$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: z4qaHMkXgnSkSGaA0TfzUiknunnI9ZUxnVoYzKlIzXs= Subject key identifier: F9:E7:7A:FE:C8:D2:B3:83:63:5E:0B:BF:8B:EE:33:E9:43:B2:E2:05 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 0354 Signing time: Fri 15 May 2026 01:08:44 +0000 Manifest this update: Fri 15 May 2026 01:08:44 +0000 Manifest next update: Fri 22 May 2026 01:08:44 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: hYS51/tMZxSbmEAMnRYoIORy/F1F7YhEIJROQwja4lk=) 2: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: PP03+ns0fvbCbNTOcKnxUs6dGDBO7IGi9AfJ5ZcdUYQ=) 3: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: qmSYFXBCxcqxkM5XH4uaUEDVYEJ9yUrEsaElHySAxKw=) 4: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: QKkyT4YbWo+H3D3PvJrtIZvYmn8vhyqDknx0lWhaPew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 01:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: May 15 01:08:44 2026 GMT Not After : May 22 01:08:44 2026 GMT Subject: CN=6a06721c-681c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:76:a4:92:e7:47:ec:40:c4:a2:c3:cd:0a:20: 95:3e:0b:20:42:61:71:41:70:e7:52:57:f0:fd:32: b5:2a:4f:e7:71:5d:b7:f3:f5:3d:62:2c:0b:e5:a0: 5c:2f:68:fc:2d:6f:da:0a:36:e0:fc:b1:df:93:a7: 3a:82:bf:f4:7e:24:95:14:72:72:d5:d3:2a:b7:b9: b9:ed:b8:b8:34:8d:9f:eb:45:1a:d5:63:64:cc:a9: 36:f7:c2:91:b3:f8:8f:49:a7:16:7d:ee:0b:d7:07: 22:59:7d:fb:dc:f6:fa:7d:1d:14:b9:7e:16:be:da: 19:59:00:50:84:66:b4:e6:4b:9e:c2:c5:11:2c:b5: 7c:47:52:b5:da:64:9a:64:a7:8c:fe:93:56:b6:df: df:0b:0c:97:36:17:bf:62:c0:9f:be:a5:ba:23:fe: b4:4f:67:bf:8b:99:4d:0d:d7:33:b1:3d:be:80:48: b5:05:b4:89:54:35:ce:68:a6:4c:be:cb:bc:fe:9b: c6:a4:c5:e1:85:05:1e:d4:29:02:bf:29:04:59:57: 69:60:3f:84:8f:12:d8:44:30:77:fd:6a:ca:f2:fb: 04:20:ec:5d:3c:98:24:ac:10:a7:fb:2e:c7:36:3b: ca:77:1c:a3:3a:67:80:fc:10:01:23:a1:17:46:29: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E7:7A:FE:C8:D2:B3:83:63:5E:0B:BF:8B:EE:33:E9:43:B2:E2:05 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8b:a4:43:d3:a0:80:07:b9:a5:72:42:ac:a9:a8:eb:be:40: cf:4a:17:5f:9a:86:00:d3:e2:27:ed:bd:cc:48:ae:88:e8:1e: 29:1e:4a:4c:ec:59:4c:f6:06:11:c4:0c:9e:d3:eb:16:dc:2e: 60:f6:ff:c3:4e:c2:bd:87:2d:e2:1d:4c:0e:b0:ff:27:82:b4: 6f:86:0b:74:74:23:1a:f3:b8:48:d5:cd:70:b9:70:ad:9b:39: 79:c4:c5:af:47:23:f8:9b:a6:65:2d:01:e3:3b:e7:96:d2:73: b9:7b:a0:12:ee:71:b4:c8:70:8d:5a:c8:fb:78:15:41:e0:d6: 53:84:c8:c1:72:e7:a5:ba:b2:90:98:12:31:88:14:ba:11:9e: 3e:73:85:fe:61:28:48:f8:ce:3f:4b:c1:a9:b5:12:da:c7:dc: 53:a7:46:32:f0:84:61:1b:2e:de:70:58:bd:1c:62:b9:72:c4: 82:91:ae:b3:58:bc:bc:b2:94:ea:a9:6f:1a:48:ef:26:1f:90: 0b:39:41:0b:52:32:d8:51:90:3f:e0:29:38:f6:a5:9e:a6:a7: 5d:e3:12:54:e6:48:8f:62:7d:34:dc:1a:5f:a8:1a:19:9d:da: c5:fc:50:18:71:34:c0:f3:82:0b:64:15:d8:10:b2:ff:ab:1a: 42:6e:70:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjYwNTE1MDEwODQ0WhcNMjYwNTIyMDEwODQ0WjAYMRYwFAYD VQQDEw02YTA2NzIxYy02ODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8XakkudH7EDEosPNCiCVPgsgQmFxQXDnUlfw/TK1Kk/ncV238/U9YiwL5aBc L2j8LW/aCjbg/LHfk6c6gr/0fiSVFHJy1dMqt7m57bi4NI2f60Ua1WNkzKk298KR s/iPSacWfe4L1wciWX373Pb6fR0UuX4WvtoZWQBQhGa05kuewsURLLV8R1K12mSa ZKeM/pNWtt/fCwyXNhe/YsCfvqW6I/60T2e/i5lNDdczsT2+gEi1BbSJVDXOaKZM vsu8/pvGpMXhhQUe1CkCvykEWVdpYD+EjxLYRDB3/WrK8vsEIOxdPJgkrBCn+y7H NjvKdxyjOmeA/BABI6EXRil8TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnnev7I 0rODY14Lv4vuM+lDsuIFMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABoukQ9OggAe5pXJCrKmo675Az0oXX5qGANPiJ+29zEiuiOgeKR5KTOxZTPYG EcQMntPrFtwuYPb/w07CvYct4h1MDrD/J4K0b4YLdHQjGvO4SNXNcLlwrZs5ecTF r0cj+JumZS0B4zvnltJzuXugEu5xtMhwjVrI+3gVQeDWU4TIwXLnpbqykJgSMYgU uhGePnOF/mEoSPjOP0vBqbUS2sfcU6dGMvCEYRsu3nBYvRxiuXLEgpGus1i8vLKU 6qlvGkjvJh+QCzlBC1Iy2FGQP+ApOPalnqanXeMSVOZIj2J9NNwaX6gaGZ3axfxQ GHE0wPOCC2QV2BCy/6saQm5wNw== -----END CERTIFICATE-----Generated at Fri May 15 20:44:33 2026 by rpki-client