ2wVavnzJET8Caph7nR447oVW7w8/WgU=) 3: 0754E1A6115411F19A223E75263D8C67.roa (hash: XkNkIGOcXYJKZ6BnuWlh6sl/eiNLJIsKVaWehkRd9Ok=) 4: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: YdIG+LX9/nSnlUWidUhwdiQq+gtN7y6hQuASQmVjG5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7462 (0x1d26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: May 20 16:11:54 2026 GMT Not After : May 27 16:11:54 2026 GMT Subject: CN=6a0ddd4b-8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:e4:60:5e:c9:b8:de:6a:cf:c6:8e:7a:27: c2:f0:08:84:a4:e2:07:3e:69:fc:c3:17:3f:f8:d9: 61:26:1d:14:18:c0:bc:65:5c:e1:c9:96:60:f8:94: fb:5f:f9:c6:08:b1:5d:b4:77:2a:da:1e:4c:61:7a: 9f:ef:3e:5f:5a:37:63:43:b9:cb:7f:d9:36:fd:72: 47:0e:30:91:d7:d4:c4:3a:9e:4b:5b:35:4c:38:63: 26:45:51:e2:91:ff:50:68:69:35:2c:bc:6e:72:d1: aa:bc:1a:1f:70:f3:d2:4d:dd:c5:44:7a:1a:ee:cc: 79:77:a4:f6:9e:b4:8d:30:95:bb:ba:cf:f4:5a:a3: ab:9c:88:ab:24:3d:ab:0f:ab:ec:ff:dc:6a:41:df: 33:a5:3b:49:69:35:fa:a2:f2:ae:06:38:74:40:34: da:cb:b6:66:8d:fc:88:6a:07:dd:e1:aa:73:0e:96: e2:e6:9f:55:4e:98:01:04:e8:fa:ac:79:7c:bc:78: 0a:5c:60:b7:26:64:f7:6b:0f:37:a2:c4:09:13:1e: 17:71:26:02:e0:99:fe:50:10:62:a9:37:b9:d2:6a: b3:af:98:bb:ac:bb:32:4f:39:13:03:48:66:4e:10: c1:76:f0:81:c9:32:b6:87:56:af:f0:af:6c:8b:38: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FC:D3:8F:31:CC:DA:36:5F:68:A6:FB:D5:48:C5:E6:52:32:47:85 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:09:d5:c9:c3:c3:fa:10:3d:d8:72:2d:7d:33:8c:f4:60:62: 24:18:25:7a:c5:d9:5e:01:bc:55:71:e1:f9:72:2c:05:dc:16: 61:8a:e1:68:1f:05:2b:ec:bf:35:02:8e:b0:8d:1f:14:79:5b: 05:00:75:2a:c5:71:31:c4:a9:84:19:19:b3:21:18:d5:dd:ae: df:76:d6:63:3b:24:3a:dd:4b:e0:c8:19:d6:37:4d:4a:f6:4f: d0:89:3e:04:f8:18:84:dd:e6:89:0a:a2:73:57:8d:d6:ed:6c: 12:d6:d4:ab:b0:33:29:0c:c3:96:ba:e2:3c:64:ca:6f:34:9a: a5:a3:9f:cb:a8:3f:7c:06:76:91:83:38:0b:7f:c9:ee:d3:c7: 2a:b8:22:dd:04:c6:8f:fd:fd:3b:6a:7d:1a:30:a4:bc:b5:e1: c1:f1:ae:80:13:3c:40:e6:f9:cc:9c:3b:eb:7a:8f:65:a7:20: e0:fe:b1:75:c2:75:40:a6:94:3e:4b:f5:bf:cd:46:f5:c9:2d: fa:27:59:a8:cc:f0:75:9d:45:e6:96:8b:37:b2:de:44:23:fe: 75:3d:31:56:f8:bb:d0:b4:60:dc:18:65:15:c5:21:e5:96:73: 6a:1e:9c:1f:2c:96:37:dd:8f:71:5f:13:d1:18:b8:19:fb:0f: a8:a9:c8:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjYwNTIwMTYxMTU0WhcNMjYwNTI3MTYxMTU0WjAYMRYwFAYD VQQDEw02YTBkZGQ0Yi04YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiObkYF7JuN5qz8aOeifC8AiEpOIHPmn8wxc/+NlhJh0UGMC8ZVzhyZZg+JT7 X/nGCLFdtHcq2h5MYXqf7z5fWjdjQ7nLf9k2/XJHDjCR19TEOp5LWzVMOGMmRVHi kf9QaGk1LLxuctGqvBofcPPSTd3FRHoa7sx5d6T2nrSNMJW7us/0WqOrnIirJD2r D6vs/9xqQd8zpTtJaTX6ovKuBjh0QDTay7ZmjfyIagfd4apzDpbi5p9VTpgBBOj6 rHl8vHgKXGC3JmT3aw83osQJEx4XcSYC4Jn+UBBiqTe50mqzr5i7rLsyTzkTA0hm ThDBdvCByTK2h1av8K9siziZnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAz8048x zNo2X2im+9VIxeZSMkeFMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZwnVycPD+hA92HItfTOM9GBiJBglesXZXgG8VXHh+XIsBdwWYYrhaB8FK+y/ NQKOsI0fFHlbBQB1KsVxMcSphBkZsyEY1d2u33bWYzskOt1L4MgZ1jdNSvZP0Ik+ BPgYhN3miQqic1eN1u1sEtbUq7AzKQzDlrriPGTKbzSapaOfy6g/fAZ2kYM4C3/J 7tPHKrgi3QTGj/39O2p9GjCkvLXhwfGugBM8QOb5zJw763qPZacg4P6xdcJ1QKaU Pkv1v81G9ckt+idZqMzwdZ1F5paLN7LeRCP+dT0xVvi70LRg3BhlFcUh5ZZzah6c HyyWN92PcV8T0Ri4GfsPqKnIkA== -----END CERTIFICATE-----Generated at Thu May 21 09:37:11 2026 by rpki-client