$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json) Hash identifier: 87NUrIMGzodhsxWv1hfCTReXd0SdNo656f6Rit0nffM= Subject key identifier: 82:96:86:7B:3E:7E:AB:C7:F9:3F:AF:6F:AA:05:B5:DE:C7:2E:AC:76 Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft Manifest number: 0253 Signing time: Thu 21 May 2026 02:20:59 +0000 Manifest this update: Thu 21 May 2026 02:20:58 +0000 Manifest next update: Thu 28 May 2026 02:20:58 +0000 Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: bh7kzh/LwEDjufvDGsDAdVO7nGQnlVuY6z/NBYu1ORg=) 2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Validity Not Before: May 21 02:20:58 2026 GMT Not After : May 28 02:20:58 2026 GMT Subject: CN=6a0e6c0b-3156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:2c:fa:2b:00:9f:27:6b:e0:50:f7:9b:3e: ee:a4:db:fb:20:43:c6:6d:f0:58:8b:59:29:f5:0c: d4:1f:a7:68:15:fb:7c:d2:ef:99:c7:12:55:23:05: 5d:70:14:11:44:6d:96:c7:64:ec:ff:a3:c0:c4:ad: c0:16:75:4a:f1:04:e6:13:75:03:4c:c2:41:21:f9: 49:93:77:34:d9:cb:f8:f4:bf:e4:9b:8c:30:46:d2: 93:51:dc:c8:5f:fc:23:08:c5:31:48:c5:9e:ec:01: 9d:25:11:ae:48:41:56:30:78:e2:e9:9e:d7:35:a3: ec:0d:ce:61:af:66:05:15:b7:69:c5:20:c8:d0:0b: 6a:74:45:57:56:4d:4a:15:50:93:cd:50:0a:0e:43: c2:79:ef:36:f2:60:20:f4:2a:57:2a:74:cc:80:f2: c7:e4:19:ab:96:af:51:67:bf:40:16:0c:b2:5e:20: cc:11:ea:69:e4:ac:1e:72:2e:30:f3:b3:c0:38:25: d3:24:b0:f0:56:73:31:d8:98:88:87:fa:66:27:32: d0:c2:7f:a5:f6:14:e3:02:a7:ad:96:6d:c5:0e:f3: 0a:64:75:2f:9f:ec:e1:65:3e:b9:c6:71:b3:26:f0: ce:b0:fd:f3:68:75:c6:06:18:61:c2:0d:10:9a:6c: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:96:86:7B:3E:7E:AB:C7:F9:3F:AF:6F:AA:05:B5:DE:C7:2E:AC:76 X509v3 Authority Key Identifier: keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6b:b1:12:7c:d2:67:63:f2:49:4c:c9:0b:5f:41:d4:36:e9: 68:f2:ca:c2:ea:38:86:ea:6d:26:ac:a4:9d:87:8d:47:4d:b6: 40:ae:16:9b:e3:df:64:cd:23:4c:2f:55:42:69:1b:bd:35:cc: c2:2a:5b:b4:fb:e2:35:9f:06:80:2a:71:78:19:31:09:bc:9f: 27:e3:38:d7:18:7c:57:71:a3:63:e6:f5:de:36:7f:9c:c9:85: 8f:46:f3:31:1e:96:dd:31:d0:aa:21:28:72:73:e5:28:c5:4a: e5:99:f7:46:81:c5:de:5a:79:f8:92:bf:f4:36:0b:2e:a0:53: 31:7a:05:4e:69:a2:76:18:8b:bd:bc:b7:56:f1:5e:44:1b:d7: 6a:c6:c3:0c:c9:6c:1f:a0:20:02:77:71:df:b2:cb:bd:4e:1f: c0:cf:60:d6:7b:c7:1c:0c:3f:a7:1a:c5:e4:f4:2c:6c:f3:97: 94:c2:b1:f0:e4:1e:19:8c:73:a3:e3:08:fd:51:4a:a3:b7:c4: 25:a7:2b:8b:f7:2c:de:5b:d1:12:29:ea:4e:d0:bc:7c:0d:e7: fd:cc:f8:57:af:de:4a:f1:dd:a3:22:22:ed:5e:ca:ff:9d:07: 99:73:15:d5:88:92:0f:56:8f:41:27:60:3b:d6:27:5f:0c:ab: f0:3d:b7:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY4M0QxMTAvBgNVBAUTKDdGQjE2RTQwRkEzQ0E3N0ZDRTI0QzRDOUE0NjQ1Njgz QzM5RThBMTEwHhcNMjYwNTIxMDIyMDU4WhcNMjYwNTI4MDIyMDU4WjAYMRYwFAYD VQQDEw02YTBlNmMwYi0zMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Rks+isAnydr4FD3mz7upNv7IEPGbfBYi1kp9QzUH6doFft80u+ZxxJVIwVd cBQRRG2Wx2Ts/6PAxK3AFnVK8QTmE3UDTMJBIflJk3c02cv49L/km4wwRtKTUdzI X/wjCMUxSMWe7AGdJRGuSEFWMHji6Z7XNaPsDc5hr2YFFbdpxSDI0AtqdEVXVk1K FVCTzVAKDkPCee828mAg9CpXKnTMgPLH5Bmrlq9RZ79AFgyyXiDMEepp5Kweci4w 87PAOCXTJLDwVnMx2JiIh/pmJzLQwn+l9hTjAqetlm3FDvMKZHUvn+zhZT65xnGz JvDOsP3zaHXGBhhhwg0QmmwTEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKWhns+ fqvH+T+vb6oFtd7HLqx2MB8GA1UdIwQYMBaAFH+xbkD6PKd/ziTEyaRkVoPDnooR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjgzRC9BM0Q1MkZCOEM4 NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAzX09KTVRKcEdSV2c4T2Vp aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3RnVRUG84cDNfT0pNVEpwR1JXZzhPZWloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjgzRC9BM0Q1MkZCOEM4NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAz X09KTVRKcEdSV2c4T2VpaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG2uxEnzSZ2PySUzJC19B1DbpaPLKwuo4huptJqyknYeNR022QK4Wm+PfZM0j TC9VQmkbvTXMwipbtPviNZ8GgCpxeBkxCbyfJ+M41xh8V3GjY+b13jZ/nMmFj0bz MR6W3THQqiEocnPlKMVK5Zn3RoHF3lp5+JK/9DYLLqBTMXoFTmmidhiLvby3VvFe RBvXasbDDMlsH6AgAndx37LLvU4fwM9g1nvHHAw/pxrF5PQsbPOXlMKx8OQeGYxz o+MI/VFKo7fEJacri/cs3lvREinqTtC8fA3n/cz4V6/eSvHdoyIi7V7K/50HmXMV 1YiSD1aPQSdgO9YnXwyr8D23VA== -----END CERTIFICATE-----Generated at Thu May 21 09:36:42 2026 by rpki-client