$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: hNkJictyGwcPzQLv9+xZMO41q/sZHJhB+DWD5c7kkj0= Subject key identifier: 9A:70:8B:00:8E:A9:2E:CF:2A:F5:81:AC:AC:79:4E:EB:1E:39:AD:C4 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 027C Signing time: Thu 21 May 2026 02:01:56 +0000 Manifest this update: Thu 21 May 2026 02:01:56 +0000 Manifest next update: Thu 28 May 2026 02:01:56 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: gt3Nm/cKAQfrafl8tRLFrpUZP1ITY3D26KDzLDsnH7I=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: ll1SbuQqvTvXz+W/3qaivS8wQz00+kN4RdwzaNK6/rU=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: hJnEJ9xJtcK65uU+a2lYLQG493yZ6VM20lGCXAUnZKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: May 21 02:01:56 2026 GMT Not After : May 28 02:01:56 2026 GMT Subject: CN=6a0e6794-bf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:2b:67:31:8f:08:a5:09:07:10:b0:49:3c: 0d:24:cb:3b:e1:58:d4:5c:50:39:9c:74:38:2e:09: 28:c0:3c:c4:d6:89:ab:57:70:8c:0a:13:01:46:c6: 55:0b:68:75:cc:f5:1e:43:b6:9b:76:67:1c:34:4f: d6:0d:29:a3:24:9f:bb:af:91:6d:fc:ae:53:b7:6b: 1d:55:23:ad:77:35:09:97:8a:04:38:61:f9:e8:e1: da:42:fb:53:bb:c9:4e:99:57:8b:e8:2e:a3:17:2a: d4:09:70:a2:a7:74:92:f3:27:a6:c8:93:de:18:b7: 49:21:f2:c7:88:ee:58:01:89:c8:a0:24:ea:28:9a: 0e:d7:dc:4b:45:ab:08:28:de:64:e2:0e:e1:72:32: 8b:17:39:77:56:7e:45:02:4e:b0:e1:cc:d7:9d:dc: 83:d8:e9:c5:ec:92:6e:8b:f5:c9:98:9c:3c:7d:95: fb:73:18:54:4a:0d:11:05:8a:67:97:dd:e7:fe:64: 9f:2e:5c:aa:9f:14:8b:d7:4e:84:58:27:bd:7b:67: 19:16:4b:1b:6f:50:b1:cc:88:81:9b:41:2f:1d:42: a7:da:d5:50:58:09:3b:b0:7b:7f:98:a1:e0:d5:6c: 5b:52:cb:c2:51:23:c6:3a:c9:18:6d:87:83:0e:1f: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:8B:00:8E:A9:2E:CF:2A:F5:81:AC:AC:79:4E:EB:1E:39:AD:C4 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:67:79:0a:43:fd:07:19:a9:0a:69:37:e5:6c:cb:7f:92:25: 92:21:1a:55:14:54:3b:79:b1:2c:8a:9e:25:a4:3c:df:20:11: c3:a7:dc:f4:02:4c:3a:f5:c8:ae:cb:26:bf:5c:94:c8:15:b7: a6:df:a2:c0:36:ce:ad:57:c1:07:48:c1:da:42:00:84:5b:3e: 6d:31:c2:6d:c4:58:91:d8:d5:ee:bf:b2:c0:37:09:37:84:65: 80:d1:e0:f0:7e:db:70:07:3d:de:64:56:05:b2:b5:37:56:54: 80:5a:9c:9f:44:7c:f6:fc:f7:3c:80:79:8b:c2:34:22:0e:d5: 89:9a:bc:f4:3d:47:c7:be:75:4e:8d:eb:81:47:9c:10:7a:d0: c7:4a:77:12:d8:2f:f5:6d:d3:95:aa:ad:02:40:91:29:df:04: e6:d6:a7:11:b8:88:94:6f:89:ff:51:22:b7:79:3b:b1:6f:25: 1c:ce:f8:75:53:e6:dc:a6:b4:a0:ce:de:8c:b6:91:9e:3c:5b: bb:49:a5:b4:08:d4:87:5a:76:8c:ec:f7:06:66:0e:6e:e2:0f: 1e:c1:ad:f6:ef:6b:56:7d:83:33:68:d2:18:27:77:ff:92:5f: 6d:1a:be:64:ac:c6:73:9d:22:2f:8f:0a:c5:c2:b1:59:4b:98: ef:72:77:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjYwNTIxMDIwMTU2WhcNMjYwNTI4MDIwMTU2WjAYMRYwFAYD VQQDEw02YTBlNjc5NC1iZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorcrZzGPCKUJBxCwSTwNJMs74VjUXFA5nHQ4LgkowDzE1omrV3CMChMBRsZV C2h1zPUeQ7abdmccNE/WDSmjJJ+7r5Ft/K5Tt2sdVSOtdzUJl4oEOGH56OHaQvtT u8lOmVeL6C6jFyrUCXCip3SS8yemyJPeGLdJIfLHiO5YAYnIoCTqKJoO19xLRasI KN5k4g7hcjKLFzl3Vn5FAk6w4czXndyD2OnF7JJui/XJmJw8fZX7cxhUSg0RBYpn l93n/mSfLlyqnxSL106EWCe9e2cZFksbb1CxzIiBm0EvHUKn2tVQWAk7sHt/mKHg 1WxbUsvCUSPGOskYbYeDDh9HvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpwiwCO qS7PKvWBrKx5TuseOa3EMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWGd5CkP9BxmpCmk35WzLf5IlkiEaVRRUO3mxLIqeJaQ83yARw6fc9AJMOvXI rssmv1yUyBW3pt+iwDbOrVfBB0jB2kIAhFs+bTHCbcRYkdjV7r+ywDcJN4RlgNHg 8H7bcAc93mRWBbK1N1ZUgFqcn0R89vz3PIB5i8I0Ig7ViZq89D1Hx751To3rgUec EHrQx0p3Etgv9W3TlaqtAkCRKd8E5tanEbiIlG+J/1Eit3k7sW8lHM74dVPm3Ka0 oM7ejLaRnjxbu0mltAjUh1p2jOz3BmYObuIPHsGt9u9rVn2DM2jSGCd3/5JfbRq+ ZKzGc50iL48KxcKxWUuY73J3nQ== -----END CERTIFICATE-----Generated at Thu May 21 09:39:07 2026 by rpki-client