$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json) Hash identifier: Oy0bBBlh1MDF+EIET3HteTPd6cLUTSU64Al7fRWb3nw= Subject key identifier: 6C:6B:F2:B3:51:30:02:26:02:35:25:87:76:04:5E:8D:03:44:29:9C Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft Manifest number: 07E7 Signing time: Sat 02 May 2026 21:27:47 +0000 Manifest this update: Sat 02 May 2026 21:27:46 +0000 Manifest next update: Sat 09 May 2026 21:27:46 +0000 Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: IFZ9vbxO/RxFKRDHbCs1URXE2HO7Dcol4rNuzZPwXOE=) 2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: Rlc9tIFJ76w9w+Q182kiW0dYBgbYcuIIgNLuRF6VH4A=) 3: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: tT41B0xJ+RDXXvQx3CB/Ui5y+1aA7lb07rB6KtZUBJc=) 4: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: 9LuZa38M86RpuIBtOyu8RxTzdNFpAwgeI57izlLPJgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: May 2 21:27:46 2026 GMT Not After : May 9 21:27:46 2026 GMT Subject: CN=69f66c53-3c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:9e:fd:16:47:94:d3:66:e4:23:13:e0:b8: 9b:e9:fa:e0:2e:18:b7:4d:f8:c5:55:2c:d1:d5:64: 5e:46:e0:a6:a2:cc:ac:ec:0c:ef:6d:48:a9:d2:e1: 23:3a:ad:87:35:5e:4c:d9:92:b7:88:a1:b7:bf:b1: 5b:d8:f1:5f:3c:f8:1b:df:8d:85:2e:87:10:31:8a: f7:e1:f1:6b:2a:f6:aa:8b:4b:54:9a:50:f9:96:7e: d7:bc:c2:59:49:5d:27:3b:a7:ae:be:4a:7d:a2:95: 8c:7d:76:ec:25:58:84:f1:5f:61:3a:a1:6a:21:8b: c1:64:c6:c6:a4:01:87:2b:7b:e2:9c:f2:58:22:51: 37:5a:30:7c:85:7c:c7:ba:24:ac:ba:6b:3f:bd:b9: 07:6a:34:53:45:4d:a3:88:74:14:3b:e2:16:e2:5b: 76:5c:b2:7d:46:1b:ba:0f:b3:74:3b:ea:64:1c:da: 5e:c1:ea:15:a7:33:d3:02:19:c7:13:51:bb:51:c6: fa:fa:9a:c3:64:d0:98:e7:b1:a9:88:bc:46:02:27: 56:ce:29:56:1a:72:5e:68:14:3b:06:c6:22:75:7c: 3e:32:db:66:8a:f9:4b:3c:75:4d:be:49:f7:91:9e: 56:2a:c2:30:59:dd:4f:4b:df:47:df:66:a4:51:72: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:F2:B3:51:30:02:26:02:35:25:87:76:04:5E:8D:03:44:29:9C X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:44:1a:50:d4:c7:28:69:2e:ec:ff:f1:1c:fb:ca:60:0a:6f: f4:6b:c1:94:aa:05:f5:1f:c7:2a:0e:56:5c:fe:93:0f:3f:06: 7a:05:14:d7:ed:63:91:14:33:5a:21:0a:e6:9f:bb:35:4a:49: 83:8d:c9:99:7d:43:18:d1:67:f3:fa:ee:9f:cd:e0:ba:6e:de: 65:b2:59:64:9c:e6:7f:42:91:08:ee:b5:be:df:05:37:18:88: 57:74:be:96:6d:63:c9:cc:51:30:7d:a5:67:97:1b:41:4c:f4: 50:49:06:a3:ca:41:2d:70:7d:39:24:ab:5b:c0:73:39:67:60: 12:37:5f:1f:31:66:73:0f:d6:33:f2:3b:a3:bb:9d:f9:4e:dc: 3b:ee:9f:df:dc:6a:77:db:e1:4b:a1:d1:17:01:a5:a3:ee:1d: 44:1c:6b:1a:eb:4a:98:73:9d:69:25:ab:e0:a3:57:da:6c:1d: be:64:80:cc:da:42:4b:96:3c:a7:81:8d:c8:65:eb:0a:e5:27: 5b:70:6f:0f:8c:07:bd:0c:59:2a:fa:0b:45:ac:73:eb:90:db: e0:48:97:d7:50:11:42:11:25:2a:77:f1:80:fa:d2:22:a1:db: 59:58:41:4b:ad:d0:6d:3b:4c:2c:00:ef:fb:4e:3b:59:fa:4b: 35:e2:fe:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjYwNTAyMjEyNzQ2WhcNMjYwNTA5MjEyNzQ2WjAYMRYwFAYD VQQDEw02OWY2NmM1My0zYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOWe/RZHlNNm5CMT4Lib6frgLhi3TfjFVSzR1WReRuCmosys7AzvbUip0uEj Oq2HNV5M2ZK3iKG3v7Fb2PFfPPgb342FLocQMYr34fFrKvaqi0tUmlD5ln7XvMJZ SV0nO6euvkp9opWMfXbsJViE8V9hOqFqIYvBZMbGpAGHK3vinPJYIlE3WjB8hXzH uiSsums/vbkHajRTRU2jiHQUO+IW4lt2XLJ9Rhu6D7N0O+pkHNpeweoVpzPTAhnH E1G7Ucb6+prDZNCY57GpiLxGAidWzilWGnJeaBQ7BsYidXw+MttmivlLPHVNvkn3 kZ5WKsIwWd1PS99H32akUXLYmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxr8rNR MAImAjUlh3YEXo0DRCmcMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5 TGllWUtXbHBlRm90ZDljMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMkQaUNTHKGku7P/xHPvKYApv9GvBlKoF9R/HKg5WXP6TDz8GegUU1+1jkRQz WiEK5p+7NUpJg43JmX1DGNFn8/run83gum7eZbJZZJzmf0KRCO61vt8FNxiIV3S+ lm1jycxRMH2lZ5cbQUz0UEkGo8pBLXB9OSSrW8BzOWdgEjdfHzFmcw/WM/I7o7ud +U7cO+6f39xqd9vhS6HRFwGlo+4dRBxrGutKmHOdaSWr4KNX2mwdvmSAzNpCS5Y8 p4GNyGXrCuUnW3BvD4wHvQxZKvoLRaxz65Db4EiX11ARQhElKnfxgPrSIqHbWVhB S63QbTtMLADv+047WfpLNeL+9Q== -----END CERTIFICATE-----Generated at Sun May 3 16:59:21 2026 by rpki-client