$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft File: N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json) Hash identifier: Cb2PltFwUhf0gmFhwLZln8T3dA7nwYkcDUC6dVFZOvY= Subject key identifier: 53:D8:AE:E4:3A:74:F7:C5:D9:CB:27:FD:3D:FB:AE:93:0C:F2:C8:21 Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft Manifest number: 15 Signing time: Wed 25 Mar 2026 08:15:19 +0000 Manifest this update: Wed 25 Mar 2026 08:15:18 +0000 Manifest next update: Wed 01 Apr 2026 08:15:18 +0000 Files and hashes: 1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: eqrFkGnAvGPWQtVtqSM8SdBoyJW3bS2EcmMlldch3PE=) 2: CD7290AA136F11F1982A4804323D8C67.roa (hash: CCP9/OeftiKfulV8qYHt+suPF/2fOVKP+J3q0O5BU9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Validity Not Before: Mar 25 08:15:18 2026 GMT Not After : Apr 1 08:15:18 2026 GMT Subject: CN=69c39997-e7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:2a:7a:16:c5:98:59:9b:ed:94:b5:48:95: 71:7f:af:b3:d5:4d:41:30:2b:14:e2:dc:70:41:f8: a1:fa:62:99:1a:f3:b7:57:55:9b:be:3a:df:6f:05: 93:e1:91:ad:83:30:50:79:3c:b2:61:d3:d3:4e:56: e1:de:65:b3:15:1f:04:3a:79:eb:5f:b0:f3:6c:fa: cd:61:f6:31:26:ce:ca:2e:d4:98:06:bc:fb:06:d8: 66:f2:9f:9b:86:3d:94:ca:47:40:0e:95:3e:3e:e5: da:76:a8:2d:d8:1b:b4:ad:87:68:a1:0d:7e:b8:96: 38:bc:45:b4:2f:4a:91:4f:43:8f:f4:bb:15:88:41: 4f:b5:dc:21:60:69:ee:22:ea:c3:e6:90:c6:0b:7a: ac:41:98:66:3d:21:10:c6:f0:10:4c:2a:1c:62:69: 20:71:31:f9:e0:7a:bc:76:44:9e:fb:8b:c0:9e:eb: e6:91:23:4d:8f:70:0a:58:10:f1:7c:01:05:0a:f8: 96:c7:83:a0:77:f5:d3:ab:c5:63:f4:05:71:b8:7b: 4c:f4:22:c3:13:8a:44:fc:9b:ad:a4:0e:58:ca:e9: da:01:55:54:fc:b5:2a:4c:84:76:f7:c1:9d:6b:91: 4e:f7:ff:f6:ec:56:b8:81:64:92:2e:f0:29:d7:27: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D8:AE:E4:3A:74:F7:C5:D9:CB:27:FD:3D:FB:AE:93:0C:F2:C8:21 X509v3 Authority Key Identifier: keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b5:53:d1:8f:da:db:9f:d9:f2:1d:2b:fb:d9:9a:4b:20:90: c3:40:51:bb:f6:41:ee:48:a9:84:28:c4:ec:90:6b:b6:6c:32: 05:d4:ed:6c:5d:46:e5:10:ee:b0:03:5a:d3:a5:f5:86:6d:4b: f3:21:15:02:35:5c:86:a0:73:87:0f:21:98:c4:bf:7c:72:16: c4:07:11:af:d6:b3:c3:33:ca:25:3f:25:cb:7a:a5:7d:1b:ed: df:3e:a5:f1:5a:67:2c:df:8a:44:86:b6:d5:30:56:e7:e0:1b: a8:4b:38:6d:35:51:2f:6e:9a:9b:40:a6:a7:cf:bc:1c:84:26: d7:c7:8a:85:6b:b2:99:e6:56:c4:d8:19:87:02:56:8c:32:6d: 8b:61:fb:a5:94:5d:71:1e:17:98:2c:67:dd:6a:2e:8f:9d:85: 9f:1e:a7:4f:0e:09:38:76:63:97:1e:1f:88:2a:d5:ae:ad:81: 3f:1d:6b:85:88:75:03:e1:76:a6:b1:4c:15:8c:42:ad:dc:f5: 41:62:3c:e7:a8:67:11:0d:2c:b9:81:ee:64:1e:2a:85:e9:16: e4:f5:7a:ab:9d:9b:1f:2d:1c:27:b3:ce:17:95:16:de:23:47: b9:bb:60:95:61:c1:3d:af:60:15:21:1c:ee:b6:12:b7:a2:7d: 78:13:84:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoMzdCMEYwMTAwRDNCQzNERUU2NUQ5QkVCMEFFQ0M0Q0VF MUZCMzY1NTAeFw0yNjAzMjUwODE1MThaFw0yNjA0MDEwODE1MThaMBgxFjAUBgNV BAMTDTY5YzM5OTk3LWU3ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDODCp6FsWYWZvtlLVIlXF/r7PVTUEwKxTi3HBB+KH6Ypka87dXVZu+Ot9vBZPh ka2DMFB5PLJh09NOVuHeZbMVHwQ6eetfsPNs+s1h9jEmzsou1JgGvPsG2Gbyn5uG PZTKR0AOlT4+5dp2qC3YG7Sth2ihDX64lji8RbQvSpFPQ4/0uxWIQU+13CFgae4i 6sPmkMYLeqxBmGY9IRDG8BBMKhxiaSBxMfngerx2RJ77i8Ce6+aRI02PcApYEPF8 AQUK+JbHg6B39dOrxWP0BXG4e0z0IsMTikT8m62kDljK6doBVVT8tSpMhHb3wZ1r kU73//bsVriBZJIu8CnXJ2tnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU9iu5Dp0 98XZyyf9PfuukwzyyCEwHwYDVR0jBBgwFoAUN7DwEA07w97mXZvrCuzEzuH7NlUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0I4NDBFRDg2MTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3bVhadnJDdXpFenVIN05s VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjdEd0VBMDd3OTdtWFp2ckN1ekV6dUg3TmxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0I4NDBFRDg2MTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3 bVhadnJDdXpFenVIN05sVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCNtVPRj9rbn9nyHSv72ZpLIJDDQFG79kHuSKmEKMTskGu2bDIF1O1sXUblEO6w A1rTpfWGbUvzIRUCNVyGoHOHDyGYxL98chbEBxGv1rPDM8olPyXLeqV9G+3fPqXx Wmcs34pEhrbVMFbn4BuoSzhtNVEvbpqbQKanz7wchCbXx4qFa7KZ5lbE2BmHAlaM Mm2LYfullF1xHheYLGfdai6PnYWfHqdPDgk4dmOXHh+IKtWurYE/HWuFiHUD4Xam sUwVjEKt3PVBYjznqGcRDSy5ge5kHiqF6Rbk9XqrnZsfLRwns84XlRbeI0e5u2CV YcE9r2AVIRzuthK3on14E4To -----END CERTIFICATE-----Generated at Thu Mar 26 15:37:10 2026 by rpki-client