$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: O1G3TD0HuT656JL4sqY/JMRRf/WiymtpiukBztUreA4= Subject key identifier: CB:C1:35:E9:D4:76:07:93:80:DE:9A:BA:1F:4F:0C:97:31:F3:CA:B6 Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 028E Signing time: Wed 27 May 2026 01:58:01 +0000 Manifest this update: Wed 27 May 2026 01:58:00 +0000 Manifest next update: Wed 03 Jun 2026 01:58:00 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: dIzeAe1OJO1nKuITlQD6fWy/KWDS88/pm/iPlZ+M0Bw=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 01:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: May 27 01:58:00 2026 GMT Not After : Jun 3 01:58:00 2026 GMT Subject: CN=6a164fa9-d7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:74:3c:ae:f4:74:36:7e:b0:b5:b8:b5:d8: 9f:ab:55:bd:29:ae:b0:c0:15:20:c4:be:7f:5a:6f: 78:d2:58:96:fa:b9:fe:9f:94:75:e3:c3:94:ca:0d: a3:bf:1b:6f:55:c0:09:99:b2:de:fa:d4:18:c9:ac: af:f5:df:50:93:e1:d8:17:6d:49:1e:cf:04:f8:c2: 6b:19:33:b5:4f:dc:1a:46:98:08:b1:b3:39:f5:71: 25:34:ee:5a:80:ed:f7:78:e0:be:d7:16:08:16:24: 38:24:c5:a7:3a:51:a6:ab:5a:c7:14:14:8c:66:57: fc:cc:79:df:e3:5e:41:39:d2:3d:92:f9:e4:c1:0d: 7c:df:b3:44:8c:bb:9b:a9:fe:50:dd:58:6b:3d:93: 80:8a:e5:9d:3c:28:c5:e6:d6:5e:f6:19:e2:ec:56: 5c:3e:14:88:3d:52:ee:89:7a:7e:e5:50:ad:7a:88: 15:0b:6b:15:d6:4b:96:c1:7e:5f:80:0e:ec:74:ff: ff:5c:3e:eb:c0:1f:ce:29:4b:dd:80:a9:e4:ea:28: 66:6d:98:d4:ae:c3:99:c7:ee:0a:d7:5d:7a:b8:b7: bf:10:f0:ba:5c:6f:7d:69:e1:f8:16:0e:a8:f2:27: e3:37:26:8f:74:3a:d2:b7:b1:ae:01:c3:3e:82:bd: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:35:E9:D4:76:07:93:80:DE:9A:BA:1F:4F:0C:97:31:F3:CA:B6 X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:22:83:f0:45:f5:4c:d2:4e:3d:c0:8f:44:74:db:52:5d:1f: 2c:5c:ba:8a:b4:aa:4c:ec:eb:82:74:35:29:63:53:7d:df:77: b8:7e:b6:d3:04:7a:25:3b:04:e7:e9:1d:b7:6a:5f:f7:d3:4d: 89:ac:e5:dd:34:49:50:0d:67:0c:17:6b:cd:1b:db:0e:76:92: 7c:c0:f5:2c:c1:6c:91:35:a7:ea:a7:1a:7d:00:bb:56:8d:69: 15:14:aa:00:8f:b3:9b:b9:f5:93:b4:70:d5:9c:71:0a:b0:b6: 88:4e:05:54:21:0c:04:2b:44:b4:80:28:91:1d:46:6d:9e:62: 73:4a:58:bb:b4:80:29:ca:f9:f6:4c:d4:9d:6b:4d:26:dc:d0: 33:34:71:5c:9a:7e:55:de:e8:97:f9:85:81:34:ff:08:9f:d1: 52:e3:f7:83:7a:e5:f2:b6:d7:d1:8c:ba:d6:e9:c0:e0:25:4c: 22:8a:9f:9f:39:05:32:a2:a7:b2:c9:bf:03:37:94:47:a1:ea: ca:16:50:9c:1a:3a:10:d3:25:cf:ec:10:6c:75:d8:f4:96:ac: 49:9a:ab:5b:9c:7e:53:d7:49:ff:90:57:35:1c:1e:d3:23:3e: 17:46:c1:b3:bc:46:6f:ce:6b:e9:cb:22:d6:86:da:8f:5b:e8: 91:c7:10:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjYwNTI3MDE1ODAwWhcNMjYwNjAzMDE1ODAwWjAYMRYwFAYD VQQDEw02YTE2NGZhOS1kN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Dt0PK70dDZ+sLW4tdifq1W9Ka6wwBUgxL5/Wm940liW+rn+n5R148OUyg2j vxtvVcAJmbLe+tQYyayv9d9Qk+HYF21JHs8E+MJrGTO1T9waRpgIsbM59XElNO5a gO33eOC+1xYIFiQ4JMWnOlGmq1rHFBSMZlf8zHnf415BOdI9kvnkwQ1837NEjLub qf5Q3VhrPZOAiuWdPCjF5tZe9hni7FZcPhSIPVLuiXp+5VCteogVC2sV1kuWwX5f gA7sdP//XD7rwB/OKUvdgKnk6ihmbZjUrsOZx+4K1116uLe/EPC6XG99aeH4Fg6o 8ifjNyaPdDrSt7GuAcM+gr3J3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvBNenU dgeTgN6auh9PDJcx88q2MB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOSKD8EX1TNJOPcCPRHTbUl0fLFy6irSqTOzrgnQ1KWNTfd93uH620wR6JTsE 5+kdt2pf99NNiazl3TRJUA1nDBdrzRvbDnaSfMD1LMFskTWn6qcafQC7Vo1pFRSq AI+zm7n1k7Rw1ZxxCrC2iE4FVCEMBCtEtIAokR1GbZ5ic0pYu7SAKcr59kzUnWtN JtzQMzRxXJp+Vd7ol/mFgTT/CJ/RUuP3g3rl8rbX0Yy61unA4CVMIoqfnzkFMqKn ssm/AzeUR6HqyhZQnBo6ENMlz+wQbHXY9JasSZqrW5x+U9dJ/5BXNRwe0yM+F0bB s7xGb85r6csi1obaj1vokccQdg== -----END CERTIFICATE-----Generated at Wed May 27 10:16:18 2026 by rpki-client