$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: 05u3lZMoW322Q9GQnH8PD4GWKUQFkwrAgizLyjOiRoo= Subject key identifier: 81:3D:65:2C:1D:68:C3:59:93:22:83:6D:2E:B3:24:60:94:96:E1:F5 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 047F Signing time: Thu 21 May 2026 00:08:54 +0000 Manifest this update: Thu 21 May 2026 00:08:54 +0000 Manifest next update: Thu 28 May 2026 00:08:53 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: 9j4WOaFSn1ux1GA46C/OH9tU2yH3cMsOIGnUtmZy68w=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: May 21 00:08:54 2026 GMT Not After : May 28 00:08:53 2026 GMT Subject: CN=6a0e4d16-d36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:7b:37:14:6e:70:ba:44:00:27:46:bb:e5: 7a:40:94:36:ef:7d:90:c4:e6:6a:ac:d4:1a:f5:94: 19:58:9e:73:c0:f9:9a:d1:0c:91:c9:8e:c9:cd:fb: e2:e1:6e:93:f5:97:14:e0:d4:4b:b0:a7:f5:c7:c3: 85:0a:a3:0e:4a:47:84:36:a6:82:4e:7d:4d:6d:2d: 5d:0f:34:fa:94:4c:82:ae:b7:a6:5d:9f:75:51:1b: 5f:7b:28:24:51:55:db:2f:60:f0:11:60:f4:53:e2: 1f:42:2a:81:b8:76:20:90:f7:17:af:b9:10:f7:81: c1:21:aa:1a:38:74:11:2c:a6:e7:44:01:96:a7:a1: 0e:b2:c9:1e:1b:39:b3:dc:aa:42:af:9f:06:b1:5e: 3d:57:07:df:b5:2d:5d:9a:5b:e3:54:e8:e7:a3:a3: a1:66:4c:cd:73:90:ad:b4:0f:7c:b4:4c:57:2f:fb: 02:47:86:db:f7:43:99:9d:f8:6d:d4:59:94:45:85: fe:69:9c:8b:f2:ca:fc:c6:74:ac:a2:dd:d7:a6:1d: d1:0f:0b:9a:c8:0b:cf:50:e3:9d:0d:d0:04:8f:46: 62:ff:48:15:0b:b4:8c:16:8e:41:9f:d8:63:4f:d9: 85:c3:53:88:85:c9:d9:80:fb:e9:44:62:6e:9f:cc: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:65:2C:1D:68:C3:59:93:22:83:6D:2E:B3:24:60:94:96:E1:F5 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:97:f5:88:4f:d0:55:50:31:dd:4f:6d:ae:ab:0f:0f:03:5d: a0:bf:70:25:42:80:20:8f:7d:0e:54:ea:b2:f4:d3:d6:f8:5f: 66:45:08:77:69:5c:e7:03:33:95:2e:ce:3b:34:da:0a:20:29: e9:09:30:cc:78:3e:f4:61:5b:c2:bf:42:bc:9d:63:1a:e9:d6: 81:8e:4a:8c:1c:e5:cd:04:8d:12:1e:15:6d:63:69:2c:8f:a6: b8:36:e3:14:83:f6:52:06:ae:13:97:4a:12:81:8a:16:81:b7: 2b:cb:af:3e:3a:ec:16:71:76:99:03:d6:c5:9d:bc:04:4c:23: 59:9b:05:90:c8:94:34:18:5a:e9:65:c7:6d:00:d3:0e:0f:56: 0e:1d:3e:c0:e9:91:ad:e9:bc:cb:1e:37:bc:13:55:19:16:2e: d8:89:6f:77:77:9f:00:5e:39:ed:82:69:4d:81:1a:86:64:fd: 60:a1:3f:fc:37:c8:3a:58:47:ea:c9:07:7a:3e:28:c3:73:51: 43:85:0b:68:33:8e:07:8f:c6:f1:36:d0:be:68:28:e8:2c:04: 96:1c:a9:47:a0:7e:dd:eb:cc:53:fa:5e:e4:b5:d0:f4:04:8c: 0e:33:b5:6c:c4:df:9f:be:c5:3e:06:b3:8a:cc:cc:fd:c7:62: e5:a8:02:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwNTIxMDAwODU0WhcNMjYwNTI4MDAwODUzWjAYMRYwFAYD VQQDEw02YTBlNGQxNi1kMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZ17NxRucLpEACdGu+V6QJQ2732QxOZqrNQa9ZQZWJ5zwPma0QyRyY7Jzfvi 4W6T9ZcU4NRLsKf1x8OFCqMOSkeENqaCTn1NbS1dDzT6lEyCrremXZ91URtfeygk UVXbL2DwEWD0U+IfQiqBuHYgkPcXr7kQ94HBIaoaOHQRLKbnRAGWp6EOsskeGzmz 3KpCr58GsV49VwfftS1dmlvjVOjno6OhZkzNc5CttA98tExXL/sCR4bb90OZnfht 1FmURYX+aZyL8sr8xnSsot3Xph3RDwuayAvPUOOdDdAEj0Zi/0gVC7SMFo5Bn9hj T9mFw1OIhcnZgPvpRGJun8zzgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE9ZSwd aMNZkyKDbS6zJGCUluH1MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY5f1iE/QVVAx3U9trqsPDwNdoL9wJUKAII99DlTqsvTT1vhfZkUId2lc5wMz lS7OOzTaCiAp6QkwzHg+9GFbwr9CvJ1jGunWgY5KjBzlzQSNEh4VbWNpLI+muDbj FIP2UgauE5dKEoGKFoG3K8uvPjrsFnF2mQPWxZ28BEwjWZsFkMiUNBha6WXHbQDT Dg9WDh0+wOmRrem8yx43vBNVGRYu2Ilvd3efAF457YJpTYEahmT9YKE//DfIOlhH 6skHej4ow3NRQ4ULaDOOB4/G8TbQvmgo6CwElhypR6B+3evMU/pe5LXQ9ASMDjO1 bMTfn77FPgaziszM/cdi5agCWQ== -----END CERTIFICATE-----Generated at Thu May 21 10:14:20 2026 by rpki-client