$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: ZGjpwXbJX6eS+FvRBMe9X/rjl6U0694nQ8AFTT7W23k= Subject key identifier: D6:50:E7:B0:51:C3:8D:90:36:61:7C:A1:DC:CB:41:A8:4C:1F:DB:75 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 150E Signing time: Mon 20 Apr 2026 16:47:14 +0000 Manifest this update: Mon 20 Apr 2026 16:47:14 +0000 Manifest next update: Mon 27 Apr 2026 16:47:14 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: mDD1AAOP8Nr5gkSfd/fDaqtwPbvfdFk4TrEzvlL636o=) 2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg=) 3: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: iHRpBY8mTgfogKkV6RLUH1pT9Rubnqiw6gX0z2kYfjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 16:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5426 (0x1532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 20 16:47:14 2026 GMT Not After : Apr 27 16:47:14 2026 GMT Subject: CN=69e65892-adb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:0f:d4:32:44:76:c0:87:41:42:49:41:09: 41:99:ad:f7:e5:af:31:48:8b:90:75:13:62:8d:37: f7:00:3c:54:bf:3f:9e:bf:3d:3d:6a:8e:61:16:9e: 1f:c3:ce:70:15:7f:f9:ff:cd:15:1c:bb:92:3a:a6: 06:18:63:20:41:34:58:81:29:c4:0c:dc:c8:f8:88: 4f:01:b1:c3:bb:51:0a:9f:8c:b6:89:75:a1:53:0e: 07:e7:73:58:34:4b:ed:f5:04:50:cc:15:27:aa:20: df:e0:c7:dd:aa:0a:7b:e5:6e:12:2b:17:9b:d4:6a: 8e:88:2a:75:00:ec:c2:1b:eb:f1:48:ae:98:60:4d: 03:67:56:8f:dd:9e:68:83:f1:d3:68:ef:b2:1a:73: 9c:fb:06:18:c4:10:3e:29:a5:da:e3:2e:1f:a3:aa: 85:bb:30:3a:fa:f2:43:01:f5:47:83:6a:ae:5d:f0: f5:72:af:3d:6c:ec:f9:24:63:51:ba:5c:c2:a8:2f: b2:d5:7b:4c:13:26:85:ef:fb:1a:d6:8e:a2:99:f0: 3e:60:27:68:75:09:93:8e:6e:3c:b5:93:e6:0b:b4: 93:04:34:15:bd:9d:71:e9:cf:e2:2f:0a:65:1d:f8: fa:20:11:0a:21:94:e4:4d:ee:d7:72:28:8b:d3:cf: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:E7:B0:51:C3:8D:90:36:61:7C:A1:DC:CB:41:A8:4C:1F:DB:75 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3f:ed:3f:ab:fd:db:28:f8:4c:73:b1:1c:02:58:ee:ba:ab: c2:32:13:bf:be:a3:b6:06:84:20:b6:7e:ce:f2:f7:df:e5:41: 62:59:55:69:7d:5a:e3:4d:4e:09:bc:82:b3:44:34:37:33:36: 67:db:b6:7d:e9:06:d0:c2:1e:7f:e7:b7:4e:f9:83:29:cc:f2: 2c:95:e2:b8:0b:1e:17:65:a3:e1:e5:96:35:f1:1f:a9:56:c4: 0d:be:97:8e:fc:fb:15:5b:0b:96:ae:b4:b9:a0:d7:24:5f:ba: b7:1f:6e:97:3b:bb:94:e9:e5:6a:3d:79:44:17:dc:15:62:3f: 61:a4:4e:79:e4:ad:c3:10:05:4b:4e:cd:39:87:00:1c:4b:2d: ab:5b:95:06:31:09:d6:28:d8:fb:da:d1:87:ba:44:08:ca:f3: 48:a5:1e:bc:b6:af:b3:c8:d3:db:73:ab:5a:ba:58:63:14:1d: 34:18:24:76:82:89:28:16:28:f5:db:9c:70:79:c7:bf:90:0a: b8:34:de:8b:9f:f0:e3:bc:3a:d1:da:f5:49:05:35:1e:9d:30: 18:2a:9b:1b:8c:44:58:7e:97:17:a1:d2:61:39:c5:27:c7:9b: 1d:48:e3:d8:a9:f4:2c:99:00:ae:f2:87:39:14:73:e0:4d:05: d2:90:24:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjYwNDIwMTY0NzE0WhcNMjYwNDI3MTY0NzE0WjAYMRYwFAYD VQQDEw02OWU2NTg5Mi1hZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlkP1DJEdsCHQUJJQQlBma335a8xSIuQdRNijTf3ADxUvz+evz09ao5hFp4f w85wFX/5/80VHLuSOqYGGGMgQTRYgSnEDNzI+IhPAbHDu1EKn4y2iXWhUw4H53NY NEvt9QRQzBUnqiDf4Mfdqgp75W4SKxeb1GqOiCp1AOzCG+vxSK6YYE0DZ1aP3Z5o g/HTaO+yGnOc+wYYxBA+KaXa4y4fo6qFuzA6+vJDAfVHg2quXfD1cq89bOz5JGNR ulzCqC+y1XtMEyaF7/sa1o6imfA+YCdodQmTjm48tZPmC7STBDQVvZ1x6c/iLwpl Hfj6IBEKIZTkTe7XciiL089yQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZQ57BR w42QNmF8odzLQahMH9t1MB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASz/tP6v92yj4THOxHAJY7rqrwjITv76jtgaEILZ+zvL33+VBYllVaX1a401O CbyCs0Q0NzM2Z9u2fekG0MIef+e3TvmDKczyLJXiuAseF2Wj4eWWNfEfqVbEDb6X jvz7FVsLlq60uaDXJF+6tx9ulzu7lOnlaj15RBfcFWI/YaROeeStwxAFS07NOYcA HEstq1uVBjEJ1ijY+9rRh7pECMrzSKUevLavs8jT23OrWrpYYxQdNBgkdoKJKBYo 9duccHnHv5AKuDTei5/w47w60dr1SQU1Hp0wGCqbG4xEWH6XF6HSYTnFJ8ebHUjj 2Kn0LJkArvKHORRz4E0F0pAk3g== -----END CERTIFICATE-----Generated at Tue Apr 21 00:37:53 2026 by rpki-client