$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: r7QGcfNM/PR2gW1epGXqd1fCHjiE8daexY43NrwxrY8= Subject key identifier: 64:DE:65:A7:01:AB:E9:B8:4E:40:BE:BA:95:6F:78:93:CB:0E:7D:26 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0E0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0DDD Signing time: Wed 20 May 2026 17:56:11 +0000 Manifest this update: Wed 20 May 2026 17:56:10 +0000 Manifest next update: Wed 27 May 2026 17:56:10 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: Yzdilvgb55cctFhDG8xQwgJRb6Zju2elof7cnk7chCc=) 2: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: Y6kv/Ft3RM4G7ZQs6aq29HExaJIwl9QZ9sCKC5oOLGA=) 3: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: TxDaiYQZFS4Ik//q76OvD/sE28hWkwuGs5dmTlG3+ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3595 (0xe0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: May 20 17:56:10 2026 GMT Not After : May 27 17:56:10 2026 GMT Subject: CN=6a0df5ba-340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:80:30:e9:80:bb:ff:e4:26:e3:dc:6a:35: 7f:8d:10:b3:a7:c9:d1:26:07:f3:1e:10:4b:67:f5: c4:28:c3:8c:1d:e2:02:39:7b:02:3b:dc:56:dd:47: f7:22:9e:b7:cf:45:5f:28:b9:bd:cd:19:e5:98:48: 5f:2f:82:f7:4c:a9:e6:7b:29:d7:9a:96:be:ae:44: d3:35:20:1e:9d:a4:33:ff:b9:c5:82:c4:a4:90:83: 2b:05:bc:15:2a:60:1a:1b:61:e9:b3:51:96:d8:d5: e2:d0:4f:6f:57:86:03:40:c8:ae:d3:69:74:a7:93: ab:91:98:b1:de:40:5f:58:11:0f:f1:84:18:5c:67: 87:02:81:c3:1c:96:d8:db:67:e6:7b:c3:f3:c7:82: 22:63:70:f1:1d:bc:60:49:13:cd:c2:a5:af:42:86: 11:de:61:a4:bb:db:79:f8:78:4e:5a:b9:21:a2:0c: 65:1e:42:b8:80:dc:a0:6b:2a:8f:31:80:4f:7b:f7: 55:f6:02:24:2d:35:e3:0b:ea:09:6f:f3:b8:49:51: d0:91:db:cf:26:11:e0:ed:6c:1c:84:09:e9:eb:6a: b6:70:c1:28:79:5c:14:b2:3c:f6:2f:dc:be:82:3e: 76:72:bd:cb:76:4a:a6:62:9a:37:83:5d:bc:da:08: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:65:A7:01:AB:E9:B8:4E:40:BE:BA:95:6F:78:93:CB:0E:7D:26 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:24:ac:9b:cc:ba:77:c0:81:39:19:17:6b:9e:f1:10:b5:dd: d7:26:21:4a:f8:71:46:2f:43:de:96:70:12:9a:42:83:5a:e0: 21:ba:eb:c9:3e:20:16:53:f6:f1:94:88:bc:c3:3c:0d:fc:64: 8b:b6:c0:fe:8a:81:ad:d7:54:fc:39:5d:f5:71:e3:02:10:99: cb:39:65:bd:e8:6a:bd:97:01:0f:7e:ab:23:73:33:10:dc:e8: 7b:d1:fb:d8:f7:49:47:dc:67:17:43:22:1f:10:2e:d5:b2:b8: a3:f8:65:16:25:eb:e5:9c:cf:89:15:ad:03:50:ea:4b:98:a9: e4:0b:c0:c1:16:45:1b:8b:51:ec:fc:66:28:fd:e4:ff:b6:cb: f5:c8:e3:fa:6b:9e:fe:86:ca:6b:1a:7e:13:6f:9a:e8:40:2a: da:21:82:6c:3d:52:37:19:61:de:6b:b0:6a:41:61:ad:0e:b4: 2f:00:de:ac:02:c2:2f:38:c2:44:17:c9:d1:84:a0:b0:c5:ee: 73:e5:8d:5a:27:11:41:e4:2c:01:65:36:86:0f:c3:8c:91:b3: f6:6f:45:a5:98:f3:e3:ed:be:e3:b6:41:7e:0c:bc:94:c7:46: 7c:7d:24:06:b6:fa:32:7a:0d:6e:f9:37:83:43:85:80:d6:6d: 78:df:65:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjYwNTIwMTc1NjEwWhcNMjYwNTI3MTc1NjEwWjAYMRYwFAYD VQQDEw02YTBkZjViYS0zNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiDiAMOmAu//kJuPcajV/jRCzp8nRJgfzHhBLZ/XEKMOMHeICOXsCO9xW3Uf3 Ip63z0VfKLm9zRnlmEhfL4L3TKnmeynXmpa+rkTTNSAenaQz/7nFgsSkkIMrBbwV KmAaG2Hps1GW2NXi0E9vV4YDQMiu02l0p5OrkZix3kBfWBEP8YQYXGeHAoHDHJbY 22fme8Pzx4IiY3DxHbxgSRPNwqWvQoYR3mGku9t5+HhOWrkhogxlHkK4gNygayqP MYBPe/dV9gIkLTXjC+oJb/O4SVHQkdvPJhHg7WwchAnp62q2cMEoeVwUsjz2L9y+ gj52cr3LdkqmYpo3g1282ghpBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTeZacB q+m4TkC+upVveJPLDn0mMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnCSsm8y6d8CBORkXa57xELXd1yYhSvhxRi9D3pZwEppCg1rgIbrryT4gFlP2 8ZSIvMM8Dfxki7bA/oqBrddU/Dld9XHjAhCZyzllvehqvZcBD36rI3MzENzoe9H7 2PdJR9xnF0MiHxAu1bK4o/hlFiXr5ZzPiRWtA1DqS5ip5AvAwRZFG4tR7PxmKP3k /7bL9cjj+mue/obKaxp+E2+a6EAq2iGCbD1SNxlh3muwakFhrQ60LwDerALCLzjC RBfJ0YSgsMXuc+WNWicRQeQsAWU2hg/DjJGz9m9FpZjz4+2+47ZBfgy8lMdGfH0k Brb6MnoNbvk3g0OFgNZteN9ljw== -----END CERTIFICATE-----Generated at Thu May 21 17:18:16 2026 by rpki-client