$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: lTQajayxGqSpk4bBEpUFr+QAHVgN4Pinc/7puYiSN/E= Subject key identifier: EA:9C:F5:23:07:30:EC:F2:C8:33:D4:F9:03:5E:89:75:CD:99:E8:83 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 0396 Signing time: Wed 25 Mar 2026 02:28:45 +0000 Manifest this update: Wed 25 Mar 2026 02:28:44 +0000 Manifest next update: Wed 01 Apr 2026 02:28:44 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: JynDWoI0cDGzorqgzxhVLl4HqzG2kC4F0N0uqp8eUXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Mar 25 02:28:44 2026 GMT Not After : Apr 1 02:28:44 2026 GMT Subject: CN=69c3485d-b28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:ef:a5:66:59:12:20:51:d9:b7:cb:02:62: f0:fd:be:8c:b9:0d:d9:7b:0e:56:32:29:c0:67:70: 20:34:ce:78:6b:3d:62:a1:26:bf:a8:f5:0e:96:0f: 4e:26:c0:17:40:33:6e:e6:86:7a:b4:c2:04:14:6f: 13:ff:57:82:8d:dc:73:c6:a5:0e:48:b1:5f:25:b0: 2e:8a:ee:47:ef:e8:e8:68:e5:74:a7:db:e7:55:d1: 34:ed:7f:0e:cb:5d:d8:01:75:71:3c:99:43:0b:55: e2:a5:7c:bc:e3:28:f5:e6:d2:e8:ee:73:17:cf:c9: 1e:0d:7f:6d:dc:26:57:ca:c8:60:7f:c5:d2:53:ea: 44:b3:05:20:4d:85:e6:a6:df:0c:a9:c7:82:2c:fe: 91:11:cd:00:9f:62:dd:6a:af:7a:1f:dc:5b:a8:c5: 0d:4e:04:e2:02:a7:30:08:c3:a8:b7:fc:72:a6:2d: ba:72:f3:f8:b4:b8:20:b1:28:2b:14:a8:43:29:af: 6c:3f:04:0e:eb:95:73:a0:12:02:34:3c:ea:7e:f8: 27:15:8a:d8:74:de:5e:08:66:2c:47:c1:90:38:19: fe:08:33:42:ec:46:12:7b:a1:4e:b5:01:41:2d:05: d2:dd:15:a8:c1:b7:d6:da:d9:bd:5a:47:0c:b3:55: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:F5:23:07:30:EC:F2:C8:33:D4:F9:03:5E:89:75:CD:99:E8:83 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:aa:bf:ee:f7:11:e5:8c:30:d0:3f:25:b5:16:96:a5:6a:48: eb:e9:ef:6b:32:97:87:b6:20:0f:03:b8:9d:8a:8a:f5:f1:e6: 45:eb:fc:b5:34:86:05:87:fe:72:3e:3e:7e:00:83:c0:d6:da: 26:98:51:1a:7e:72:e7:ab:e1:4b:78:6e:cd:2a:b7:62:de:cc: a9:72:47:59:d4:10:77:68:ea:b4:94:83:2f:54:4a:62:25:98: 15:9a:51:56:ce:af:2f:2b:a1:a1:15:d7:73:80:0e:d1:00:87: b8:79:79:63:99:ec:b7:16:02:53:9a:ed:09:9c:96:75:85:53: e0:86:ec:e2:b8:30:27:e8:18:8d:59:4d:f3:2d:98:af:aa:b1: fe:1c:4b:28:2b:0b:42:03:fd:bf:58:67:5b:44:74:6b:7e:f0: 88:02:af:d5:e4:3c:bd:3e:79:33:50:e1:bb:4d:13:6d:e5:b0: f9:43:fe:a4:79:02:4d:39:4b:33:ab:dc:33:bc:95:1c:7f:e6: f9:41:bc:17:a2:e7:a9:b2:91:65:65:47:64:97:67:cd:af:82: 55:79:01:d0:b4:72:92:61:fa:62:ea:93:26:08:1d:2b:3e:9f: 4f:89:3f:d2:a4:0f:35:b6:7e:71:ef:ff:01:1d:f0:78:e1:c0: 2a:73:ec:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjYwMzI1MDIyODQ0WhcNMjYwNDAxMDIyODQ0WjAYMRYwFAYD VQQDEw02OWMzNDg1ZC1iMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3XvpWZZEiBR2bfLAmLw/b6MuQ3Zew5WMinAZ3AgNM54az1ioSa/qPUOlg9O JsAXQDNu5oZ6tMIEFG8T/1eCjdxzxqUOSLFfJbAuiu5H7+joaOV0p9vnVdE07X8O y13YAXVxPJlDC1XipXy84yj15tLo7nMXz8keDX9t3CZXyshgf8XSU+pEswUgTYXm pt8MqceCLP6REc0An2Ldaq96H9xbqMUNTgTiAqcwCMOot/xypi26cvP4tLggsSgr FKhDKa9sPwQO65VzoBICNDzqfvgnFYrYdN5eCGYsR8GQOBn+CDNC7EYSe6FOtQFB LQXS3RWowbfW2tm9WkcMs1Va8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqc9SMH MOzyyDPU+QNeiXXNmeiDMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaqq/7vcR5Yww0D8ltRaWpWpI6+nvazKXh7YgDwO4nYqK9fHmRev8tTSGBYf+ cj4+fgCDwNbaJphRGn5y56vhS3huzSq3Yt7MqXJHWdQQd2jqtJSDL1RKYiWYFZpR Vs6vLyuhoRXXc4AO0QCHuHl5Y5nstxYCU5rtCZyWdYVT4Ibs4rgwJ+gYjVlN8y2Y r6qx/hxLKCsLQgP9v1hnW0R0a37wiAKv1eQ8vT55M1Dhu00TbeWw+UP+pHkCTTlL M6vcM7yVHH/m+UG8F6LnqbKRZWVHZJdnza+CVXkB0LRykmH6YuqTJggdKz6fT4k/ 0qQPNbZ+ce//AR3weOHAKnPsHg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:47 2026 by rpki-client