$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: xKlytJPmQ/J2212ip4vyy8UGgb7wuqZTubRTxfrQxLE= Subject key identifier: 0C:A3:E7:41:AB:B4:81:B2:0E:F9:50:95:6C:01:E6:33:F2:A6:01:A1 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 09B6 Signing time: Tue 24 Mar 2026 19:47:20 +0000 Manifest this update: Tue 24 Mar 2026 19:47:20 +0000 Manifest next update: Tue 31 Mar 2026 19:47:20 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: qzF3q1NoycC3HCmCE9iNifPaNEsVtX7eb2OdEczro9A=) 2: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=) 3: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Mar 24 19:47:20 2026 GMT Not After : Mar 31 19:47:20 2026 GMT Subject: CN=69c2ea48-93d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:5d:69:c5:9a:37:a2:f7:1a:72:2f:75:3e: 91:94:08:ef:c4:b8:af:50:0e:43:1f:97:ca:ba:e2: d3:49:84:fc:8e:31:66:e6:a5:67:63:c4:79:fc:39: a6:1b:9d:31:d5:fb:03:95:23:e6:00:3e:f6:ce:9b: 0c:b0:dd:a9:1e:2a:d1:82:63:1b:62:e3:04:af:00: d8:ba:2e:9d:bb:b4:91:31:7c:aa:36:6e:81:a7:b1: 05:5e:72:b9:f9:25:8f:05:f8:5b:62:4e:66:89:f0: 85:24:2f:3f:13:cf:ae:e8:57:0e:c8:15:4a:7d:e7: ca:a4:b1:78:01:0e:e8:be:4f:c3:a0:52:7a:26:8a: 9d:ad:98:7b:d8:63:26:8f:45:24:92:cd:fc:ba:1a: 55:f0:14:18:3c:bf:da:4e:fe:db:1c:41:98:47:20: b9:57:13:b1:c7:c4:7b:53:70:30:ce:e1:14:e5:85: 4f:2e:b2:40:4d:d0:10:0b:84:92:0c:16:2b:5a:8f: f7:0e:2f:cb:3e:d7:e7:c0:9d:4c:5b:9b:cf:2c:09: 57:23:eb:38:99:58:63:4a:da:c2:a7:00:4c:5a:db: e6:e5:0f:0f:0f:9f:06:c4:2b:f3:47:aa:33:3c:43: ff:f1:67:5b:fc:ea:88:54:0a:4a:d3:9b:76:14:e3: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A3:E7:41:AB:B4:81:B2:0E:F9:50:95:6C:01:E6:33:F2:A6:01:A1 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f7:5c:a1:13:61:a2:ec:a4:04:97:b3:26:07:45:d6:32:4c: 07:89:73:d7:2f:36:bc:8b:19:56:54:34:5d:03:de:21:e3:2f: b0:84:ca:0e:e2:d9:8d:64:37:da:e4:73:c8:9e:cc:e1:5c:12: e9:35:f6:9d:1b:7b:e0:48:2a:db:3e:e6:6c:4d:d0:e2:88:2c: a5:d5:fe:bc:f0:1f:4c:2e:e8:d2:15:81:34:bd:b6:c1:d5:78: f3:c1:ae:48:af:3e:58:e5:87:1f:a4:68:6e:bf:16:31:3c:b1: 3e:f7:91:a2:25:d8:6f:4f:69:bf:b2:6f:65:2c:98:ff:8d:13: 4e:fe:f9:67:d5:c0:19:2e:10:f0:b0:f4:42:fb:7a:c5:bd:83: cb:b0:3d:ce:cd:b3:f3:c5:68:fd:62:ac:42:51:a2:5e:bd:f2: 69:15:e5:2c:90:81:27:19:5f:b0:17:7a:8e:1f:29:78:ae:b9: d3:c3:6b:5a:39:8f:99:84:2b:5b:96:59:d2:24:c5:3b:9d:b3: 4f:a3:fb:71:a7:5f:9e:8c:42:8d:50:1e:cd:e2:bc:9c:78:74: 33:46:aa:65:2a:b8:60:b2:54:7b:3f:21:82:f2:73:8a:ee:bf: de:d1:ff:ae:25:71:56:ec:6b:9d:a1:95:cd:ab:08:fd:f2:e7: 1d:b9:9b:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjYwMzI0MTk0NzIwWhcNMjYwMzMxMTk0NzIwWjAYMRYwFAYD VQQDEw02OWMyZWE0OC05M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RxdacWaN6L3GnIvdT6RlAjvxLivUA5DH5fKuuLTSYT8jjFm5qVnY8R5/Dmm G50x1fsDlSPmAD72zpsMsN2pHirRgmMbYuMErwDYui6du7SRMXyqNm6Bp7EFXnK5 +SWPBfhbYk5mifCFJC8/E8+u6FcOyBVKfefKpLF4AQ7ovk/DoFJ6JoqdrZh72GMm j0Ukks38uhpV8BQYPL/aTv7bHEGYRyC5VxOxx8R7U3AwzuEU5YVPLrJATdAQC4SS DBYrWo/3Di/LPtfnwJ1MW5vPLAlXI+s4mVhjStrCpwBMWtvm5Q8PD58GxCvzR6oz PEP/8Wdb/OqIVApK05t2FOO7cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyj50Gr tIGyDvlQlWwB5jPypgGhMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbvdcoRNhouykBJezJgdF1jJMB4lz1y82vIsZVlQ0XQPeIeMvsITKDuLZjWQ3 2uRzyJ7M4VwS6TX2nRt74Egq2z7mbE3Q4ogspdX+vPAfTC7o0hWBNL22wdV488Gu SK8+WOWHH6Robr8WMTyxPveRoiXYb09pv7JvZSyY/40TTv75Z9XAGS4Q8LD0Qvt6 xb2Dy7A9zs2z88Vo/WKsQlGiXr3yaRXlLJCBJxlfsBd6jh8peK6508NrWjmPmYQr W5ZZ0iTFO52zT6P7cadfnoxCjVAezeK8nHh0M0aqZSq4YLJUez8hgvJziu6/3tH/ riVxVuxrnaGVzasI/fLnHbmbzQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:24:32 2026 by rpki-client