$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft File: P7b20GZYOGwje40UDa0VsoOLtco.mft (raw, json) Hash identifier: yVu/sVxABpkUY1AGpeG58UDpfiJxZSsboTUBp03CeXg= Subject key identifier: 56:F4:8D:C3:48:5F:01:ED:73:63:81:7D:D6:32:9B:A1:61:A4:77:8A Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft Manifest number: 0BD8 Signing time: Wed 20 May 2026 18:56:55 +0000 Manifest this update: Wed 20 May 2026 18:56:55 +0000 Manifest next update: Wed 27 May 2026 18:56:55 +0000 Files and hashes: 1: P7b20GZYOGwje40UDa0VsoOLtco.crl (hash: LSW5rcB4QxEfJywu5kSoUqLwK8JTcUs7hosj2UuCOhs=) 2: 9F9FD574758811EA93AADD3FC4F9AE02.roa (hash: pKr8yU46bzkgepRuOhx0qrjQP+ajOBOvuvImXMjNl5M=) 3: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (hash: PFnTC09cAoqCoBorNAGMNJ3mW6exO1vhuxEz+nu9KcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: May 20 18:56:55 2026 GMT Not After : May 27 18:56:55 2026 GMT Subject: CN=6a0e03f7-0375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:32:41:c5:bb:59:c0:cc:b5:3e:62:ea:da:b3: cf:8e:62:b4:6a:23:50:ed:20:d5:bf:98:c1:bf:ee: ec:1c:70:be:f6:91:5a:50:da:3a:74:9b:a6:96:74: 77:32:41:26:a9:d8:9d:19:99:46:7f:63:c9:47:3c: 3c:2d:a4:41:6b:ae:d6:48:46:d1:ee:c2:32:1c:27: 9c:5e:50:e4:47:99:8c:c1:9c:4a:45:69:aa:cf:e0: 3d:69:bf:9c:f4:01:6a:e3:81:ea:75:62:fb:77:23: 37:d4:6b:d7:e6:6d:7a:30:f6:2f:1a:ea:6e:90:47: 58:7d:be:13:61:40:c9:e3:58:4e:6b:bd:ff:bb:20: 21:f3:35:90:17:03:8a:51:a5:79:ff:d4:d2:c1:10: 83:c2:e3:aa:d8:32:9e:58:59:d0:87:17:f8:89:d0: e0:ed:af:4c:c3:97:39:4c:73:54:26:f9:e6:89:47: 63:eb:a7:00:cb:db:7d:22:b8:87:e6:ca:00:b2:8e: cc:c0:60:2e:b2:8a:19:28:87:38:1a:cb:af:b9:5c: a5:99:83:68:fc:73:89:69:04:3e:a2:79:67:68:c6: f3:ae:3a:18:c9:a5:61:60:b1:54:87:96:35:3c:a3: f5:2a:81:69:3a:65:f3:ea:b0:7a:22:85:52:49:92: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:8D:C3:48:5F:01:ED:73:63:81:7D:D6:32:9B:A1:61:A4:77:8A X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a8:86:ae:e7:ac:83:21:f9:03:24:03:95:e4:09:7d:8b:df: ad:01:b9:e2:12:8f:fa:4d:19:65:32:0c:80:4e:5a:48:2f:27: 63:16:ca:a7:e9:79:d8:58:f3:e5:5e:66:ee:30:c3:89:a2:fb: d9:b3:47:fc:f4:64:48:b8:10:6c:bd:91:87:bf:f6:25:a0:6c: 66:62:00:ee:62:6f:61:16:fa:da:35:cf:49:9f:ee:61:bb:0f: 4c:70:49:9b:10:c7:90:a8:59:da:f5:c9:b0:e2:4c:26:5d:fc: c4:19:e0:e1:7a:a5:6c:34:fa:58:5a:a5:91:66:a6:7e:7a:19: e2:f4:ce:a5:13:a9:98:86:3c:12:0f:91:9e:92:4a:a3:55:31: 82:d1:ab:bb:b1:15:eb:35:1f:b0:5f:02:d7:e7:3e:65:d6:f1: 21:68:87:a5:74:9a:7f:23:27:a2:99:67:98:66:eb:6e:b2:9e: 99:2c:27:e0:02:cd:41:ef:08:0a:09:57:11:a9:0c:c4:23:31: ed:4d:d4:5b:76:40:1d:5c:f0:a0:5a:65:71:8b:05:52:14:d4: 7f:89:8a:4b:ac:88:a5:59:18:31:1a:3d:b2:0c:76:a0:0d:3c: 8e:9d:f4:f4:89:fc:bb:8c:99:8e:2c:cd:85:45:49:38:eb:d7: 4a:51:e0:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjYwNTIwMTg1NjU1WhcNMjYwNTI3MTg1NjU1WjAYMRYwFAYD VQQDEw02YTBlMDNmNy0wMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jJBxbtZwMy1PmLq2rPPjmK0aiNQ7SDVv5jBv+7sHHC+9pFaUNo6dJumlnR3 MkEmqdidGZlGf2PJRzw8LaRBa67WSEbR7sIyHCecXlDkR5mMwZxKRWmqz+A9ab+c 9AFq44HqdWL7dyM31GvX5m16MPYvGupukEdYfb4TYUDJ41hOa73/uyAh8zWQFwOK UaV5/9TSwRCDwuOq2DKeWFnQhxf4idDg7a9Mw5c5THNUJvnmiUdj66cAy9t9IriH 5soAso7MwGAusooZKIc4GsuvuVylmYNo/HOJaQQ+onlnaMbzrjoYyaVhYLFUh5Y1 PKP1KoFpOmXz6rB6IoVSSZKnSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb0jcNI XwHtc2OBfdYym6FhpHeKMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTcxQy9FN0VGMDgzNjNFMTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9H d2plNDBVRGEwVnNvT0x0Y28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVaiGruesgyH5AyQDleQJfYvfrQG54hKP+k0ZZTIMgE5aSC8nYxbKp+l52Fjz 5V5m7jDDiaL72bNH/PRkSLgQbL2Rh7/2JaBsZmIA7mJvYRb62jXPSZ/uYbsPTHBJ mxDHkKhZ2vXJsOJMJl38xBng4XqlbDT6WFqlkWamfnoZ4vTOpROpmIY8Eg+RnpJK o1UxgtGru7EV6zUfsF8C1+c+ZdbxIWiHpXSafyMnoplnmGbrbrKemSwn4ALNQe8I CglXEakMxCMx7U3UW3ZAHVzwoFplcYsFUhTUf4mKS6yIpVkYMRo9sgx2oA08jp30 9In8u4yZjizNhUVJOOvXSlHgWg== -----END CERTIFICATE-----Generated at Thu May 21 10:16:18 2026 by rpki-client