$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: az9HvToMAbiOuRvfQQhunC+wvcIg0BZDibEzpl62fzo= Subject key identifier: A7:A2:AF:3E:7B:46:86:A7:26:1C:12:34:91:C4:2C:45:A8:A2:66:F9 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 03E7 Signing time: Thu 21 May 2026 00:36:32 +0000 Manifest this update: Thu 21 May 2026 00:36:31 +0000 Manifest next update: Thu 28 May 2026 00:36:31 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: K54poFOrJUYy2zSq8C5KbdehV14A4rzz2rgOZn1/nGs=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: v/YstiUDt5AHMIY3l8QrkWhxof9v0AFEbtY42FYgngA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: May 21 00:36:31 2026 GMT Not After : May 28 00:36:31 2026 GMT Subject: CN=6a0e5390-36d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:29:72:d7:77:35:6f:d2:0f:12:11:4f:90: 7d:ff:c5:0b:4a:18:5a:bf:cf:ce:46:72:06:ab:e3: 22:71:11:2a:da:aa:0f:8a:87:c3:9c:b8:d8:6b:48: 0c:a5:87:f2:f4:f5:ca:46:4b:6e:fe:a9:b9:db:de: 67:22:34:cb:73:6c:e8:36:4d:11:51:e9:ec:38:13: d3:5e:d0:5e:1c:cf:c9:9e:f8:3b:b7:b7:1e:60:ee: 21:4e:2d:5a:ef:43:23:57:eb:6a:a1:b6:03:8d:47: 28:26:dc:b7:2d:7f:5f:24:dd:f1:e5:f5:af:09:35: 35:32:89:1a:d4:52:0d:ee:8e:63:3f:b6:00:e6:f2: 10:34:09:31:33:46:44:1d:c8:c0:55:0e:8f:98:58: 5f:2a:b6:6d:25:08:64:69:a3:c7:a4:4e:09:8f:0c: 0c:83:9d:5c:f0:53:72:ff:ee:0c:e2:d7:dd:45:54: 07:be:b1:f1:99:2a:fa:fe:27:5d:b2:40:a4:5b:bb: d5:94:88:27:68:7e:62:d6:5c:36:db:c2:dd:d9:03: cf:fd:0d:fc:ac:ba:81:45:59:32:0d:e1:c7:e0:16: 6d:19:59:2a:96:c1:b4:58:2f:27:9b:9c:b7:66:5d: f1:ab:ff:13:34:de:b3:ad:ed:10:ba:8f:0d:a2:26: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A2:AF:3E:7B:46:86:A7:26:1C:12:34:91:C4:2C:45:A8:A2:66:F9 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:01:55:54:45:4d:f0:2f:d3:fc:38:5d:ff:5e:d4:a3:01:1a: 00:13:42:86:be:39:d7:d1:4c:3c:11:d5:89:e1:ae:c0:33:88: 55:54:83:d7:7c:8c:d7:6b:28:de:d9:72:8c:cf:01:d8:d1:3d: 0c:a5:5e:6f:17:9a:8a:50:51:95:f5:b1:83:60:c2:37:17:0e: a3:33:7a:07:92:f4:f9:c6:9b:e9:e4:80:93:6c:17:92:5d:e4: d5:46:5d:46:ff:b6:f6:de:26:54:6b:75:bd:31:5c:c2:9a:18: d9:8f:c9:c8:2c:58:c5:d8:ab:49:bb:9a:fd:14:65:91:58:06: 63:c6:a3:c3:5b:67:fd:6a:07:38:9d:f0:ee:ef:25:82:ed:fc: e8:dd:eb:5e:81:c9:52:f9:61:d3:92:5a:4e:a2:fa:ef:88:cb: de:39:60:a9:17:f3:b0:85:e2:10:49:9e:37:1e:03:88:06:f8: 62:c8:52:c8:20:0e:fc:b5:af:83:c1:51:66:20:6c:31:bd:ad: 99:73:97:d1:ef:71:ab:0a:a8:b8:b0:6f:21:ed:71:f1:42:81: 04:7f:1c:30:4a:0f:22:d7:8a:18:de:32:06:f3:00:5a:d1:47: de:23:ed:7d:0e:13:6c:cc:cf:08:cc:b3:67:e2:48:82:30:d4: 1f:5a:4a:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjYwNTIxMDAzNjMxWhcNMjYwNTI4MDAzNjMxWjAYMRYwFAYD VQQDEw02YTBlNTM5MC0zNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQspctd3NW/SDxIRT5B9/8ULShhav8/ORnIGq+MicREq2qoPiofDnLjYa0gM pYfy9PXKRktu/qm5295nIjTLc2zoNk0RUensOBPTXtBeHM/Jnvg7t7ceYO4hTi1a 70MjV+tqobYDjUcoJty3LX9fJN3x5fWvCTU1Moka1FIN7o5jP7YA5vIQNAkxM0ZE HcjAVQ6PmFhfKrZtJQhkaaPHpE4JjwwMg51c8FNy/+4M4tfdRVQHvrHxmSr6/idd skCkW7vVlIgnaH5i1lw228Ld2QPP/Q38rLqBRVkyDeHH4BZtGVkqlsG0WC8nm5y3 Zl3xq/8TNN6zre0Quo8NoiZTTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKeirz57 RoanJhwSNJHELEWoomb5MB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtQFVVEVN8C/T/Dhd/17UowEaABNChr4519FMPBHVieGuwDOIVVSD13yM12so 3tlyjM8B2NE9DKVebxeailBRlfWxg2DCNxcOozN6B5L0+cab6eSAk2wXkl3k1UZd Rv+29t4mVGt1vTFcwpoY2Y/JyCxYxdirSbua/RRlkVgGY8ajw1tn/WoHOJ3w7u8l gu386N3rXoHJUvlh05JaTqL674jL3jlgqRfzsIXiEEmeNx4DiAb4YshSyCAO/LWv g8FRZiBsMb2tmXOX0e9xqwqouLBvIe1x8UKBBH8cMEoPIteKGN4yBvMAWtFH3iPt fQ4TbMzPCMyzZ+JIgjDUH1pK1Q== -----END CERTIFICATE-----Generated at Thu May 21 12:16:55 2026 by rpki-client