$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: JJVW5ibd206SrmiJxTZYnb7UMXxb99zyXCdr7DtkXV0= Subject key identifier: B2:94:49:5D:C2:D9:55:46:77:9E:3C:8D:78:4D:52:E8:16:1F:65:EF Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 129D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 127C Signing time: Fri 22 May 2026 17:04:52 +0000 Manifest this update: Fri 22 May 2026 17:04:52 +0000 Manifest next update: Fri 29 May 2026 17:04:52 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: gl6qkaRRzCB1FJ+rrPTIOodedrxiqZ0Yx5wD8YFiyYA=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Q8GHoeHbmqW7M4R7JqdbouyG47lAXEk2l5ZINQlZhUw=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 17:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4765 (0x129d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: May 22 17:04:52 2026 GMT Not After : May 29 17:04:52 2026 GMT Subject: CN=6a108cb4-974c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:39:5c:17:07:6c:ea:d4:7b:d3:b0:9a:68: af:6d:10:7b:0a:ab:2c:a6:3d:49:3b:00:1e:8d:6c: 91:8d:72:15:38:0c:4e:95:6f:dd:9a:02:fb:70:58: b4:3d:f6:b0:dd:02:4c:93:f3:d1:4a:9c:ed:e1:f7: fe:bd:d9:03:2d:6f:e3:b8:04:f0:43:da:8f:7c:dd: fe:b0:3b:6a:4b:09:96:e9:80:ad:65:80:6f:af:9e: 86:45:5c:4e:1b:9a:30:a0:38:50:42:6e:20:c4:fd: cb:41:4e:a7:da:e5:9f:42:9c:bc:0e:16:5c:cf:42: b7:e7:20:fe:27:5a:15:af:89:1a:b3:14:d6:02:37: 83:48:5a:00:d2:d5:06:10:eb:37:0d:e2:0b:b1:37: 8a:72:d3:5f:3f:52:5f:aa:f4:b8:98:56:f2:3b:ec: cf:41:f0:94:15:3e:78:42:e8:64:3e:5b:72:5d:e1: 8f:1f:d7:95:20:b9:82:23:0e:4c:d9:7f:90:b0:70: f7:53:d6:16:f4:79:7c:06:28:54:35:73:76:29:c9: e3:c3:01:e7:9a:cb:6a:72:15:5e:dd:b7:9c:74:06: af:f9:91:af:21:e5:23:d5:75:28:0c:21:1f:26:37: 7f:8f:e5:91:05:c2:23:38:2c:c9:b3:da:d3:8f:ef: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:94:49:5D:C2:D9:55:46:77:9E:3C:8D:78:4D:52:E8:16:1F:65:EF X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:c5:d8:b3:e7:43:08:08:43:3a:a1:5b:dd:f2:17:9e:ba: 6d:98:c5:63:bc:02:58:b9:6c:0a:ea:61:78:9f:e8:dd:a3:7e: a2:6f:37:28:98:72:bd:57:9b:86:82:7a:4a:2a:46:01:a2:fa: f4:4c:15:39:43:ee:36:79:fe:cb:0d:02:d7:e9:5e:d6:e2:3a: d8:f8:21:3c:80:89:d2:a8:62:15:72:f4:11:45:f2:60:8e:35: 25:a1:93:26:bf:39:8d:78:90:93:a0:75:b7:e0:0a:0e:ca:42: 6b:88:c9:3c:0a:be:3e:f5:15:be:16:4b:94:3b:56:a6:65:0a: 47:dd:8c:b8:fb:bb:37:a1:1d:b4:bd:f1:2c:de:96:5b:ca:ec: c9:25:dc:99:fe:0e:14:e6:9a:25:b4:7b:b0:5e:d5:6d:c2:b9: e3:76:a8:3a:75:ff:20:43:93:b4:18:fc:8d:22:c1:bf:a2:c1: db:54:84:57:8f:de:56:46:88:b4:04:94:2e:41:e2:8b:df:5e: 39:89:fb:c1:c4:11:0b:2f:8e:cf:7a:84:1e:6b:a1:b5:eb:87: aa:e9:7a:60:f0:c1:0d:99:b6:da:bf:cf:b7:ef:c5:44:da:da: ec:da:d7:a3:2d:0e:80:9f:d5:58:50:46:bc:dc:97:af:0b:40: 38:08:a4:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwNTIyMTcwNDUyWhcNMjYwNTI5MTcwNDUyWjAYMRYwFAYD VQQDEw02YTEwOGNiNC05NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEk5XBcHbOrUe9OwmmivbRB7Cqsspj1JOwAejWyRjXIVOAxOlW/dmgL7cFi0 Pfaw3QJMk/PRSpzt4ff+vdkDLW/juATwQ9qPfN3+sDtqSwmW6YCtZYBvr56GRVxO G5owoDhQQm4gxP3LQU6n2uWfQpy8DhZcz0K35yD+J1oVr4kasxTWAjeDSFoA0tUG EOs3DeILsTeKctNfP1JfqvS4mFbyO+zPQfCUFT54QuhkPltyXeGPH9eVILmCIw5M 2X+QsHD3U9YW9Hl8BihUNXN2KcnjwwHnmstqchVe3becdAav+ZGvIeUj1XUoDCEf Jjd/j+WRBcIjOCzJs9rTj++LuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKUSV3C 2VVGd548jXhNUugWH2XvMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACF7F2LPnQwgIQzqhW93yF566bZjFY7wCWLlsCupheJ/o3aN+om83KJhyvVeb hoJ6SipGAaL69EwVOUPuNnn+yw0C1+le1uI62PghPICJ0qhiFXL0EUXyYI41JaGT Jr85jXiQk6B1t+AKDspCa4jJPAq+PvUVvhZLlDtWpmUKR92MuPu7N6EdtL3xLN6W W8rsySXcmf4OFOaaJbR7sF7VbcK543aoOnX/IEOTtBj8jSLBv6LB21SEV4/eVkaI tASULkHii99eOYn7wcQRCy+Oz3qEHmuhteuHqul6YPDBDZm22r/Pt+/FRNra7NrX oy0OgJ/VWFBGvNyXrwtAOAikMg== -----END CERTIFICATE-----Generated at Sat May 23 03:47:35 2026 by rpki-client