$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: XZrLyPSAs9+3C9i/uV0UG+hVjKcQyU9VvQAm0dDScfw= Subject key identifier: F9:D0:D1:B4:7F:E8:56:CB:A7:B7:BC:A8:4E:D5:00:3F:DF:05:AB:B3 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 0890 Signing time: Wed 20 May 2026 20:39:12 +0000 Manifest this update: Wed 20 May 2026 20:39:11 +0000 Manifest next update: Wed 27 May 2026 20:39:11 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 1Vuh7oU0WiKF6tGuuGCjagIiKLQsSgXdh4Xw3hVvrBQ=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: cGT1GtukriCvrd1Pi2qRMUlR6UU6oh7XqqypKNl1qDY=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: jZ81Tdfx/+nsLOQTxl8GU75vMdax+UmYLl8rBqC2vqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: May 20 20:39:11 2026 GMT Not After : May 27 20:39:11 2026 GMT Subject: CN=6a0e1bf0-3aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:e7:18:5a:7f:ad:63:04:5a:39:3c:fe:83: 4e:ba:f6:41:5e:bb:85:9c:de:4f:f2:a8:52:f4:ce: 4d:86:48:a0:21:14:95:14:73:57:cc:1b:c7:ae:6a: f4:4b:38:c6:f8:9d:36:70:a1:7a:06:c7:cc:3a:78: 16:47:c5:dc:5c:e6:22:ba:be:13:14:53:87:8c:d8: 7e:8a:ea:67:59:9c:89:a1:c6:22:bb:6c:d0:e2:3d: 41:0f:64:e0:6c:18:0a:9e:7f:dc:42:bc:eb:68:a8: 36:66:cd:ab:00:46:d7:e5:46:4d:72:aa:61:3e:03: 9a:32:ee:f6:79:70:2c:8a:5d:74:dd:53:b3:f1:7f: 79:2f:9c:c8:76:0d:cd:06:88:cb:20:26:f3:da:be: 20:55:b7:b3:97:2c:d8:f2:62:15:57:e0:68:de:ff: 54:5c:f3:32:af:27:7c:9b:32:e2:26:94:c7:62:fc: 16:ca:1a:ab:8c:ec:7f:44:d8:50:3b:eb:bf:d3:77: b5:a4:7c:41:fe:d7:58:18:cb:98:91:30:62:a5:da: 71:c0:c3:17:12:3a:28:53:ff:5a:55:65:ab:71:1c: 16:1d:24:4e:ef:86:05:e0:5e:a9:ba:cc:8a:80:94: 0f:20:e1:44:3f:c6:54:95:f5:81:df:d1:09:7e:8d: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D0:D1:B4:7F:E8:56:CB:A7:B7:BC:A8:4E:D5:00:3F:DF:05:AB:B3 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ef:d7:56:d1:58:5e:6a:1c:2b:9b:83:f4:de:ca:95:78:1e: f9:c6:90:67:51:45:ee:78:37:1a:b7:5b:e7:f8:2f:11:81:22: e1:d7:a7:42:45:4a:09:74:a8:52:e3:ae:27:d6:e7:e4:93:01: 83:6f:1a:75:5e:33:46:89:ae:f3:ca:c0:bb:37:f6:50:12:c4: 33:8d:aa:57:94:d6:2c:d7:89:ae:63:2a:b5:fa:ac:b9:64:7b: 4a:6a:41:45:04:c4:d7:5c:91:99:47:00:39:f2:7d:64:f3:69: 70:7d:5f:59:0d:b0:98:c8:f8:b7:b1:5f:fe:79:a1:b4:b2:bc: 5a:a4:55:de:31:25:ac:16:80:0f:1a:14:d3:1d:bb:c7:1b:a3: 13:3e:6d:70:02:86:ef:36:24:da:69:64:8f:11:dc:31:9a:1e: 8c:1b:fc:c0:da:0a:d8:31:7b:00:82:b9:e7:37:d4:19:85:0d: e6:94:d7:8f:03:44:75:b9:78:92:f8:72:74:3b:70:d5:28:d5: 26:0e:e3:c0:69:73:99:e3:67:62:cc:32:34:25:65:11:ad:78: 4f:29:4f:7e:5a:41:cf:4b:eb:0a:7c:27:d8:94:c6:ab:cc:e8: bf:bb:e3:31:f4:a4:04:7d:4b:56:a4:61:17:e0:bc:64:97:d6: 38:58:06:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjYwNTIwMjAzOTExWhcNMjYwNTI3MjAzOTExWjAYMRYwFAYD VQQDEw02YTBlMWJmMC0zYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cXnGFp/rWMEWjk8/oNOuvZBXruFnN5P8qhS9M5NhkigIRSVFHNXzBvHrmr0 SzjG+J02cKF6BsfMOngWR8XcXOYiur4TFFOHjNh+iupnWZyJocYiu2zQ4j1BD2Tg bBgKnn/cQrzraKg2Zs2rAEbX5UZNcqphPgOaMu72eXAsil103VOz8X95L5zIdg3N BojLICbz2r4gVbezlyzY8mIVV+Bo3v9UXPMyryd8mzLiJpTHYvwWyhqrjOx/RNhQ O+u/03e1pHxB/tdYGMuYkTBipdpxwMMXEjooU/9aVWWrcRwWHSRO74YF4F6pusyK gJQPIOFEP8ZUlfWB39EJfo3LCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnQ0bR/ 6FbLp7e8qE7VAD/fBauzMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAe/XVtFYXmocK5uD9N7KlXge+caQZ1FF7ng3Grdb5/gvEYEi4denQkVKCXSo UuOuJ9bn5JMBg28adV4zRomu88rAuzf2UBLEM42qV5TWLNeJrmMqtfqsuWR7SmpB RQTE11yRmUcAOfJ9ZPNpcH1fWQ2wmMj4t7Ff/nmhtLK8WqRV3jElrBaADxoU0x27 xxujEz5tcAKG7zYk2mlkjxHcMZoejBv8wNoK2DF7AIK55zfUGYUN5pTXjwNEdbl4 kvhydDtw1SjVJg7jwGlzmeNnYswyNCVlEa14TylPflpBz0vrCnwn2JTGq8zov7vj MfSkBH1LVqRhF+C8ZJfWOFgGxw== -----END CERTIFICATE-----Generated at Thu May 21 10:16:08 2026 by rpki-client