$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: YwJpw3vZWpvcA6xHsMqDWpP/psB/Onfq9PipxqmlWcQ= Subject key identifier: CB:1E:FF:61:1B:0A:03:B1:77:89:E1:E3:E2:E1:01:EE:B0:7B:C0:74 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: B7 Signing time: Mon 27 Apr 2026 07:28:15 +0000 Manifest this update: Mon 27 Apr 2026 07:28:15 +0000 Manifest next update: Mon 04 May 2026 07:28:15 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: z2RSDoKXLARNXcxWIKNz6tzkPlS2HNDpp4OC91EktBw=) 2: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 3: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 4: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: pxyEkBwPYXvAD+2QjsKqnPjRJ2vw6CaCkMBO2KcYyvE=) 5: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) 6: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 7: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 07:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Apr 27 07:28:15 2026 GMT Not After : May 4 07:28:15 2026 GMT Subject: CN=69ef100f-8fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:7f:0f:77:4e:d3:f9:09:4d:2e:d2:3f:de: 2f:d7:c0:2e:dc:69:9f:a1:c5:1d:af:e8:8f:ce:2f: 03:32:93:ae:90:8a:5c:ce:96:97:42:0a:a2:1f:63: b9:7e:a0:43:08:62:1c:9e:98:23:8a:1d:8a:5c:5e: 34:88:ab:ae:b7:6d:8e:ce:20:7c:cb:9c:3a:fb:ed: a9:24:01:c4:14:eb:e7:b9:9f:0e:62:0f:f5:4b:71: 88:ce:9d:f1:98:74:db:ad:59:07:e7:c4:fd:54:b4: 1b:00:e8:69:05:d1:46:d8:98:e2:90:fd:53:5f:a6: 2c:ce:18:c9:31:0d:c4:91:77:28:21:01:0d:5c:86: c9:01:e1:bb:0a:18:b3:df:f5:77:06:17:e1:09:82: ee:21:12:40:b1:ff:cb:ce:02:60:3e:06:66:29:56: d5:0a:06:08:f5:14:59:2d:94:ce:99:ed:96:f1:90: 60:dd:30:40:28:cb:75:00:53:96:5d:e9:60:7d:1e: 11:d8:af:89:e8:c7:06:f4:66:4e:19:76:6b:30:f3: 78:ce:93:a0:ce:35:39:a6:4e:ee:99:45:21:a8:df: 04:b1:66:6c:b9:96:96:ac:19:5c:47:45:bc:40:15: 40:8c:03:79:81:37:94:d3:b0:b4:9c:d6:42:9b:77: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:FF:61:1B:0A:03:B1:77:89:E1:E3:E2:E1:01:EE:B0:7B:C0:74 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8c:25:c3:8a:e1:5c:0d:01:07:ca:2d:34:27:3a:41:0d:4c: 81:8a:90:02:5d:fa:27:0c:11:b8:c5:58:14:2c:86:16:53:c9: 42:ce:d2:fc:22:8c:2c:27:39:2a:1f:ff:fb:a6:45:b6:32:f3: 36:b5:8e:7d:6c:bc:9c:90:b5:ba:56:c0:a3:de:58:a8:8c:a1: 96:ad:45:46:65:df:5e:58:96:02:24:3d:a6:0c:a4:7a:71:15: cf:1d:0c:5e:ea:3a:26:a6:aa:b6:40:c6:67:75:d5:e2:fa:1e: 98:43:10:0d:3d:02:a5:fe:84:11:ce:87:8b:33:10:98:f4:e2: eb:83:e5:d8:d7:44:60:f5:fc:41:a3:10:1d:0f:62:99:b3:f9: f3:59:75:82:bf:df:77:d1:bc:2b:fa:e8:1d:85:af:96:9f:fb: 31:28:0f:bf:f3:69:cf:f2:21:b2:fa:5e:5c:a2:fb:e1:42:95: ad:65:26:8d:03:4c:6a:d8:02:67:7f:c8:fb:bd:58:ef:0c:07: ce:3c:55:a7:c4:e0:b4:b8:c1:16:74:9c:f0:57:f4:06:36:b9: 06:f4:2b:a2:e6:0f:db:aa:d7:d9:54:3e:c5:17:3e:f7:6f:39: 58:89:a6:d7:ba:e9:ad:35:4b:c5:e3:1d:57:3d:0c:3f:f8:63: cc:66:44:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwNDI3MDcyODE1WhcNMjYwNTA0MDcyODE1WjAYMRYwFAYD VQQDEw02OWVmMTAwZi04ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnd/D3dO0/kJTS7SP94v18Au3GmfocUdr+iPzi8DMpOukIpczpaXQgqiH2O5 fqBDCGIcnpgjih2KXF40iKuut22OziB8y5w6++2pJAHEFOvnuZ8OYg/1S3GIzp3x mHTbrVkH58T9VLQbAOhpBdFG2JjikP1TX6YszhjJMQ3EkXcoIQENXIbJAeG7Chiz 3/V3BhfhCYLuIRJAsf/LzgJgPgZmKVbVCgYI9RRZLZTOme2W8ZBg3TBAKMt1AFOW XelgfR4R2K+J6McG9GZOGXZrMPN4zpOgzjU5pk7umUUhqN8EsWZsuZaWrBlcR0W8 QBVAjAN5gTeU07C0nNZCm3f+GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMse/2Eb CgOxd4nh4+LhAe6we8B0MB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAYwlw4rhXA0BB8otNCc6QQ1MgYqQAl36JwwRuMVYFCyGFlPJQs7S/CKMLCc5 Kh//+6ZFtjLzNrWOfWy8nJC1ulbAo95YqIyhlq1FRmXfXliWAiQ9pgykenEVzx0M Xuo6JqaqtkDGZ3XV4voemEMQDT0Cpf6EEc6HizMQmPTi64Pl2NdEYPX8QaMQHQ9i mbP581l1gr/fd9G8K/roHYWvlp/7MSgPv/Npz/IhsvpeXKL74UKVrWUmjQNMatgC Z3/I+71Y7wwHzjxVp8TgtLjBFnSc8Ff0Bja5BvQrouYP26rX2VQ+xRc+9285WImm 17rprTVLxeMdVz0MP/hjzGZEMA== -----END CERTIFICATE-----Generated at Tue Apr 28 13:53:55 2026 by rpki-client