$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: vhJlUiFmnPqFoCfGubEsxhx/KZBmSlVuk9gzjAZt/Vw= Subject key identifier: 46:C6:76:44:41:AA:BB:9C:D5:CC:9C:D6:08:14:9D:F4:21:EA:A6:5B Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 027E Signing time: Sat 25 Apr 2026 01:45:19 +0000 Manifest this update: Sat 25 Apr 2026 01:45:18 +0000 Manifest next update: Sat 02 May 2026 01:45:18 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: fc4DWwPSL0OwaIPY3msBN9vzxHo1BaqE5rcf+xYulmA=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 May 2026 01:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Apr 25 01:45:18 2026 GMT Not After : May 2 01:45:18 2026 GMT Subject: CN=69ec1caf-8783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:2a:cf:e3:21:06:e1:36:df:b9:d4:30:99: 6c:9b:2f:95:91:22:f4:1d:f6:4c:f1:a7:48:70:77: aa:60:d4:f8:b1:17:43:a2:16:92:86:c3:88:9a:37: 36:f9:dd:17:ed:fb:50:be:9f:0f:c4:39:08:71:3f: 57:9b:fe:c5:a8:c4:ff:5a:70:67:7a:cb:42:58:a6: b9:da:f4:47:38:42:85:0d:0c:5a:47:8d:8d:da:ff: da:3f:3b:02:2a:bc:3f:db:68:d0:68:a0:38:c9:f6: b6:6e:2c:1a:cc:98:c4:25:5e:77:d4:2a:5d:b1:b2: 7c:21:9d:30:f8:1c:3a:45:34:5a:45:d4:4a:66:b5: 51:77:2a:d6:f9:b7:b0:92:d7:a3:23:e2:ee:ab:fa: d3:7c:03:bf:b4:0b:76:f4:37:62:18:cd:39:df:8c: db:fb:9b:28:03:1f:e4:9f:82:e9:3f:bd:2d:60:55: fc:79:39:92:64:5a:bc:de:f0:5b:7b:f1:10:1b:78: 0a:a8:d3:34:09:a4:d5:85:98:06:68:42:0f:22:d8: 08:c8:37:4f:36:1e:aa:ba:86:ef:8a:db:e1:f3:87: 5f:44:98:c9:11:a0:d2:19:a3:5b:2f:f0:7f:5c:a0: 2c:4a:2e:25:8a:14:0d:cb:8a:3f:23:38:d2:61:88: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:76:44:41:AA:BB:9C:D5:CC:9C:D6:08:14:9D:F4:21:EA:A6:5B X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d0:7f:8e:41:d4:e9:99:c6:c6:bf:dd:2c:e0:2a:ff:a4:a2: 2e:83:e3:98:6e:35:75:bc:be:c2:4f:23:54:d9:bd:21:16:7d: ef:09:e4:77:eb:4b:a0:45:7f:3c:59:a8:05:f1:60:5f:16:46: 62:94:30:f3:fe:85:dc:db:a1:f3:6c:59:d2:aa:3a:17:f0:cf: c0:3e:6f:ba:45:bc:5d:f7:61:3f:de:97:ff:14:3c:97:b5:78: 1d:2e:9c:ea:44:42:fa:04:02:59:3a:1a:a9:c8:f6:aa:f2:b1: 7c:fc:d3:b8:bd:0d:82:e1:fb:25:32:5b:48:6c:69:ec:7f:0e: 55:83:6c:9a:96:65:39:97:9d:89:e1:ff:84:61:3d:0c:e1:10: a2:15:d5:dc:ba:af:8e:5a:0e:ac:c7:6d:cc:52:d2:6c:ec:bf: b3:74:3c:07:f0:ea:fa:3a:c1:7a:39:8f:92:f6:44:26:c0:40: ca:37:de:af:cd:66:40:1e:05:e9:3a:53:87:fe:b0:90:c8:90: ab:9a:19:ac:45:28:b2:04:78:ca:ca:51:90:c2:c0:af:73:d3: 3b:9c:af:fa:7b:34:9b:bf:b1:e7:ed:85:af:bb:37:23:fc:84: b9:e4:9c:50:46:f8:4c:18:1b:34:19:81:a8:16:3e:5b:8d:04: be:98:f8:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjYwNDI1MDE0NTE4WhcNMjYwNTAyMDE0NTE4WjAYMRYwFAYD VQQDEw02OWVjMWNhZi04NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk90qz+MhBuE237nUMJlsmy+VkSL0HfZM8adIcHeqYNT4sRdDohaShsOImjc2 +d0X7ftQvp8PxDkIcT9Xm/7FqMT/WnBnestCWKa52vRHOEKFDQxaR42N2v/aPzsC Krw/22jQaKA4yfa2biwazJjEJV531CpdsbJ8IZ0w+Bw6RTRaRdRKZrVRdyrW+bew ktejI+Luq/rTfAO/tAt29DdiGM0534zb+5soAx/kn4LpP70tYFX8eTmSZFq83vBb e/EQG3gKqNM0CaTVhZgGaEIPItgIyDdPNh6quobvitvh84dfRJjJEaDSGaNbL/B/ XKAsSi4lihQNy4o/IzjSYYjfTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbGdkRB qruc1cyc1ggUnfQh6qZbMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAENB/jkHU6ZnGxr/dLOAq/6SiLoPjmG41dby+wk8jVNm9IRZ97wnkd+tLoEV/ PFmoBfFgXxZGYpQw8/6F3Nuh82xZ0qo6F/DPwD5vukW8XfdhP96X/xQ8l7V4HS6c 6kRC+gQCWToaqcj2qvKxfPzTuL0NguH7JTJbSGxp7H8OVYNsmpZlOZedieH/hGE9 DOEQohXV3LqvjloOrMdtzFLSbOy/s3Q8B/Dq+jrBejmPkvZEJsBAyjfer81mQB4F 6TpTh/6wkMiQq5oZrEUosgR4yspRkMLAr3PTO5yv+ns0m7+x5+2Fr7s3I/yEueSc UEb4TBgbNBmBqBY+W40Evpj4fA== -----END CERTIFICATE-----Generated at Sat Apr 25 07:06:47 2026 by rpki-client