$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: Mgo2FIeQ15aN169dFv0pwWgMEfEpp0J68977SvvZI+I= Subject key identifier: 2A:86:A8:45:4E:44:A6:68:71:68:9D:30:86:B5:08:0B:0C:56:94:D7 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1100 Signing time: Wed 20 May 2026 17:17:37 +0000 Manifest this update: Wed 20 May 2026 17:17:37 +0000 Manifest next update: Wed 27 May 2026 17:17:37 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: AX3qHyJxxs8v9D5QIdwTTpAyjVIqpSgu5VzleNpPYEE=) 2: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=) 3: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4372 (0x1114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: May 20 17:17:37 2026 GMT Not After : May 27 17:17:37 2026 GMT Subject: CN=6a0decb1-731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:76:53:88:68:ae:3c:83:16:33:55:49:24: 63:f3:54:8b:c7:da:14:67:49:49:04:94:b9:9e:d0: f9:8f:68:09:d8:ed:c2:81:f2:97:db:ab:ed:58:62: 71:9f:c2:69:c0:72:75:2a:ee:2b:5e:05:72:bb:19: 1e:7b:bc:67:2c:8c:b5:dc:f3:d1:f9:1d:c1:20:92: 6d:ef:f7:86:a6:1b:93:d2:e2:e8:8c:ae:08:b5:e1: 4d:63:25:6d:52:ca:0f:e1:3a:d8:5a:c9:ab:57:d7: b5:ab:21:a7:07:e2:08:b3:c6:1f:bd:97:77:2a:53: d9:2d:cc:0a:81:98:40:a1:87:2e:b8:35:f1:a0:1c: c2:db:01:29:65:6a:ce:b0:03:4b:28:88:8f:11:c5: 0e:f0:d0:f2:3a:d8:37:55:2d:dd:c6:86:09:2f:54: ff:da:38:fe:94:23:e1:20:2c:42:0b:bc:b3:e7:45: 0b:08:6c:37:a6:a8:a4:b9:b6:ae:79:2b:05:08:97: 04:ab:61:31:17:89:b1:3e:67:2e:97:a5:ff:22:b5: 21:1d:33:5e:d0:94:13:3d:a2:e5:6c:f4:ed:11:cf: a1:99:65:64:c1:9c:d8:89:3a:fd:fa:d3:2c:62:2a: 60:cb:ea:7a:b6:b4:d4:51:d1:e9:b1:ee:76:1b:cc: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:86:A8:45:4E:44:A6:68:71:68:9D:30:86:B5:08:0B:0C:56:94:D7 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9d:bb:3c:18:26:9b:07:0c:97:b9:aa:2f:3f:c8:a7:8f:5c: d6:44:5a:1f:84:99:e4:29:07:48:f8:ad:b1:72:64:81:1a:0f: 93:5c:fe:34:d9:28:e5:c5:3a:e7:eb:98:c9:d7:55:ee:01:3b: 53:a3:1b:98:22:d9:cc:15:27:d3:d5:ac:9a:d8:14:55:55:76: c5:11:83:54:c8:af:c8:43:30:33:99:a6:18:d8:d3:87:93:8d: 77:a2:3b:c8:f7:57:f4:bf:92:c2:b6:cf:50:42:63:03:e6:a7: 0a:91:e3:16:16:c7:c7:e0:f1:ce:63:88:c2:ad:e7:cc:79:5f: 1b:c1:78:dc:5a:91:85:a6:7e:48:fe:1c:87:cd:e3:b1:ec:eb: 35:07:ff:20:8f:84:91:39:bf:54:d9:dd:80:5c:71:39:b3:2e: ec:70:17:3d:f6:3e:1d:2d:92:3e:b1:6b:80:46:c9:7b:5d:0b: 65:92:39:71:00:b7:8f:a1:6a:ee:b6:d0:04:c6:cd:6f:07:1f: 4c:d9:58:6d:03:66:d0:90:68:f4:34:32:63:5d:c3:79:7a:f5: 3e:df:95:83:33:dc:1f:4e:87:57:c4:2c:2e:96:e2:86:b1:b8: b2:eb:11:1f:36:b3:b4:e1:a9:d9:53:25:66:c2:dd:63:6e:79: 68:b5:50:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICERQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjYwNTIwMTcxNzM3WhcNMjYwNTI3MTcxNzM3WjAYMRYwFAYD VQQDEw02YTBkZWNiMS03MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWR2U4horjyDFjNVSSRj81SLx9oUZ0lJBJS5ntD5j2gJ2O3CgfKX26vtWGJx n8JpwHJ1Ku4rXgVyuxkee7xnLIy13PPR+R3BIJJt7/eGphuT0uLojK4IteFNYyVt UsoP4TrYWsmrV9e1qyGnB+IIs8YfvZd3KlPZLcwKgZhAoYcuuDXxoBzC2wEpZWrO sANLKIiPEcUO8NDyOtg3VS3dxoYJL1T/2jj+lCPhICxCC7yz50ULCGw3pqikubau eSsFCJcEq2ExF4mxPmcul6X/IrUhHTNe0JQTPaLlbPTtEc+hmWVkwZzYiTr9+tMs Yipgy+p6trTUUdHpse52G8zhcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqGqEVO RKZocWidMIa1CAsMVpTXMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQp27PBgmmwcMl7mqLz/Ip49c1kRaH4SZ5CkHSPitsXJkgRoPk1z+NNko5cU6 5+uYyddV7gE7U6MbmCLZzBUn09WsmtgUVVV2xRGDVMivyEMwM5mmGNjTh5ONd6I7 yPdX9L+SwrbPUEJjA+anCpHjFhbHx+DxzmOIwq3nzHlfG8F43FqRhaZ+SP4ch83j sezrNQf/II+EkTm/VNndgFxxObMu7HAXPfY+HS2SPrFrgEbJe10LZZI5cQC3j6Fq 7rbQBMbNbwcfTNlYbQNm0JBo9DQyY13DeXr1Pt+VgzPcH06HV8QsLpbihrG4susR HzaztOGp2VMlZsLdY255aLVQHA== -----END CERTIFICATE-----Generated at Thu May 21 12:17:27 2026 by rpki-client