$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: t+gJanAKkfT34mvjetD4oU/sx4sWsDz2/pRR2O0ujI0= Subject key identifier: 41:CE:A5:74:33:69:4E:03:B5:45:E1:5F:E0:25:BF:C8:2E:11:9A:E1 Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 39 Signing time: Fri 15 May 2026 08:44:34 +0000 Manifest this update: Fri 15 May 2026 08:44:33 +0000 Manifest next update: Fri 22 May 2026 08:44:33 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: xtIK/NuTH8C1/IH/LB3yv3FjFmgk80AjrIoJpe2rOHw=) 2: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) 3: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 08:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: May 15 08:44:33 2026 GMT Not After : May 22 08:44:33 2026 GMT Subject: CN=6a06dcf1-5ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:8e:b9:d4:d0:98:a7:34:2d:47:a3:73:a7: a8:65:57:7f:32:bf:ae:ce:db:32:e3:0e:d7:df:a7: c7:37:e1:2a:c8:41:7c:5e:94:29:9d:fc:e1:83:8c: 16:b7:cc:57:af:95:f1:57:49:45:f6:10:4c:5c:79: 98:5a:f3:6a:d8:34:86:2b:1d:34:6e:eb:85:a7:d1: 26:c1:05:98:b0:9d:c2:c0:ca:e9:33:66:da:08:2c: b1:6f:58:1a:ec:39:25:df:7e:b4:be:10:c2:46:e3: 18:8d:86:d7:e9:a7:8e:c7:66:88:77:03:59:e8:da: b8:76:63:4f:db:f4:1f:8b:f0:11:3d:72:7b:f8:56: 9f:47:30:4b:fa:8e:8e:1a:20:50:f7:36:a7:b1:97: 42:73:9a:a7:24:7d:86:09:36:20:f8:91:e0:b1:66: 82:1b:40:1c:b5:45:f5:ae:48:14:40:49:1a:60:92: b8:dd:e3:84:33:9f:73:d8:12:c8:f3:81:b0:ed:00: ae:37:1f:c4:03:b7:70:21:ff:c1:aa:d3:0d:e6:90: b3:35:8e:e6:33:76:fb:a3:7c:45:0b:9e:c3:b1:1e: 09:65:72:3b:ea:61:79:49:4e:55:d1:82:29:b0:7b: a7:31:96:fb:53:3b:6d:de:a8:eb:8e:ec:15:36:c0: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CE:A5:74:33:69:4E:03:B5:45:E1:5F:E0:25:BF:C8:2E:11:9A:E1 X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:66:f0:5d:31:fb:d6:14:6e:12:42:24:54:d7:10:c5:b7:96: 51:f0:22:c4:37:a1:99:63:45:d8:76:5b:28:93:ac:96:db:e5: f6:91:00:94:0e:f1:f5:a6:c0:56:e4:0e:17:f9:31:01:af:d4: 87:18:bf:a9:4e:31:1d:07:52:ac:f1:d6:74:dd:d9:4a:4a:fa: fc:8c:c5:c1:9e:00:c4:e9:24:7f:e5:b3:c7:8d:b0:96:3c:75: d0:cd:50:1d:81:27:f2:b3:4d:f3:4c:3c:4d:67:40:3e:c4:52: 3f:e9:0a:fc:cd:f5:96:88:39:78:7a:f1:63:e8:52:0c:fb:a2: 83:97:b5:26:5b:77:3d:27:b6:d9:66:61:3c:57:0d:b6:88:6a: 20:31:27:60:7e:06:33:ee:cc:2e:9b:96:8b:51:43:52:61:b2: 92:28:f8:41:62:08:ce:34:4e:66:62:51:1e:d9:ae:07:55:b6: 41:2a:4d:8d:14:c8:ea:b3:5c:d5:c6:5a:fb:d9:d6:e4:f5:f7: 40:80:14:b0:ea:e2:17:b5:7a:18:9c:99:3f:7f:e9:58:c0:b1: 37:dc:20:de:ce:3e:a6:8d:37:e0:0d:f1:ea:1d:be:89:a0:a6: 3c:a2:5d:d6:bc:7d:ed:68:11:7d:04:c2:48:06:12:a3:a1:b7: 2c:12:58:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3 Q0U4QzczOTAeFw0yNjA1MTUwODQ0MzNaFw0yNjA1MjIwODQ0MzNaMBgxFjAUBgNV BAMTDTZhMDZkY2YxLTVmZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3po651NCYpzQtR6Nzp6hlV38yv67O2zLjDtffp8c34SrIQXxelCmd/OGDjBa3 zFevlfFXSUX2EExceZha82rYNIYrHTRu64Wn0SbBBZiwncLAyukzZtoILLFvWBrs OSXffrS+EMJG4xiNhtfpp47HZoh3A1no2rh2Y0/b9B+L8BE9cnv4Vp9HMEv6jo4a IFD3Nqexl0JzmqckfYYJNiD4keCxZoIbQBy1RfWuSBRASRpgkrjd44Qzn3PYEsjz gbDtAK43H8QDt3Ah/8Gq0w3mkLM1juYzdvujfEULnsOxHgllcjvqYXlJTlXRgimw e6cxlvtTO23eqOuO7BU2wKpJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQc6ldDNp TgO1ReFf4CW/yC4RmuEwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsZvBdMfvWFG4SQiRU1xDFt5ZR8CLEN6GZY0XYdlsok6yW2+X2kQCUDvH1psBW 5A4X+TEBr9SHGL+pTjEdB1Ks8dZ03dlKSvr8jMXBngDE6SR/5bPHjbCWPHXQzVAd gSfys03zTDxNZ0A+xFI/6Qr8zfWWiDl4evFj6FIM+6KDl7UmW3c9J7bZZmE8Vw22 iGogMSdgfgYz7swum5aLUUNSYbKSKPhBYgjONE5mYlEe2a4HVbZBKk2NFMjqs1zV xlr72dbk9fdAgBSw6uIXtXoYnJk/f+lYwLE33CDezj6mjTfgDfHqHb6JoKY8ol3W vH3taBF9BMJIBhKjobcsEljg -----END CERTIFICATE-----Generated at Sun May 17 08:46:53 2026 by rpki-client