$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft File: B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json) Hash identifier: KMikhkXQQU6tynDZC2sdP6pSWHSmHpfAv7fcBVST2RA= Subject key identifier: 03:B0:C6:4F:0A:92:67:D5:0B:A6:8C:40:FD:04:DB:A2:C5:59:2F:E5 Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2 Certificate issuer: /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft Manifest number: 32 Signing time: Tue 19 May 2026 08:35:27 +0000 Manifest this update: Tue 19 May 2026 08:35:26 +0000 Manifest next update: Tue 26 May 2026 08:35:26 +0000 Files and hashes: 1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: rSpl1dyRbCstfCGcJpG2GtXk8SQ+lxN5TjE+62ojTNo=) 2: 964C388611F511F1B1F03794113D8C67.roa (hash: EHxSKIPAmgyHn407GlIwgWXCJmbJB61yUKXqSCmx8P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2 Validity Not Before: May 19 08:35:26 2026 GMT Not After : May 26 08:35:26 2026 GMT Subject: CN=6a0c20cf-23a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:59:27:30:6d:c8:94:d5:f3:46:47:c0:03: 24:55:ed:c5:f4:f6:ff:0a:05:d3:23:b5:23:c1:9e: 21:aa:99:cd:fa:a1:c0:56:a6:09:d6:85:19:e5:98: 7e:8b:97:8d:86:bd:4a:f9:73:47:60:ef:16:d8:31: 03:aa:6b:57:1c:93:3f:38:e3:ce:32:59:9b:46:ed: 0f:27:ae:f7:eb:db:ef:f0:26:b0:30:62:30:4c:3a: d4:62:62:54:f9:8d:9c:30:49:bd:7d:11:01:2d:0c: d4:a5:7b:e8:74:98:33:0e:a1:d5:64:ab:48:16:8f: 83:0d:70:0d:e1:2b:2d:4b:ee:42:eb:0f:13:7a:c4: 09:4b:3e:e8:7f:31:93:a2:28:0e:5a:62:92:20:0d: 6f:09:cf:5f:9f:a8:15:c1:a5:f6:63:7e:0d:9f:5d: 98:38:48:1c:23:f3:8c:3e:19:a9:02:69:74:fd:65: 73:28:e6:7c:d6:14:31:7f:0d:99:71:c0:79:08:40: b4:af:11:32:18:db:f7:66:d6:f6:be:6c:95:7a:dd: 9d:5f:47:aa:34:b5:c5:38:4e:59:b1:66:ed:8c:55: 69:4b:68:89:43:4e:5e:eb:e9:dd:c3:d1:3e:ad:ab: b1:30:f6:d8:75:46:0d:a0:34:cb:16:a3:9d:44:42: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:C6:4F:0A:92:67:D5:0B:A6:8C:40:FD:04:DB:A2:C5:59:2F:E5 X509v3 Authority Key Identifier: keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f8:ee:76:66:48:ea:80:af:11:41:ce:13:3d:62:be:86:4e: e3:f5:64:57:96:7b:b2:f4:9d:35:a0:bd:21:2f:be:40:ba:c4: 37:29:6a:08:0a:1d:e2:f4:8b:f8:cd:6a:a5:ce:10:59:47:2d: 0e:a6:12:ea:18:86:61:11:c7:4c:1c:46:fd:91:81:e4:a2:40: 50:a9:8b:1a:24:e4:ff:85:e4:17:95:61:a4:29:31:fe:b5:9f: 11:08:34:2d:02:1e:ac:e2:54:1e:45:47:3d:e4:06:9e:89:f2: e0:48:73:cc:7e:fc:53:b1:41:bc:30:35:c6:36:a6:72:df:df: c7:e8:49:5c:7a:4b:7a:69:00:12:00:37:85:8a:f7:1f:8a:92: e2:77:c3:e6:28:cd:9d:bb:96:19:5a:d6:db:24:4f:e9:c2:3f: 2b:01:19:b8:d4:77:97:51:ab:f4:05:06:9d:05:a0:79:61:c0: 87:44:6f:5d:2b:9d:6f:04:f5:d9:91:8e:99:0d:e5:21:4f:02: 75:12:da:20:d1:9e:28:80:c5:c4:70:39:00:38:fb:17:02:03: 21:77:c7:9c:50:f0:d7:4a:f7:4e:fa:97:26:47:47:10:cd:c3: fd:2d:50:19:7d:94:19:b4:1e:9b:56:4c:81:0d:00:a5:13:2e: 79:91:20:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFRjExMC8GA1UEBRMoMDdCNDZFNENGM0ZFN0M4QzQ1MDIxOTE1ODAxQTZFNTNE QTIwQUNCMjAeFw0yNjA1MTkwODM1MjZaFw0yNjA1MjYwODM1MjZaMBgxFjAUBgNV BAMTDTZhMGMyMGNmLTIzYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsoFknMG3IlNXzRkfAAyRV7cX09v8KBdMjtSPBniGqmc36ocBWpgnWhRnlmH6L l42GvUr5c0dg7xbYMQOqa1cckz84484yWZtG7Q8nrvfr2+/wJrAwYjBMOtRiYlT5 jZwwSb19EQEtDNSle+h0mDMOodVkq0gWj4MNcA3hKy1L7kLrDxN6xAlLPuh/MZOi KA5aYpIgDW8Jz1+fqBXBpfZjfg2fXZg4SBwj84w+GakCaXT9ZXMo5nzWFDF/DZlx wHkIQLSvETIY2/dm1va+bJV63Z1fR6o0tcU4TlmxZu2MVWlLaIlDTl7r6d3D0T6t q7Ew9th1Rg2gNMsWo51EQvK3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA7DGTwqS Z9ULpoxA/QTbosVZL+UwHwYDVR0jBBgwFoAUB7RuTPP+fIxFAhkVgBpuU9ogrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEVGL0JENTcwRDhBMTFG NDExRjFBOERGQjI4RDExM0Q4QzY3L0I3UnVUUFAtZkl4RkFoa1ZnQnB1VTlvZ3JM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjdSdVRQUC1mSXhGQWhrVmdCcHVVOW9nckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEVGL0JENTcwRDhBMTFGNDExRjFBOERGQjI4RDExM0Q4QzY3L0I3UnVUUFAtZkl4 RkFoa1ZnQnB1VTlvZ3JMSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBr+O52ZkjqgK8RQc4TPWK+hk7j9WRXlnuy9J01oL0hL75AusQ3KWoICh3i9Iv4 zWqlzhBZRy0OphLqGIZhEcdMHEb9kYHkokBQqYsaJOT/heQXlWGkKTH+tZ8RCDQt Ah6s4lQeRUc95AaeifLgSHPMfvxTsUG8MDXGNqZy39/H6Elcekt6aQASADeFivcf ipLid8PmKM2du5YZWtbbJE/pwj8rARm41HeXUav0BQadBaB5YcCHRG9dK51vBPXZ kY6ZDeUhTwJ1Etog0Z4ogMXEcDkAOPsXAgMhd8ecUPDXSvdO+pcmR0cQzcP9LVAZ fZQZtB6bVkyBDQClEy55kSCd -----END CERTIFICATE-----Generated at Thu May 21 09:39:23 2026 by rpki-client