$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: dJL2qjHxC1zWsJ7Fj71pd8Gv2gFaZBGQ6laeQ2Yk1PI= Subject key identifier: F4:99:A5:F9:E5:E0:58:AF:CE:4F:DE:BE:77:08:30:BF:B9:93:EC:7E Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 0787 Signing time: Mon 04 May 2026 21:42:09 +0000 Manifest this update: Mon 04 May 2026 21:42:09 +0000 Manifest next update: Mon 11 May 2026 21:42:09 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: BqHYGDYsbccHJd5l3+Ah3yTYrswfNOs8YAe8uSAdJcM=) 2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=) 3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: KirEUGjAdAYwlJ1vX/xexGJU4YLpCT+izGcMYNz9uNQ=) 4: F6AFB162F66B11F08367D08E6F6F56BC.roa (hash: rB+Tmv1oKzF3mo1fo+ketSQWRb1QMSjxzFBO+4UsFGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: May 4 21:42:09 2026 GMT Not After : May 11 21:42:09 2026 GMT Subject: CN=69f912b1-b8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:12:54:e6:7e:84:59:71:d8:dc:93:80:c4: bd:5b:a9:91:6a:92:ce:a3:51:35:eb:12:8e:d1:f6: 95:b6:2f:85:db:dd:b7:7b:b9:d9:84:76:86:a3:d7: 33:69:64:4d:c0:d6:88:75:52:c5:14:08:3e:31:48: 8b:e3:fc:0d:0a:14:07:fb:5d:fe:48:71:d0:d3:7d: df:a1:d2:7f:f6:7a:2e:af:17:4a:13:99:81:eb:6a: 42:68:9e:b0:cd:2b:70:16:5e:06:b9:04:a7:d3:be: 59:ae:49:05:09:1e:02:eb:84:f8:ce:5d:82:a6:0d: 72:22:90:0e:4d:29:aa:4f:8c:29:b1:24:01:6d:91: 1f:e9:56:00:fd:8b:3b:2f:82:8c:8d:52:52:05:87: 63:fd:45:90:73:a1:6b:4e:cb:ce:b4:8e:1b:7b:85: 26:38:34:a2:78:9b:3c:b4:06:62:8a:f5:73:33:67: 13:70:8f:77:2a:9c:d0:e3:d3:be:37:46:40:14:82: 15:80:f4:84:cb:83:08:53:cb:7f:d7:ad:8c:49:8f: 5c:67:e9:1f:57:4e:da:5e:18:a6:28:f8:dd:d3:19: 8e:e7:03:84:b7:f9:35:45:7d:b1:6b:71:c2:58:46: 94:ba:80:eb:e1:c0:99:9d:ae:e6:88:d7:d8:50:f8: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:99:A5:F9:E5:E0:58:AF:CE:4F:DE:BE:77:08:30:BF:B9:93:EC:7E X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d5:8b:8c:92:7a:1d:d6:a3:db:ce:f3:2f:26:a7:86:74:e8: 99:39:85:44:42:8f:db:17:3c:52:30:06:a9:5c:73:eb:71:35: 0a:61:a9:f2:a1:26:04:59:69:af:a0:5f:37:00:98:87:a6:76: 69:3f:44:d4:03:dd:16:be:60:e9:84:4b:1b:2e:93:04:30:49: 68:2d:85:dc:27:3b:d2:83:76:ca:0a:69:0b:f8:16:6e:23:a0: ea:32:2d:04:5b:0c:97:04:20:b0:73:77:90:25:08:58:93:9d: 06:47:4b:2a:aa:8a:2e:41:a7:37:c7:d2:f4:14:96:32:5e:a7: 22:26:eb:31:22:37:a7:44:fe:60:95:f0:ff:43:44:58:b5:08: 86:79:89:06:97:57:eb:bf:40:ab:ce:18:ed:2e:ef:ad:51:c5: e3:bf:97:5e:af:52:ca:1a:f7:c6:e0:38:48:eb:45:cc:05:a0: 68:d3:50:ff:b4:33:c5:3e:51:f7:68:6f:0c:15:73:bf:61:96: a7:84:02:53:49:d7:e8:41:9e:4d:d3:b5:0c:3b:b7:af:7c:76: f3:d1:59:90:ce:45:6b:62:3e:df:f0:01:dd:ff:c6:02:1e:42: b2:24:68:d9:d1:8a:93:38:4c:29:73:14:ae:95:1c:94:f7:7e: 62:b1:20:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjYwNTA0MjE0MjA5WhcNMjYwNTExMjE0MjA5WjAYMRYwFAYD VQQDEw02OWY5MTJiMS1iOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfMSVOZ+hFlx2NyTgMS9W6mRapLOo1E16xKO0faVti+F2923e7nZhHaGo9cz aWRNwNaIdVLFFAg+MUiL4/wNChQH+13+SHHQ033fodJ/9nourxdKE5mB62pCaJ6w zStwFl4GuQSn075ZrkkFCR4C64T4zl2Cpg1yIpAOTSmqT4wpsSQBbZEf6VYA/Ys7 L4KMjVJSBYdj/UWQc6FrTsvOtI4be4UmODSieJs8tAZiivVzM2cTcI93KpzQ49O+ N0ZAFIIVgPSEy4MIU8t/162MSY9cZ+kfV07aXhimKPjd0xmO5wOEt/k1RX2xa3HC WEaUuoDr4cCZna7miNfYUPhJJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSZpfnl 4Fivzk/evncIML+5k+x+MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArdWLjJJ6Hdaj287zLyanhnTomTmFREKP2xc8UjAGqVxz63E1CmGp8qEmBFlp r6BfNwCYh6Z2aT9E1APdFr5g6YRLGy6TBDBJaC2F3Cc70oN2ygppC/gWbiOg6jIt BFsMlwQgsHN3kCUIWJOdBkdLKqqKLkGnN8fS9BSWMl6nIibrMSI3p0T+YJXw/0NE WLUIhnmJBpdX679Aq84Y7S7vrVHF47+XXq9Syhr3xuA4SOtFzAWgaNNQ/7QzxT5R 92hvDBVzv2GWp4QCU0nX6EGeTdO1DDu3r3x289FZkM5Fa2I+3/AB3f/GAh5CsiRo 2dGKkzhMKXMUrpUclPd+YrEgzA== -----END CERTIFICATE-----Generated at Wed May 6 03:27:55 2026 by rpki-client