$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: A+bbekmUKVA+6zgRKeN50elfh4IhIe1j3XfpG8RMBxI= Subject key identifier: DF:D3:68:7E:C5:BF:14:C1:B5:E7:81:AF:8C:A1:BE:72:88:E6:56:47 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 0A5D Signing time: Tue 24 Mar 2026 19:33:46 +0000 Manifest this update: Tue 24 Mar 2026 19:33:45 +0000 Manifest next update: Tue 31 Mar 2026 19:33:45 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: hROLkXo9Djm5cF7hE2+tcj798cf6MPtfuR/rHDg6bsU=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: y7NLJGyijlqNL+Ovztz61BvAvfEsk7Q6tTmB6qAz1wY=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: wJPqhmG5nuh5KFi1IkyAbZsHhxJ058Q16pbeljhvYhk=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: aRixXq7ui35CkBZ1WtgzAKTz2bGqo7mI3c5dVkJhwD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Mar 24 19:33:45 2026 GMT Not After : Mar 31 19:33:45 2026 GMT Subject: CN=69c2e71a-8f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:18:bb:90:91:56:14:7b:be:d4:79:5e:d2: 9a:4d:ea:7e:8f:88:3a:dc:71:74:3f:c8:92:a6:77: f2:d2:77:9a:e4:94:fe:23:5b:06:ef:31:6f:5c:b7: 70:05:a6:b1:ae:0e:e9:6a:82:5f:2f:3a:94:be:3e: 49:f1:43:9d:35:cf:b6:07:b7:d8:f6:34:ac:9d:43: 36:b2:76:48:72:99:11:df:cf:50:9a:b3:7b:66:47: d9:88:cf:b7:95:88:e0:97:ce:cd:c3:06:39:67:c9: 3b:79:c1:d3:de:4f:91:1d:7e:ef:65:59:ca:fa:6a: 53:2d:72:24:79:9d:29:2f:6c:35:ed:d6:93:ff:77: 65:2d:cb:98:e2:83:b7:99:81:36:f5:44:01:ea:2c: 7f:51:c4:dc:73:f8:30:1f:2b:16:0c:d1:7a:24:fc: e0:eb:7c:7a:26:4e:a2:57:d0:5c:59:5c:6b:3f:3c: 35:43:e0:9e:7f:fc:45:72:d9:f2:86:b7:ef:3c:ce: f4:00:f5:74:0f:79:15:68:ed:83:78:3a:95:1b:36: 47:42:f1:92:43:4d:36:6f:5c:b9:d4:60:70:5d:bd: b5:d5:83:6e:bd:a5:8a:da:f9:15:22:3b:b5:fe:5f: 77:0d:8d:27:fd:6d:71:94:f1:9a:68:4a:d7:11:ef: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D3:68:7E:C5:BF:14:C1:B5:E7:81:AF:8C:A1:BE:72:88:E6:56:47 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fa:45:74:30:ed:d5:c1:8d:c6:eb:44:cc:c8:e0:ab:29:cb: a9:50:ee:1e:54:f9:1b:78:35:df:b5:62:5d:14:c2:be:b4:dc: 84:3e:c4:04:b4:19:0a:39:98:c4:53:18:7f:a5:72:6c:bc:9a: 0b:47:a0:75:89:6e:c8:4d:72:6f:ed:a1:1c:45:7a:bc:33:e8: 77:3d:4b:94:2c:c0:6f:7f:d1:de:5d:15:e9:0c:a2:37:70:68: 5d:ed:e6:62:66:27:5f:11:bc:c2:98:6d:93:85:dd:ef:fa:fb: b2:ae:1e:d4:72:1c:4d:e7:53:90:20:ca:f8:6b:df:65:a5:69: 1b:44:01:6b:e6:88:c2:63:6e:39:06:c5:d0:7b:db:41:a3:d9: b5:36:0b:fc:66:57:e7:06:c6:69:20:9c:3a:5e:2a:81:a2:5e: da:23:7e:5f:de:e4:af:dd:3f:43:28:8b:2b:43:79:e6:b2:6a: 67:70:c7:66:6a:18:1e:be:b1:85:a0:95:37:0c:11:7c:d7:fd: cb:04:50:4f:b8:58:5d:a9:70:7a:3f:ca:aa:54:b3:c0:b1:0a: ed:44:ec:84:c3:90:be:b4:7e:ea:49:6d:69:87:36:f9:f8:86: b9:28:d0:c6:d7:bb:cd:bf:67:b2:69:b9:35:5b:28:c1:fd:40: 46:8d:dd:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjYwMzI0MTkzMzQ1WhcNMjYwMzMxMTkzMzQ1WjAYMRYwFAYD VQQDEw02OWMyZTcxYS04ZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FkYu5CRVhR7vtR5XtKaTep+j4g63HF0P8iSpnfy0nea5JT+I1sG7zFvXLdw Baaxrg7paoJfLzqUvj5J8UOdNc+2B7fY9jSsnUM2snZIcpkR389QmrN7ZkfZiM+3 lYjgl87NwwY5Z8k7ecHT3k+RHX7vZVnK+mpTLXIkeZ0pL2w17daT/3dlLcuY4oO3 mYE29UQB6ix/UcTcc/gwHysWDNF6JPzg63x6Jk6iV9BcWVxrPzw1Q+Cef/xFctny hrfvPM70APV0D3kVaO2DeDqVGzZHQvGSQ002b1y51GBwXb211YNuvaWK2vkVIju1 /l93DY0n/W1xlPGaaErXEe+p5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/TaH7F vxTBteeBr4yhvnKI5lZHMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHPpFdDDt1cGNxutEzMjgqynLqVDuHlT5G3g137ViXRTCvrTchD7EBLQZCjmY xFMYf6VybLyaC0egdYluyE1yb+2hHEV6vDPodz1LlCzAb3/R3l0V6QyiN3BoXe3m YmYnXxG8wphtk4Xd7/r7sq4e1HIcTedTkCDK+GvfZaVpG0QBa+aIwmNuOQbF0Hvb QaPZtTYL/GZX5wbGaSCcOl4qgaJe2iN+X97kr90/QyiLK0N55rJqZ3DHZmoYHr6x haCVNwwRfNf9ywRQT7hYXalwej/KqlSzwLEK7UTshMOQvrR+6kltaYc2+fiGuSjQ xte7zb9nsmm5NVsowf1ARo3ddQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:31 2026 by rpki-client