$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: PVGzblN5Ob2aKZ70z22PNV1U2jxcvQGhGworkdIQRnU= Subject key identifier: 4F:B7:6E:FF:F3:D2:00:BD:77:2B:51:DD:C0:96:D1:F3:3D:57:59:86 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: 01DC Signing time: Wed 25 Mar 2026 02:57:42 +0000 Manifest this update: Wed 25 Mar 2026 02:57:41 +0000 Manifest next update: Wed 01 Apr 2026 02:57:41 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: yZ0VZZsq30YuBW0uzDIwF2Gofi6wTVIpO8e1znSidHQ=) 2: 81D3CB186B7D11F0A482004CC4F9AE02.roa (hash: WJIyz/cRqbc3/QMwliSVH70tDNBX6svUIefvj+Dz1lY=) 3: ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (hash: 96qp6OlFvyt4AD3Ueh7h17elJXQzlKp/F00ZsiqHEMU=) 4: 903CF428211111F19B666AE0243D8C67.roa (hash: 70gu2yp/J7Az8+JzVw4ofPSe+yXElYHSmdioMyXgTFM=) 5: A394D682238F11F181884883C4833773.roa (hash: QUIxc3CqrRx/+Z/6TQ+o80hFOu2YRFPn+ZupBbubq2o=) 6: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: MZA1jTBziSRkZxVdEK+65v62wmBfkDBZ419ZGEizQBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Mar 25 02:57:41 2026 GMT Not After : Apr 1 02:57:41 2026 GMT Subject: CN=69c34f26-5dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:4a:3b:ed:c9:68:25:7b:53:04:7f:a2:1f: 1f:ab:c3:82:25:9c:75:16:b0:a6:15:13:f3:2e:3c: 20:9e:59:51:0d:36:54:e3:36:ac:16:61:56:50:ba: 20:d6:32:38:cf:64:b6:93:1d:7f:82:75:37:e9:50: 65:73:19:d9:ce:5e:99:ce:5e:29:ae:1b:4e:a4:4d: 74:f4:59:1e:7e:d9:d0:d2:07:6c:6c:dc:10:09:9f: 01:ff:ec:9e:97:8c:24:9b:b3:8b:6f:62:ed:00:1e: 91:27:ed:c5:15:3a:14:89:ac:6c:65:ab:95:60:00: 5a:0f:a3:28:07:59:1d:c0:f4:45:9b:e7:1c:ab:c9: d7:0a:10:9c:97:e4:08:ca:34:d5:f0:a3:05:db:7d: a6:97:6d:9f:ff:d6:26:1e:ea:47:5d:08:a3:24:aa: 76:81:c6:e0:95:a4:75:43:dc:cc:09:ef:be:fa:ad: 07:14:3c:95:fb:41:98:14:16:91:3d:81:f9:e4:34: eb:f1:d8:a8:ea:cf:b9:b3:d0:26:18:9e:85:87:9e: 5f:f8:de:d7:8e:4c:53:8c:c6:6c:e3:82:f6:70:cb: 94:c4:f3:4d:b9:60:9c:af:59:36:c6:7e:6d:b6:10: f2:90:c2:01:50:83:a3:f6:89:91:e2:38:19:79:ed: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B7:6E:FF:F3:D2:00:BD:77:2B:51:DD:C0:96:D1:F3:3D:57:59:86 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cc:a4:2c:cf:90:f8:9b:1e:a1:a5:88:69:95:88:9c:a8:c0: 11:f2:ab:9c:29:df:24:70:8b:27:7e:dd:75:43:a1:88:3c:59: 9a:f0:fd:61:69:ef:97:90:14:cb:b6:79:7a:59:f7:bb:b0:ae: a7:da:23:84:5d:b1:fb:a6:51:9a:fb:9b:b5:d3:80:13:91:a5: 4e:df:d8:06:15:fa:f5:a0:78:fe:0b:24:cc:be:93:33:03:75: 48:69:d7:0c:b6:30:42:8d:b0:fe:89:0b:ea:69:f3:a8:28:2a: 2f:3d:87:94:69:da:c0:e4:34:0d:69:2c:07:7a:45:ac:9d:b4: 5a:64:2f:47:9e:9a:09:a3:43:1a:f7:be:66:39:5e:57:8e:03: 58:89:8a:9c:27:75:f2:03:47:9a:7b:de:cf:e1:f5:cb:5f:6c: 16:be:13:84:9a:d1:57:28:f0:f9:97:99:89:99:71:18:90:ca: 21:e2:43:81:c8:f3:27:4d:15:b6:3c:b1:ec:4c:a4:b9:ca:89: d6:f9:e5:36:25:ba:1a:63:2e:6c:fd:98:4c:9e:c1:53:98:8f: 2d:d6:44:33:54:09:64:ee:cf:28:d0:40:0f:e0:f9:44:76:fb: 7f:c6:35:c6:63:a9:74:6d:32:5f:7e:75:c2:b8:6c:80:d2:d4: a6:df:3e:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjYwMzI1MDI1NzQxWhcNMjYwNDAxMDI1NzQxWjAYMRYwFAYD VQQDEw02OWMzNGYyNi01ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc9KO+3JaCV7UwR/oh8fq8OCJZx1FrCmFRPzLjwgnllRDTZU4zasFmFWULog 1jI4z2S2kx1/gnU36VBlcxnZzl6Zzl4prhtOpE109FkeftnQ0gdsbNwQCZ8B/+ye l4wkm7OLb2LtAB6RJ+3FFToUiaxsZauVYABaD6MoB1kdwPRFm+ccq8nXChCcl+QI yjTV8KMF232ml22f/9YmHupHXQijJKp2gcbglaR1Q9zMCe+++q0HFDyV+0GYFBaR PYH55DTr8dio6s+5s9AmGJ6Fh55f+N7XjkxTjMZs44L2cMuUxPNNuWCcr1k2xn5t thDykMIBUIOj9omR4jgZee3fkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+3bv/z 0gC9dytR3cCW0fM9V1mGMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbcykLM+Q+JseoaWIaZWInKjAEfKrnCnfJHCLJ37ddUOhiDxZmvD9YWnvl5AU y7Z5eln3u7Cup9ojhF2x+6ZRmvubtdOAE5GlTt/YBhX69aB4/gskzL6TMwN1SGnX DLYwQo2w/okL6mnzqCgqLz2HlGnawOQ0DWksB3pFrJ20WmQvR56aCaNDGve+Zjle V44DWImKnCd18gNHmnvez+H1y19sFr4ThJrRVyjw+ZeZiZlxGJDKIeJDgcjzJ00V tjyx7EykucqJ1vnlNiW6GmMubP2YTJ7BU5iPLdZEM1QJZO7PKNBAD+D5RHb7f8Y1 xmOpdG0yX351wrhsgNLUpt8+Fw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:28 2026 by rpki-client