$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: vid+uUET0dMJAn5fahMpCNqIh61RwLZ5ujBTlY1GA1k= Subject key identifier: 39:CD:95:71:05:66:CC:6B:15:AC:91:0D:09:0C:FD:CA:41:A1:47:A1 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0416 Signing time: Wed 25 Mar 2026 00:10:55 +0000 Manifest this update: Wed 25 Mar 2026 00:10:55 +0000 Manifest next update: Wed 01 Apr 2026 00:10:55 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: nBmE8Gk1gqWbPdytoDXJxyVoAdVku2qNL+E7BHzU6Do=) 2: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: kHDQejmqjPobOzP4RpQqwvEFOqclUXhG9PAka+bN9iQ=) 3: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: c8UFaho10sHWq4V66Fx+BVNv/vFU1ajRLCGfXC+In2c=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: XKoeDmYjE0yysdP5l673w8or1oKAp76jZNEv1XZ67fc=) 5: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: bujDqUQBYDEOHRylquQ9lrhwkzTG5J4D6+3AWwTVyYY=) 6: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: wHIEc0JT3olfj86i79xTv/WCaO/VfEKTQ7Om7UWFzE4=) 7: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: UcvM8IWUVo62fNbVlItsUgMGb0u4yppk8S9qIfLe7pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Mar 25 00:10:55 2026 GMT Not After : Apr 1 00:10:55 2026 GMT Subject: CN=69c3280f-c42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:53:ae:6f:33:b3:78:8e:0c:4c:e6:ba:27: cf:a4:fd:f4:ba:66:8b:a7:da:58:b3:28:5a:2d:86: 21:eb:d9:c3:98:5f:40:9d:79:cf:b2:1b:7c:04:a2: 68:fd:2e:90:ad:26:5e:89:86:16:de:3b:31:c3:31: 87:80:75:9f:f0:b7:fc:df:ea:d3:2b:8f:dc:7a:98: d5:34:17:00:2b:ee:71:4e:39:cc:28:b9:84:52:d0: 70:85:8b:bc:0b:c5:a4:47:87:fe:94:a6:51:83:07: 70:91:9d:bb:41:36:68:9d:89:70:94:4a:78:f2:bb: 5a:a5:3b:01:1d:f1:b8:41:72:29:53:48:01:3a:ce: ae:a1:5f:c9:fe:ec:63:ad:00:4f:fd:b6:06:95:13: fb:24:41:01:07:50:4d:00:bf:2e:f7:82:1c:81:d7: a0:65:27:f4:e3:3d:6f:b3:9c:2f:64:d3:17:0f:8c: 48:76:62:5d:66:65:82:2f:c5:fb:9e:50:dc:29:6e: 55:50:b0:54:f1:9f:de:51:50:a6:ea:fe:11:e0:6e: 79:6f:a2:72:52:a6:b4:39:6b:76:01:92:da:81:e2: 11:67:2c:ff:80:20:d8:3d:3b:44:d7:10:5a:d8:4f: 0f:d9:ca:91:8b:3a:7d:54:24:a4:75:8a:fc:89:ca: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:95:71:05:66:CC:6B:15:AC:91:0D:09:0C:FD:CA:41:A1:47:A1 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c1:2e:53:ca:b4:45:e0:14:ff:73:7d:33:2a:e5:62:01:7a: f3:0d:b1:1f:15:db:37:d3:24:74:70:b4:54:d9:28:cc:da:fd: 55:48:56:55:37:c0:32:8d:17:f3:e5:dc:7b:60:e6:b2:f1:5b: 23:db:91:c7:ad:33:55:a4:50:80:6d:07:d5:49:ef:e0:5a:5b: 9b:bd:8b:43:f8:a1:ab:83:51:cb:16:48:ba:27:8d:07:86:19: 86:3f:27:64:c7:92:ae:e3:e8:2f:d2:8e:ac:6f:1c:5c:d2:9f: 33:e0:b1:3c:52:2d:ef:fe:8d:31:f3:04:4f:31:f9:22:3f:d5: 22:89:64:a2:4f:b2:e2:c5:c7:1f:4c:26:a5:3d:cc:c7:37:d5: f4:99:90:69:c6:71:b2:c5:6e:11:f5:05:62:ad:9e:7f:32:e5: 41:a9:99:05:47:bb:bc:48:f5:2f:47:91:2c:b1:cd:bd:d1:96: 72:38:97:94:f7:9a:ee:91:fc:ec:c8:d3:23:b7:24:6f:59:7d: d8:da:f0:b9:3a:4e:12:46:0d:fe:ab:45:23:f1:a1:21:78:3e: b6:90:57:fd:93:7c:fb:22:91:9b:da:67:8a:8e:8b:3d:4b:80: f0:b0:d1:7c:db:64:cc:7e:7c:f7:63:d0:bf:4f:a9:c6:c8:1e: 67:8e:26:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwMzI1MDAxMDU1WhcNMjYwNDAxMDAxMDU1WjAYMRYwFAYD VQQDEw02OWMzMjgwZi1jNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTxTrm8zs3iODEzmuifPpP30umaLp9pYsyhaLYYh69nDmF9AnXnPsht8BKJo /S6QrSZeiYYW3jsxwzGHgHWf8Lf83+rTK4/cepjVNBcAK+5xTjnMKLmEUtBwhYu8 C8WkR4f+lKZRgwdwkZ27QTZonYlwlEp48rtapTsBHfG4QXIpU0gBOs6uoV/J/uxj rQBP/bYGlRP7JEEBB1BNAL8u94IcgdegZSf04z1vs5wvZNMXD4xIdmJdZmWCL8X7 nlDcKW5VULBU8Z/eUVCm6v4R4G55b6JyUqa0OWt2AZLageIRZyz/gCDYPTtE1xBa 2E8P2cqRizp9VCSkdYr8icryYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnNlXEF ZsxrFayRDQkM/cpBoUehMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlcEuU8q0ReAU/3N9MyrlYgF68w2xHxXbN9MkdHC0VNkozNr9VUhWVTfAMo0X 8+Xce2DmsvFbI9uRx60zVaRQgG0H1Unv4Fpbm72LQ/ihq4NRyxZIuieNB4YZhj8n ZMeSruPoL9KOrG8cXNKfM+CxPFIt7/6NMfMETzH5Ij/VIolkok+y4sXHH0wmpT3M xzfV9JmQacZxssVuEfUFYq2efzLlQamZBUe7vEj1L0eRLLHNvdGWcjiXlPea7pH8 7MjTI7ckb1l92NrwuTpOEkYN/qtFI/GhIXg+tpBX/ZN8+yKRm9pnio6LPUuA8LDR fNtkzH5892PQv0+pxsgeZ44mtQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:10:31 2026 by rpki-client