$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: 5K/HbpKN/yM53Gx8zkCYp9CzFeiIczrA9WgwozY/rI4= Subject key identifier: 6C:39:51:00:33:D3:D3:65:C1:FA:E6:2C:74:C0:FB:D3:CE:46:B7:2B Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 0285 Signing time: Sat 09 May 2026 01:51:09 +0000 Manifest this update: Sat 09 May 2026 01:51:08 +0000 Manifest next update: Sat 16 May 2026 01:51:08 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: RsHRWdaVLHEkIQJEVkjTEkaMrpRUfybI8YNMXBxxrMU=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 01:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: May 9 01:51:08 2026 GMT Not After : May 16 01:51:08 2026 GMT Subject: CN=69fe930d-5da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:0d:9f:2b:21:c6:21:32:97:d7:fc:7a:a0: 84:4d:31:4f:8f:7f:c2:1b:5d:88:13:ad:97:7d:e4: 99:42:7c:6c:1e:48:ee:ca:b6:6e:67:99:05:de:5e: bf:f2:a7:cc:9b:65:ea:44:3f:e9:22:1b:77:19:10: cf:0f:0d:e4:cd:fa:9d:31:66:43:cb:dd:00:ea:8f: 54:03:b9:13:2e:33:df:fc:1e:7d:2f:9c:9c:36:4e: 21:3f:33:94:79:a6:db:61:98:fb:23:8a:6e:a7:81: 85:99:fb:dd:44:dd:1e:cc:d3:df:e3:93:d0:4e:bf: b3:16:20:31:c3:a7:ef:c7:c5:c8:3b:c9:85:0a:de: 2f:0e:7b:12:58:51:5f:af:b1:61:9a:1e:d2:4a:90: ab:b9:3e:40:8a:a1:9b:9e:72:d5:e3:de:58:fd:6f: c3:6d:3d:69:29:44:2a:9f:33:c1:42:05:04:32:2f: 40:ed:af:07:9e:9e:0b:de:1b:79:03:09:cf:6b:f5: 4e:9b:51:62:b1:ad:ba:6b:2c:96:7c:b1:28:df:df: 29:97:1c:64:f3:b1:91:5a:66:02:ec:e8:5d:d5:c6: 81:7f:b6:a0:ac:82:64:9c:bb:91:0b:f7:6f:a0:4f: d1:d7:ff:8c:58:d7:ab:92:6f:58:29:e8:eb:00:72: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:39:51:00:33:D3:D3:65:C1:FA:E6:2C:74:C0:FB:D3:CE:46:B7:2B X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:bf:36:f5:3f:15:d6:a8:9e:13:8d:09:94:e2:b6:93:f1:a8: 29:bc:be:57:4e:bd:24:29:6b:5b:22:21:a9:2d:cc:ad:c6:30: 96:99:a5:a0:8d:d4:66:19:c0:63:11:37:ac:ad:59:55:e6:25: 66:fe:5e:f1:0d:c7:4d:64:4f:ef:80:14:d2:c2:79:f1:0d:0d: ab:6a:e4:34:0e:5a:c4:61:fc:3e:f5:d1:f4:3b:48:0c:6f:4f: d8:90:b1:d7:df:81:85:d4:5f:31:9a:66:ea:0b:9f:be:ed:6f: 96:eb:d7:cd:64:54:48:b0:66:15:86:d2:bf:78:eb:46:fe:2f: d8:e5:91:31:8c:a0:54:d6:58:05:0f:13:65:9a:6f:1c:b9:17: 14:3e:9c:81:cb:9a:07:f1:fd:13:d7:c3:f2:dc:fa:04:d5:93: 16:c4:4e:e4:2e:e0:c3:90:f7:de:eb:47:32:39:e2:bb:f7:23: a1:41:8a:16:b1:ab:63:9d:f3:58:73:0d:c2:bc:ec:cd:4d:bb: 00:3c:90:d7:95:ed:33:b2:e2:fb:08:51:d1:2e:4e:03:cc:17: 18:9b:de:59:26:17:39:c3:23:a6:28:70:46:31:42:59:14:43: 7d:a1:2e:52:25:2e:b6:6d:72:ad:e8:79:97:e8:44:fc:14:f8: c3:84:a4:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjYwNTA5MDE1MTA4WhcNMjYwNTE2MDE1MTA4WjAYMRYwFAYD VQQDEw02OWZlOTMwZC01ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfgNnyshxiEyl9f8eqCETTFPj3/CG12IE62XfeSZQnxsHkjuyrZuZ5kF3l6/ 8qfMm2XqRD/pIht3GRDPDw3kzfqdMWZDy90A6o9UA7kTLjPf/B59L5ycNk4hPzOU eabbYZj7I4pup4GFmfvdRN0ezNPf45PQTr+zFiAxw6fvx8XIO8mFCt4vDnsSWFFf r7Fhmh7SSpCruT5AiqGbnnLV495Y/W/DbT1pKUQqnzPBQgUEMi9A7a8Hnp4L3ht5 AwnPa/VOm1Fisa26ayyWfLEo398plxxk87GRWmYC7Ohd1caBf7agrIJknLuRC/dv oE/R1/+MWNerkm9YKejrAHKwUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGw5UQAz 09NlwfrmLHTA+9PORrcrMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ7829T8V1qieE40JlOK2k/GoKby+V069JClrWyIhqS3MrcYwlpmloI3UZhnA YxE3rK1ZVeYlZv5e8Q3HTWRP74AU0sJ58Q0Nq2rkNA5axGH8PvXR9DtIDG9P2JCx 19+BhdRfMZpm6gufvu1vluvXzWRUSLBmFYbSv3jrRv4v2OWRMYygVNZYBQ8TZZpv HLkXFD6cgcuaB/H9E9fD8tz6BNWTFsRO5C7gw5D33utHMjniu/cjoUGKFrGrY53z WHMNwrzszU27ADyQ15XtM7Li+whR0S5OA8wXGJveWSYXOcMjpihwRjFCWRRDfaEu UiUutm1yreh5l+hE/BT4w4SkTg== -----END CERTIFICATE-----Generated at Sat May 9 16:49:17 2026 by rpki-client