$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: 3XDWUMyFknJf0zKr+VTZFBMiwOTnHGXEZ+w13fUBdTk= Subject key identifier: 8F:5F:13:69:96:E2:0A:82:C5:B5:7C:C0:35:EA:37:75:C8:3C:7D:AE Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: D1 Signing time: Mon 15 Jun 2026 07:13:41 +0000 Manifest this update: Mon 15 Jun 2026 07:13:40 +0000 Manifest next update: Mon 22 Jun 2026 07:13:40 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: pOQku7KWovoDM7eskBk66k3pExmjRd7SIiga8zkgP7Y=) 2: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 3: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 4: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 5: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: Xu7NiqZL9JdGnjrkCnt/wdoZ7leyujbZwGzelNxEsxs=) 6: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 7: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Jun 15 07:13:40 2026 GMT Not After : Jun 22 07:13:40 2026 GMT Subject: CN=6a2fa624-b4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:04:94:5e:af:4e:e2:a1:d3:52:ab:a3:d9: b2:61:32:d6:3f:02:3d:9e:ba:8b:7a:c3:40:20:d2: ef:64:10:70:80:7d:c4:5b:5a:b5:44:bb:9b:32:61: 7e:f1:f0:eb:21:c2:a4:1a:29:5c:5f:56:b3:d8:54: 4a:5e:d7:90:de:5c:41:3c:ff:07:6c:ae:39:e2:0e: 9c:84:d2:6a:7b:af:85:a9:20:6a:c3:36:e9:4f:3c: 05:5e:75:55:79:94:a7:41:0d:3e:61:8e:10:9a:b5: 6a:ce:9a:c7:b7:46:82:2e:83:c6:a9:66:83:b9:f9: 3f:28:58:63:5c:64:a6:2f:f8:b4:1d:5f:cd:6b:ad: 00:e5:20:4e:91:5f:18:03:f0:b4:dd:11:8a:c6:dd: 8d:83:93:a1:bf:a6:e6:64:1d:57:58:a4:68:df:9f: 77:14:19:25:99:ce:70:73:51:26:f0:a9:d9:48:83: b6:6c:59:43:5c:71:71:0f:e5:67:23:33:50:1a:f8: 65:f8:4f:74:6e:3c:42:8c:a8:0a:6d:97:4a:ac:6a: 51:d4:a5:b7:10:66:d1:0f:95:6a:67:d3:7f:3b:f2: 42:a6:84:40:97:f0:f2:3d:8f:6f:bc:34:02:90:6b: 64:cb:bd:13:c8:59:1b:a8:34:31:6d:c2:c2:57:9c: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5F:13:69:96:E2:0A:82:C5:B5:7C:C0:35:EA:37:75:C8:3C:7D:AE X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:01:f1:1a:03:c3:ed:f4:64:99:c8:69:01:88:e1:61:b5: d4:91:ae:1b:80:c5:d3:8d:21:d5:69:8f:13:a1:2c:e9:8b:f4: 07:b8:f5:a5:fa:15:c1:69:ac:e0:75:ed:db:45:99:76:ea:da: eb:e5:39:18:d5:42:0c:dd:d2:a0:30:63:a1:11:fc:f4:f5:b9: e6:15:a0:98:d1:12:ef:17:97:f3:6f:88:7a:40:3e:2b:ad:8e: 40:f6:cb:4d:58:22:cf:78:d5:37:5e:48:b6:65:29:d8:e1:a5: 1b:3f:a9:95:eb:d9:f5:c7:05:c6:66:1e:16:15:2c:ce:62:f6: 04:49:7d:06:39:d5:f0:a0:27:61:25:60:4c:fe:42:a8:61:ee: d0:a3:29:0c:f7:3c:d1:18:a1:36:ea:8f:b2:39:a1:04:ac:6b: a1:b3:0b:88:6a:03:1f:0c:af:5b:da:0a:14:5b:4c:70:2a:9c: 19:6f:6d:67:c0:5f:bb:7c:99:a8:d2:f4:e2:39:bf:ca:cd:13: e6:1e:61:15:10:ec:54:06:ee:c5:1a:48:1f:76:73:94:8d:f2: 3e:92:12:af:7e:d6:b3:2d:4f:3c:f3:4e:9c:1d:3a:08:7a:91: 26:9f:99:4b:8d:a8:c2:35:a8:af:fe:74:62:ef:ec:7a:73:d0: 38:22:ab:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwNjE1MDcxMzQwWhcNMjYwNjIyMDcxMzQwWjAYMRYwFAYD VQQDEw02YTJmYTYyNC1iNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvwElF6vTuKh01Kro9myYTLWPwI9nrqLesNAINLvZBBwgH3EW1q1RLubMmF+ 8fDrIcKkGilcX1az2FRKXteQ3lxBPP8HbK454g6chNJqe6+FqSBqwzbpTzwFXnVV eZSnQQ0+YY4QmrVqzprHt0aCLoPGqWaDufk/KFhjXGSmL/i0HV/Na60A5SBOkV8Y A/C03RGKxt2Ng5Ohv6bmZB1XWKRo3593FBklmc5wc1Em8KnZSIO2bFlDXHFxD+Vn IzNQGvhl+E90bjxCjKgKbZdKrGpR1KW3EGbRD5VqZ9N/O/JCpoRAl/DyPY9vvDQC kGtky70TyFkbqDQxbcLCV5ymhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9fE2mW 4gqCxbV8wDXqN3XIPH2uMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKoB8RoDw+30ZJnIaQGI4WG11JGuG4DF040h1WmPE6Es6Yv0B7j1pfoVwWms 4HXt20WZdura6+U5GNVCDN3SoDBjoRH89PW55hWgmNES7xeX82+IekA+K62OQPbL TVgiz3jVN15ItmUp2OGlGz+plevZ9ccFxmYeFhUszmL2BEl9BjnV8KAnYSVgTP5C qGHu0KMpDPc80RihNuqPsjmhBKxrobMLiGoDHwyvW9oKFFtMcCqcGW9tZ8Bfu3yZ qNL04jm/ys0T5h5hFRDsVAbuxRpIH3ZzlI3yPpISr37Wsy1PPPNOnB06CHqRJp+Z S42owjWor/50Yu/senPQOCKrJA== -----END CERTIFICATE-----Generated at Tue Jun 16 18:55:25 2026 by rpki-client