$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: vl7kJNjqWyYO82ABNs2xPjJ0btvZuram/TUqTk8lvTM= Subject key identifier: 6F:F5:5A:A1:20:18:AA:75:8F:AB:12:EE:03:50:BF:66:D2:A4:D5:63 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: A7 Signing time: Thu 21 May 2026 07:20:00 +0000 Manifest this update: Thu 21 May 2026 07:20:00 +0000 Manifest next update: Thu 28 May 2026 07:20:00 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: N5vXWJuvsfyP5xpnHdkWynPNOFFuEvPM0+oRDgdz75Y=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: sLjeaSGa4LRSlSB8sQPoF/VbSZaMLTrPtakBzYE292w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: May 21 07:20:00 2026 GMT Not After : May 28 07:20:00 2026 GMT Subject: CN=6a0eb220-0f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:bb:43:34:6d:7f:17:a8:d9:e0:11:ab:ae: 9d:e0:23:6c:18:7b:d2:32:94:0f:52:66:84:e9:8c: 4c:e1:bb:b6:82:fb:2b:04:d0:db:fd:f0:64:73:f8: 08:f4:aa:f3:2b:8b:f0:2c:e6:60:24:91:74:10:7c: d2:cf:c2:0b:31:d4:e6:02:63:ab:c4:f9:0c:a7:5d: 9e:5d:a1:b5:0d:b5:bd:25:4d:65:9c:df:f8:1a:e7: e2:e0:4e:7c:c8:34:84:de:d2:72:22:f5:a5:bb:37: 16:09:c2:9c:cc:a3:f8:f5:a9:ff:38:77:f8:f2:8c: 51:67:75:c0:56:18:e9:a2:93:91:5d:a3:f5:83:37: 5e:19:fc:29:e7:39:71:89:06:32:8d:9b:c5:5f:51: 1f:5a:e1:c7:86:b8:86:15:e9:dd:b8:55:c3:c1:a1: 53:c8:3c:c5:b0:3a:e6:78:d9:54:3d:de:c1:b7:7e: 6d:f6:ed:5a:79:68:aa:b5:9b:6e:2b:97:ff:5e:5c: 3e:17:e5:3d:17:8f:df:e4:54:c3:21:51:31:9c:db: 26:45:c1:de:dc:a4:5b:71:79:ff:35:c2:d3:f6:cf: 73:3f:3c:61:ae:c1:d2:f8:04:88:02:0d:21:11:b9: ac:71:c6:be:e4:fd:39:bf:ba:22:c8:3f:c5:84:ec: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F5:5A:A1:20:18:AA:75:8F:AB:12:EE:03:50:BF:66:D2:A4:D5:63 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fd:21:0f:88:ba:f8:c0:da:b4:3e:4c:3a:b5:01:9b:be:f6: c4:56:c9:5b:8a:41:fa:15:49:de:d7:a3:80:42:91:da:f0:83: cb:3d:3a:32:36:53:70:a9:8b:d7:db:1f:b2:34:b0:5e:da:f4: b6:35:ad:f1:5e:76:d2:d2:4b:c8:ee:7f:ca:41:dc:ea:fb:7b: 00:86:19:5a:51:07:92:bf:bd:91:dc:86:59:52:d6:b4:1e:16: 38:c7:eb:1c:3e:c0:df:a6:10:52:5a:71:fc:3d:ba:02:fc:20: 7f:2e:36:56:bc:e7:4e:ab:b1:c1:63:61:80:76:35:a6:f8:96: 12:8e:3e:63:ed:3f:02:c5:3a:19:69:7c:31:5d:75:d8:ed:13: 88:f3:64:b0:ab:7d:d2:99:8d:8c:4f:3d:12:c1:b3:29:c9:f7: bd:ca:54:fc:5e:78:2a:1c:a1:32:00:32:57:3d:66:98:00:2b: dc:af:4e:58:4d:d2:e4:e4:ee:77:f1:89:5b:cc:3f:f8:25:8e: fc:78:cc:a5:33:7a:d5:cf:25:71:b4:29:80:c6:c3:21:6c:78: 67:e2:26:de:01:41:3f:ec:d1:ed:e5:24:0d:38:57:77:ed:ef: e6:84:29:9c:ce:be:1b:17:eb:38:5f:18:0f:c1:84:80:0f:d5: 51:d1:8f:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzQUExMTAvBgNVBAUTKEY3RDZERTZFN0IyQUM3QkQ0NTBDNzcxNTg2M0U5Nzk5 NTUzODNFNEUwHhcNMjYwNTIxMDcyMDAwWhcNMjYwNTI4MDcyMDAwWjAYMRYwFAYD VQQDEw02YTBlYjIyMC0wZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylC7QzRtfxeo2eARq66d4CNsGHvSMpQPUmaE6YxM4bu2gvsrBNDb/fBkc/gI 9KrzK4vwLOZgJJF0EHzSz8ILMdTmAmOrxPkMp12eXaG1DbW9JU1lnN/4Gufi4E58 yDSE3tJyIvWluzcWCcKczKP49an/OHf48oxRZ3XAVhjpopORXaP1gzdeGfwp5zlx iQYyjZvFX1EfWuHHhriGFenduFXDwaFTyDzFsDrmeNlUPd7Bt35t9u1aeWiqtZtu K5f/Xlw+F+U9F4/f5FTDIVExnNsmRcHe3KRbcXn/NcLT9s9zPzxhrsHS+ASIAg0h Ebmscca+5P05v7oiyD/FhOy7OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/1WqEg GKp1j6sS7gNQv2bSpNVjMB8GA1UdIwQYMBaAFPfW3m57Kse9RQx3FYY+l5lVOD5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNBQS81MkQ5QUQ0NjU5 NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3MUZESGNWaGo2WG1WVTRQ azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNBQS81MkQ5QUQ0NjU5NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3 MUZESGNWaGo2WG1WVTRQazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARf0hD4i6+MDatD5MOrUBm772xFbJW4pB+hVJ3tejgEKR2vCDyz06MjZTcKmL 19sfsjSwXtr0tjWt8V520tJLyO5/ykHc6vt7AIYZWlEHkr+9kdyGWVLWtB4WOMfr HD7A36YQUlpx/D26Avwgfy42VrznTquxwWNhgHY1pviWEo4+Y+0/AsU6GWl8MV11 2O0TiPNksKt90pmNjE89EsGzKcn3vcpU/F54KhyhMgAyVz1mmAAr3K9OWE3S5OTu d/GJW8w/+CWO/HjMpTN61c8lcbQpgMbDIWx4Z+Im3gFBP+zR7eUkDThXd+3v5oQp nM6+GxfrOF8YD8GEgA/VUdGPZA== -----END CERTIFICATE-----Generated at Thu May 21 12:58:38 2026 by rpki-client