$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: HGEb8U2v0gaJf+BkYYy0aqLtsnAFQTqIDq/DxvJAJ1c= Subject key identifier: A7:96:F4:E8:85:7E:6A:78:6F:3D:F7:92:DF:FE:25:C2:54:4F:81:33 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 08C5 Signing time: Tue 24 Mar 2026 20:11:31 +0000 Manifest this update: Tue 24 Mar 2026 20:11:31 +0000 Manifest next update: Tue 31 Mar 2026 20:11:31 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: MLEV+j7KT+bSsaFOfbdnPgLBhmCevMudl7v9CYILb88=) 2: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: ewYDV2AeFSraFT8cqNKwnfuovfJu1fvrIxXBNUNfFI4=) 3: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: guESDtRP9qOcesOQufoat5VtGELu5d7cHiiI+UKjLlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Mar 24 20:11:31 2026 GMT Not After : Mar 31 20:11:31 2026 GMT Subject: CN=69c2eff3-1855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:42:a1:1d:ca:96:ec:4d:04:b0:38:fd:26: c5:d7:e3:0e:51:6d:fe:eb:dc:89:5f:74:e2:2c:83: c2:3d:fb:97:e0:3b:d6:25:ff:88:b8:32:2a:47:48: 92:4a:31:9d:ee:3c:e6:81:3b:d8:41:c5:45:b9:47: 67:a6:1e:65:7d:9f:47:97:c2:15:66:75:50:71:0c: 73:99:9c:93:2d:f9:dc:0d:77:f5:4f:4e:a4:cf:09: 69:2f:35:36:4a:c6:fc:7e:c3:7f:0e:4e:c7:1b:fc: b3:ed:a2:05:cc:03:a2:ad:89:36:76:40:fa:f7:a2: 42:2e:59:15:c2:77:f2:a7:29:c3:f3:d8:19:d6:e6: d2:5b:42:84:52:a1:5b:7e:af:0a:42:8e:7e:ea:24: 28:0a:c9:57:74:ec:42:e7:b5:72:65:59:71:80:81: 42:fa:53:cf:aa:62:60:fc:3a:6a:a8:e5:5e:67:c4: c0:6b:74:2a:05:bd:79:2c:7c:a1:37:e3:6f:e5:5d: 9c:de:e8:ad:d6:c8:d1:e5:7a:20:42:7c:92:d2:6f: 6b:6f:3b:7d:bf:9c:40:ab:b1:e8:5e:82:e8:d3:61: c6:de:e2:ba:a5:12:44:8d:60:51:77:43:35:aa:b1: 06:5e:cf:ca:eb:cb:78:2f:e8:f5:8c:52:89:77:4b: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:96:F4:E8:85:7E:6A:78:6F:3D:F7:92:DF:FE:25:C2:54:4F:81:33 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:95:6e:01:43:f3:74:4e:d6:83:70:10:91:f9:40:9d:3c:1e: f1:2a:ec:1a:d6:2f:30:2a:e2:09:88:f5:35:75:cf:49:cd:05: b7:f3:0a:ff:cb:63:07:f2:aa:65:6c:05:15:d7:b9:7a:d7:58: 42:d4:0f:40:f0:d2:39:f6:44:b7:dc:1a:81:54:08:f2:3a:d8: 3a:84:96:ae:41:3e:47:f1:df:d8:0d:76:60:b8:fe:e6:84:68: 55:49:44:57:75:77:7c:70:99:d4:b4:43:c7:8a:26:d8:3e:52: 76:04:5e:b4:82:0b:30:c3:11:63:e2:7a:3e:70:9d:64:16:75: b6:cf:a4:07:b1:7f:ee:84:fd:63:28:ed:c3:20:b4:ba:21:51: f1:cf:18:80:e4:d4:3e:a4:06:05:a3:99:98:43:0e:fe:71:b8: 48:34:fb:81:b2:06:e2:d6:01:13:a7:36:24:a6:f2:ce:f3:a4: 67:71:5f:f8:6d:b8:6e:22:cb:ac:5d:04:54:02:cb:84:ab:dc: f8:dc:66:67:56:c1:39:d3:f9:b0:fb:f5:6c:be:30:a5:6b:78: 92:1d:72:e5:0a:96:52:72:6d:8e:55:95:64:44:0d:ac:2a:10: 09:5a:ec:42:91:bb:3d:9a:72:75:ea:09:ec:11:13:13:e6:11: 58:a3:f8:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjYwMzI0MjAxMTMxWhcNMjYwMzMxMjAxMTMxWjAYMRYwFAYD VQQDEw02OWMyZWZmMy0xODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxZCoR3KluxNBLA4/SbF1+MOUW3+69yJX3TiLIPCPfuX4DvWJf+IuDIqR0iS SjGd7jzmgTvYQcVFuUdnph5lfZ9Hl8IVZnVQcQxzmZyTLfncDXf1T06kzwlpLzU2 Ssb8fsN/Dk7HG/yz7aIFzAOirYk2dkD696JCLlkVwnfypynD89gZ1ubSW0KEUqFb fq8KQo5+6iQoCslXdOxC57VyZVlxgIFC+lPPqmJg/DpqqOVeZ8TAa3QqBb15LHyh N+Nv5V2c3uit1sjR5XogQnyS0m9rbzt9v5xAq7HoXoLo02HG3uK6pRJEjWBRd0M1 qrEGXs/K68t4L+j1jFKJd0uRdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKeW9OiF fmp4bz33kt/+JcJUT4EzMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU5VuAUPzdE7Wg3AQkflAnTwe8SrsGtYvMCriCYj1NXXPSc0Ft/MK/8tjB/Kq ZWwFFde5etdYQtQPQPDSOfZEt9wagVQI8jrYOoSWrkE+R/Hf2A12YLj+5oRoVUlE V3V3fHCZ1LRDx4om2D5SdgRetIILMMMRY+J6PnCdZBZ1ts+kB7F/7oT9YyjtwyC0 uiFR8c8YgOTUPqQGBaOZmEMO/nG4SDT7gbIG4tYBE6c2JKbyzvOkZ3Ff+G24biLL rF0EVALLhKvc+NxmZ1bBOdP5sPv1bL4wpWt4kh1y5QqWUnJtjlWVZEQNrCoQCVrs QpG7PZpydeoJ7BETE+YRWKP4jg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:39 2026 by rpki-client