$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: nt55f2YBUu50StdELNpzJEYCp/xQEtVFaCJ4wzJp8E8= Subject key identifier: B9:4A:DD:14:D1:2C:B3:6C:A6:F6:4A:B0:A9:00:7D:2A:11:8F:83:59 Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 01E0 Signing time: Thu 21 May 2026 03:33:32 +0000 Manifest this update: Thu 21 May 2026 03:33:32 +0000 Manifest next update: Thu 28 May 2026 03:33:32 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: DOvkJ6HV3fvUqZd3/IPsanCGEpL5wJWdaCO3+xBZCys=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: wgZY6CZu4QF64tBtckX4XM82ZwiMInYJliPcrt7Ct0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: May 21 03:33:32 2026 GMT Not After : May 28 03:33:32 2026 GMT Subject: CN=6a0e7d0c-29b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:8a:51:72:ec:95:bd:c9:cc:69:e8:8d:85: e9:6f:c1:d3:f4:62:71:09:87:1b:e5:ec:e1:75:96: b7:6e:0a:f2:5f:eb:b5:ae:87:28:20:a7:83:98:9e: bb:d3:88:50:de:85:0e:87:ec:20:e3:2f:09:4f:df: 31:73:7b:8f:a2:3a:9d:34:b6:42:53:9c:6e:7d:b3: e3:9d:77:58:f5:7f:51:2c:74:9c:6b:70:d4:29:5e: 98:55:01:68:fa:40:74:c5:f4:e4:0a:e8:6f:13:81: 97:c9:35:a3:60:8e:49:27:c8:f6:11:f9:79:ac:a8: 72:e7:05:74:2c:8c:ff:30:2a:05:0d:64:25:ed:65: 58:29:58:22:7d:bc:bd:fb:50:e0:48:d0:cf:2a:4d: 49:2b:8d:80:6f:35:e4:84:01:42:df:ef:16:64:0f: a5:9c:1e:f4:a4:72:d9:90:71:a3:35:47:fc:93:7e: 9d:52:1b:06:25:82:2e:e4:8b:e1:21:e6:41:15:7a: 7c:97:89:8f:b1:72:d0:7a:89:c5:80:46:68:6a:41: 8a:21:1f:28:93:35:2f:7e:1f:67:06:84:c4:18:e3: 01:f7:2f:91:24:ea:78:49:4b:bd:77:8e:de:3f:cb: f3:9d:45:0c:70:ad:8f:4e:4f:73:1c:1d:ea:f3:4d: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:DD:14:D1:2C:B3:6C:A6:F6:4A:B0:A9:00:7D:2A:11:8F:83:59 X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:5b:e8:bf:33:0b:06:1c:b4:f0:cf:bb:dd:dd:d2:b2:92:7c: 48:6a:ae:01:59:f9:f8:2a:ce:76:b8:db:5f:cc:cc:8f:0a:01: 4d:25:12:8d:c3:d7:1d:c0:a9:d9:62:7f:30:14:e6:6b:8d:b1: d0:c7:bc:40:f3:4b:e9:48:b0:6d:9d:f9:a9:7e:a4:77:f5:1a: 51:bf:f7:5d:5f:5e:e6:59:bb:3e:8e:cc:ff:c3:1d:66:bb:58: 37:3a:56:0b:0a:25:b3:a7:91:17:dd:60:ae:1f:85:d2:c5:e0: b8:e4:d7:33:09:cd:b7:86:2d:18:96:ac:0c:82:9a:54:26:58: b7:09:70:7a:7b:63:e5:20:4c:3e:4c:53:88:c7:6b:d8:eb:9f: 0e:0f:ed:7f:da:9e:87:fe:d2:c4:f7:6e:a8:e5:23:5d:25:14: 7d:b8:76:26:e0:2d:ac:35:a4:9d:1f:cb:5d:29:2a:4c:26:22: 30:3e:1b:d3:a9:63:f2:44:73:80:65:0e:84:01:fc:e5:79:32: 1e:b3:04:5d:47:b6:73:24:21:11:c6:75:93:66:9f:4f:f7:5e: 71:44:b3:bf:bf:f7:81:52:4f:1d:dc:91:0b:28:e8:f0:5d:f2: 5a:aa:32:14:2c:1f:99:5f:2c:9a:43:1f:47:53:7d:06:3a:fd: 2d:14:20:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjYwNTIxMDMzMzMyWhcNMjYwNTI4MDMzMzMyWjAYMRYwFAYD VQQDEw02YTBlN2QwYy0yOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVOKUXLslb3JzGnojYXpb8HT9GJxCYcb5ezhdZa3bgryX+u1rocoIKeDmJ67 04hQ3oUOh+wg4y8JT98xc3uPojqdNLZCU5xufbPjnXdY9X9RLHSca3DUKV6YVQFo +kB0xfTkCuhvE4GXyTWjYI5JJ8j2Efl5rKhy5wV0LIz/MCoFDWQl7WVYKVgifby9 +1DgSNDPKk1JK42AbzXkhAFC3+8WZA+lnB70pHLZkHGjNUf8k36dUhsGJYIu5Ivh IeZBFXp8l4mPsXLQeonFgEZoakGKIR8okzUvfh9nBoTEGOMB9y+RJOp4SUu9d47e P8vznUUMcK2PTk9zHB3q801bpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlK3RTR LLNspvZKsKkAfSoRj4NZMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt1vovzMLBhy08M+73d3SspJ8SGquAVn5+CrOdrjbX8zMjwoBTSUSjcPXHcCp 2WJ/MBTma42x0Me8QPNL6UiwbZ35qX6kd/UaUb/3XV9e5lm7Po7M/8MdZrtYNzpW Cwols6eRF91grh+F0sXguOTXMwnNt4YtGJasDIKaVCZYtwlwentj5SBMPkxTiMdr 2OufDg/tf9qeh/7SxPduqOUjXSUUfbh2JuAtrDWknR/LXSkqTCYiMD4b06lj8kRz gGUOhAH85XkyHrMEXUe2cyQhEcZ1k2afT/decUSzv7/3gVJPHdyRCyjo8F3yWqoy FCwfmV8smkMfR1N9Bjr9LRQgPw== -----END CERTIFICATE-----Generated at Thu May 21 10:18:52 2026 by rpki-client