$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft File: Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft (raw, json) Hash identifier: HGwGcVbfAcpHNKT3kBgjT2oTEFaBaFZIjKZTn+S36L0= Subject key identifier: 7C:39:59:17:0E:25:DE:B7:57:BB:5A:4A:21:05:06:DF:74:9B:DE:44 Authority key identifier: 3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42 Certificate issuer: /CN=A91B6899/serialNumber=3A6EE6F015941F5072AE71391B172058A0190142 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft Manifest number: 07 Signing time: Tue 19 May 2026 09:05:59 +0000 Manifest this update: Tue 19 May 2026 09:05:58 +0000 Manifest next update: Tue 26 May 2026 09:05:58 +0000 Files and hashes: 1: Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl (hash: v8CN9YqUfNz1aYjVoiY6TLODsjvgblk115urkg6uuzc=) 2: B70755C04C7311F1ACB58F89C4833773.roa (hash: LSxJplD9UL5reXwNEwfkGB8ity1ZcN9w6tgZf+NqgRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6899, serialNumber=3A6EE6F015941F5072AE71391B172058A0190142 Validity Not Before: May 19 09:05:58 2026 GMT Not After : May 26 09:05:58 2026 GMT Subject: CN=6a0c27f7-6601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:ad:22:02:d7:69:ff:5f:33:f2:6f:2f:61: c3:77:bf:d6:4d:be:4c:e2:18:bf:2a:50:1d:65:e0: 49:7d:5f:0e:95:b0:84:3b:2d:39:37:dd:b4:f1:36: 2f:12:36:a1:17:e6:6f:31:81:10:24:f3:17:36:0c: c0:cd:b6:6e:fc:7a:53:25:2a:af:ad:ad:51:d9:22: b6:27:53:f3:8b:96:c9:6f:51:14:68:56:f1:ec:41: 6e:26:0f:22:e0:db:a7:7f:35:83:89:37:59:7f:e5: 5f:ba:ed:ec:58:70:4c:4a:3c:bc:ca:d6:c5:b7:64: 67:fb:40:f8:32:59:ba:1a:48:d0:59:e6:31:76:63: 1f:42:9c:e4:38:98:47:c5:2f:b4:be:f7:8c:67:6c: 42:7b:62:d6:5e:e5:4d:8c:f6:96:3d:f7:5f:d9:bc: 2e:1a:33:d4:36:e5:20:db:d3:50:2c:57:dd:e0:14: a2:09:ae:4c:46:af:d0:93:e3:64:8c:46:81:f2:26: 74:06:79:b9:a3:d2:09:e2:c2:b8:e0:14:d2:e1:c8: 80:90:90:6a:f9:f0:d2:93:7d:03:c3:d8:26:0f:c2: 2f:28:7e:97:c6:3c:e8:58:e7:39:20:0e:68:f3:3b: 7a:45:29:92:64:8d:89:6d:dd:f5:b7:e8:a6:38:e2: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:59:17:0E:25:DE:B7:57:BB:5A:4A:21:05:06:DF:74:9B:DE:44 X509v3 Authority Key Identifier: keyid:3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ca:b2:16:ee:35:50:36:10:0e:a0:4c:83:fc:28:1c:84:ac: 03:70:ba:af:f5:55:91:d0:a7:57:7e:74:8b:72:66:06:e9:d5: 68:b9:f9:a7:10:7c:ab:11:d6:ab:e7:62:b0:30:f9:26:48:28: 52:6b:e8:8a:31:bd:b9:ff:83:40:c8:c6:7b:7f:a8:e8:e6:e4: ff:d8:0a:8a:c3:dd:ef:2a:92:ff:3e:47:45:4b:f8:2f:54:19: b4:6b:03:92:8f:97:29:c2:1a:ef:2e:8b:c7:d8:34:11:6f:16: 2a:6a:b4:da:1c:67:e8:c4:29:be:66:d8:71:fb:e3:4b:d3:ca: da:21:52:d7:92:e4:5c:f0:bc:33:72:76:fb:bb:21:cd:80:25: 30:a8:e9:63:c6:de:51:69:33:4f:8c:98:0b:d4:36:44:86:be: 01:14:8a:39:e8:a1:28:a0:d7:b7:0c:36:9e:2c:00:83:54:54: 79:4d:aa:b0:71:c6:bc:2c:1f:d4:69:31:f4:cb:bf:60:65:66: 16:f8:64:56:ba:59:9f:12:52:ed:be:58:d0:3d:67:7c:17:1b: 2d:ea:72:6b:41:bf:f6:af:af:d4:94:46:90:53:70:7d:e3:0b: 43:dd:40:c4:f9:ac:98:e3:dd:c7:ef:cf:7b:24:5f:c7:bb:a9: 18:dd:68:c9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Njg5OTExMC8GA1UEBRMoM0E2RUU2RjAxNTk0MUY1MDcyQUU3MTM5MUIxNzIwNThB MDE5MDE0MjAeFw0yNjA1MTkwOTA1NThaFw0yNjA1MjYwOTA1NThaMBgxFjAUBgNV BAMTDTZhMGMyN2Y3LTY2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf4K0iAtdp/18z8m8vYcN3v9ZNvkziGL8qUB1l4El9Xw6VsIQ7LTk33bTxNi8S NqEX5m8xgRAk8xc2DMDNtm78elMlKq+trVHZIrYnU/OLlslvURRoVvHsQW4mDyLg 26d/NYOJN1l/5V+67exYcExKPLzK1sW3ZGf7QPgyWboaSNBZ5jF2Yx9CnOQ4mEfF L7S+94xnbEJ7YtZe5U2M9pY991/ZvC4aM9Q25SDb01AsV93gFKIJrkxGr9CT42SM RoHyJnQGebmj0gniwrjgFNLhyICQkGr58NKTfQPD2CYPwi8ofpfGPOhY5zkgDmjz O3pFKZJkjYlt3fW36KY44ldjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfDlZFw4l 3rdXu1pKIQUG33Sb3kQwHwYDVR0jBBgwFoAUOm7m8BWUH1ByrnE5GxcgWKAZAUIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODk5LzYwQTIwRkZFNEM3 MzExRjE5QUJERTAwNUM0ODMzNzczL09tN204QldVSDFCeXJuRTVHeGNnV0tBWkFV SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT203bThCV1VIMUJ5cm5FNUd4Y2dXS0FaQVVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODk5LzYwQTIwRkZFNEM3MzExRjE5QUJERTAwNUM0ODMzNzczL09tN204QldVSDFC eXJuRTVHeGNnV0tBWkFVSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSyrIW7jVQNhAOoEyD/CgchKwDcLqv9VWR0KdXfnSLcmYG6dVoufmnEHyrEdar 52KwMPkmSChSa+iKMb25/4NAyMZ7f6jo5uT/2AqKw93vKpL/PkdFS/gvVBm0awOS j5cpwhrvLovH2DQRbxYqarTaHGfoxCm+Zthx++NL08raIVLXkuRc8Lwzcnb7uyHN gCUwqOljxt5RaTNPjJgL1DZEhr4BFIo56KEooNe3DDaeLACDVFR5Taqwcca8LB/U aTH0y79gZWYW+GRWulmfElLtvljQPWd8Fxst6nJrQb/2r6/UlEaQU3B94wtD3UDE +ayY493H7897JF/Hu6kY3WjJ -----END CERTIFICATE-----Generated at Thu May 21 09:39:32 2026 by rpki-client