$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json) Hash identifier: CYoG9ffcFcP+riTqr2JNZgJ24auODqbQ23ky285Wmf0= Subject key identifier: 03:7C:55:4E:CC:0E:61:A6:C5:D0:28:10:4C:0D:70:05:BE:CB:2C:8F Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft Manifest number: 15 Signing time: Wed 25 Mar 2026 08:14:42 +0000 Manifest this update: Wed 25 Mar 2026 08:14:42 +0000 Manifest next update: Wed 01 Apr 2026 08:14:42 +0000 Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: zZipnB7IchTFWNqPePSG+yRVA5x3mmQfEZujHllpMOg=) 2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Validity Not Before: Mar 25 08:14:42 2026 GMT Not After : Apr 1 08:14:42 2026 GMT Subject: CN=69c39972-4390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:6a:c0:ba:00:45:3a:61:f7:df:cc:70:14: dc:bd:6b:2a:eb:56:8f:06:6c:c3:ac:86:b8:0d:66: c4:93:49:bc:21:b9:6c:0f:06:57:52:34:1a:ef:03: f5:11:a6:83:a1:d5:dc:f7:b9:a7:4d:9d:b8:b6:27: af:28:c9:21:c6:25:05:6a:31:2f:02:c4:5b:59:80: 38:a2:0a:04:30:f5:9f:56:1c:3e:7d:ec:39:dc:52: 7c:7d:cc:b4:32:59:03:ad:ea:85:bd:42:56:1e:9c: 0d:9b:1b:85:63:d9:0c:21:e5:28:ee:9b:98:0f:cb: ef:64:ce:d3:bb:2b:7c:26:2f:59:0b:18:95:c8:0f: 72:63:6a:f6:aa:e0:a2:a5:3a:76:4f:d8:41:2c:bd: a2:10:74:22:98:38:3f:28:4a:20:47:0a:d5:4a:8d: d1:f2:cc:5a:31:3e:6d:af:cb:58:1d:e7:f5:2e:cf: 88:c5:a3:48:11:d0:ff:95:e7:97:3f:17:35:a6:70: f1:a8:94:11:26:fe:8f:bb:7f:99:08:d4:a3:52:06: 70:12:87:10:54:34:8b:0d:a2:ba:3a:df:65:96:9d: fe:a4:96:e8:21:12:e1:2d:94:7d:d3:ec:d6:5b:8b: 48:a0:5c:35:99:42:f1:c3:f6:b9:1f:53:9c:9e:75: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:55:4E:CC:0E:61:A6:C5:D0:28:10:4C:0D:70:05:BE:CB:2C:8F X509v3 Authority Key Identifier: keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:04:ac:0e:7e:5b:92:25:85:6c:a9:04:cd:1d:21:10:eb:1b: ea:65:41:49:98:01:d6:49:5b:92:2a:e4:68:4c:22:54:43:b7: 25:a5:3d:9e:47:21:66:de:3f:9f:8b:f9:87:3e:22:68:e3:1e: a8:66:f2:55:cc:31:fe:80:72:92:0f:49:a8:7d:9a:1d:51:15: ba:30:17:08:83:42:f0:76:fa:d7:9c:3d:ec:3a:81:71:70:bb: 7a:ae:c4:15:f4:d2:03:d6:dd:54:75:29:ef:f9:b8:52:9b:63: f9:0c:11:ac:a9:dc:d3:96:cf:8b:37:29:10:99:05:f4:1d:0c: a2:6f:54:25:c6:54:58:d3:e6:28:08:90:89:40:ec:23:50:e0: d4:e7:7d:a2:db:1e:b9:a3:b3:5a:38:a0:33:fb:45:4c:8b:e3: db:70:38:9f:58:99:46:52:2d:83:c6:be:b1:89:7e:e5:e1:7b: 25:70:ea:af:0d:83:5f:a1:9f:0c:02:4c:0b:f1:32:24:93:73: 30:b6:b9:84:18:44:87:4f:a3:46:23:79:0a:27:b2:e3:17:f5: 4f:2d:16:2b:de:ac:0a:4e:8d:06:0f:45:ef:51:f1:e1:a4:03: d7:97:f6:09:8e:ed:6f:5f:93:8a:e1:ba:32:63:00:8e:74:a2: 94:ce:7f:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoOTdCNDQ2MjE2Mzc5ODU3NzAwQUQ2NUI5RkFGRUVDN0M5 MjJDMjJEODAeFw0yNjAzMjUwODE0NDJaFw0yNjA0MDEwODE0NDJaMBgxFjAUBgNV BAMTDTY5YzM5OTcyLTQzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcO2rAugBFOmH338xwFNy9ayrrVo8GbMOshrgNZsSTSbwhuWwPBldSNBrvA/UR poOh1dz3uadNnbi2J68oySHGJQVqMS8CxFtZgDiiCgQw9Z9WHD597DncUnx9zLQy WQOt6oW9QlYenA2bG4Vj2Qwh5Sjum5gPy+9kztO7K3wmL1kLGJXID3Jjavaq4KKl OnZP2EEsvaIQdCKYOD8oSiBHCtVKjdHyzFoxPm2vy1gd5/Uuz4jFo0gR0P+V55c/ FzWmcPGolBEm/o+7f5kI1KNSBnAShxBUNIsNoro632WWnf6klughEuEtlH3T7NZb i0igXDWZQvHD9rkfU5yedS0FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA3xVTswO YabF0CgQTA1wBb7LLI8wHwYDVR0jBBgwFoAUl7RGIWN5hXcArWW5+v7sfJIsItgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzM5NjlCM0NBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhjQXJXVzUtdjdzZkpJc0l0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDdSR0lXTjVoWGNBcldXNS12N3NmSklzSXRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzM5NjlCM0NBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhj QXJXVzUtdjdzZkpJc0l0Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACBKwOfluSJYVsqQTNHSEQ6xvqZUFJmAHWSVuSKuRoTCJUQ7clpT2eRyFm3j+f i/mHPiJo4x6oZvJVzDH+gHKSD0mofZodURW6MBcIg0LwdvrXnD3sOoFxcLt6rsQV 9NID1t1UdSnv+bhSm2P5DBGsqdzTls+LNykQmQX0HQyib1QlxlRY0+YoCJCJQOwj UODU532i2x65o7NaOKAz+0VMi+PbcDifWJlGUi2Dxr6xiX7l4XslcOqvDYNfoZ8M AkwL8TIkk3MwtrmEGESHT6NGI3kKJ7LjF/VPLRYr3qwKTo0GD0XvUfHhpAPXl/YJ ju1vX5OK4boyYwCOdKKUzn/G -----END CERTIFICATE-----Generated at Thu Mar 26 06:02:46 2026 by rpki-client