$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json) Hash identifier: kt33vmLOJFj5vXY6vRDvANNXzh8CfxtFSYEjixZuPiA= Subject key identifier: BD:CF:91:55:E1:98:71:39:22:6D:E0:49:DD:02:D0:AD:AA:CB:11:AA Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft Manifest number: 1C Signing time: Wed 25 Mar 2026 08:09:53 +0000 Manifest this update: Wed 25 Mar 2026 08:09:53 +0000 Manifest next update: Wed 01 Apr 2026 08:09:53 +0000 Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: ax4vWw6Wa1DHxYHAkMbune5qMDOeeH3wJot/eM749vg=) 2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Validity Not Before: Mar 25 08:09:53 2026 GMT Not After : Apr 1 08:09:53 2026 GMT Subject: CN=69c39851-6ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:d1:ad:4c:68:af:eb:ef:31:b0:58:ae:21: 24:cc:ad:7a:6e:f9:3e:54:91:49:15:d9:12:40:ae: 01:5b:8c:38:ee:3c:88:05:b3:24:e6:5f:66:2d:5d: cd:5e:1e:5e:ef:dd:c8:21:f7:b3:46:be:9a:bf:39: d8:02:49:77:f0:d5:1f:fd:c5:17:36:71:8a:af:c7: 13:e3:01:30:b8:59:46:ee:ba:d3:a1:8c:86:6d:0a: a6:cf:fb:23:a2:11:c7:45:aa:e7:10:5d:ea:0c:e5: cf:51:62:3c:2d:44:94:9c:af:87:89:eb:59:fa:fd: b7:16:49:5b:4a:1f:5c:fd:a5:79:9c:bc:3e:59:ec: cc:8d:1d:30:c1:a3:cf:09:99:01:dd:19:c4:7d:c0: 24:c3:2c:ca:1c:b5:5e:12:0d:cc:7f:ac:77:88:e2: 48:4f:84:ce:71:2b:e3:3f:be:61:5a:a3:18:8e:94: b4:62:6f:d8:0c:24:f3:30:03:31:e8:34:f1:aa:e7: c7:6e:48:72:3d:ed:8b:60:97:62:9f:7e:4e:f3:0f: 71:67:d4:b7:a1:fe:37:eb:07:3d:3c:f0:7a:07:4c: d2:fd:95:58:87:87:8b:ed:b5:09:c2:0a:c7:3b:a8: d2:1e:9b:40:90:6a:a1:a5:d3:c5:27:d8:97:2b:e7: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CF:91:55:E1:98:71:39:22:6D:E0:49:DD:02:D0:AD:AA:CB:11:AA X509v3 Authority Key Identifier: keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:94:b7:db:43:cb:a0:d1:b9:10:47:67:25:1e:6f:0c:10:67: eb:c1:1d:96:32:a0:8f:2e:fb:c2:6b:31:46:86:e7:f5:ef:4a: 99:be:37:a7:9c:53:72:47:51:da:56:c7:eb:3a:d4:c2:e3:68: e4:99:46:af:5f:3e:bd:2a:52:5a:98:01:14:51:6b:40:fe:95: 82:c2:6d:77:bc:01:b1:c1:45:34:df:61:6d:f4:eb:ab:a0:72: 9c:1a:80:f3:7e:58:ae:f2:f3:36:90:6e:20:0c:09:98:f9:3d: 37:bc:54:a5:84:5b:91:dd:d3:52:9d:d2:b0:1d:9a:96:2d:8c: 18:a1:7a:0d:e3:59:bb:ef:7e:41:f6:26:ff:4e:97:a8:db:14: 6b:96:04:2a:06:6b:51:7f:1e:ca:f9:2f:09:8b:97:4d:b3:58: 7b:18:19:64:d6:df:d0:69:72:7f:2b:03:ef:66:d7:25:ff:73: 3e:f2:b9:bf:55:dd:64:03:ec:eb:ad:8d:fd:85:a4:bb:12:53: 6d:d5:3c:80:bd:0e:24:c4:82:a1:49:e6:4e:a3:87:f0:b2:a8: 01:c8:bb:c7:bb:2a:5d:6a:6e:7c:39:ae:76:26:e3:6f:a5:e1: 51:dc:8c:99:5e:50:1a:42:bc:79:af:d9:38:a2:29:d4:d3:b8: 77:3f:9d:58 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUI0QzExMC8GA1UEBRMoRkJCQjZGMzhGNjcwM0QwMkQ3MjZFREU0NjIzOUIzQkVE OEExRjFFNDAeFw0yNjAzMjUwODA5NTNaFw0yNjA0MDEwODA5NTNaMBgxFjAUBgNV BAMTDTY5YzM5ODUxLTZhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCroNGtTGiv6+8xsFiuISTMrXpu+T5UkUkV2RJArgFbjDjuPIgFsyTmX2YtXc1e Hl7v3cgh97NGvpq/OdgCSXfw1R/9xRc2cYqvxxPjATC4WUbuutOhjIZtCqbP+yOi EcdFqucQXeoM5c9RYjwtRJScr4eJ61n6/bcWSVtKH1z9pXmcvD5Z7MyNHTDBo88J mQHdGcR9wCTDLMoctV4SDcx/rHeI4khPhM5xK+M/vmFaoxiOlLRib9gMJPMwAzHo NPGq58duSHI97Ytgl2Kffk7zD3Fn1Leh/jfrBz088HoHTNL9lViHh4vttQnCCsc7 qNIem0CQaqGl08Un2Jcr5w9HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvc+RVeGY cTkibeBJ3QLQrarLEaowHwYDVR0jBBgwFoAU+7tvOPZwPQLXJu3kYjmzvtih8eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0EwQjU3OUIyMDdF MjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFMWEp1M2tZam16dnRpaDhl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLTd0dk9QWndQUUxYSnUza1lqbXp2dGloOGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QjRDL0EwQjU3OUIyMDdFMjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFM WEp1M2tZam16dnRpaDhlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmlLfbQ8ug0bkQR2clHm8MEGfrwR2WMqCPLvvCazFGhuf170qZvjennFNyR1Ha VsfrOtTC42jkmUavXz69KlJamAEUUWtA/pWCwm13vAGxwUU032Ft9OuroHKcGoDz fliu8vM2kG4gDAmY+T03vFSlhFuR3dNSndKwHZqWLYwYoXoN41m7735B9ib/Tpeo 2xRrlgQqBmtRfx7K+S8Ji5dNs1h7GBlk1t/QaXJ/KwPvZtcl/3M+8rm/Vd1kA+zr rY39haS7ElNt1TyAvQ4kxIKhSeZOo4fwsqgByLvHuypdam58Oa52JuNvpeFR3IyZ XlAaQrx5r9k4oinU07h3P51Y -----END CERTIFICATE-----Generated at Thu Mar 26 18:05:58 2026 by rpki-client