$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: NCt3Ubm/CfYxGnyr48RpR67fLXW7VB3ongr97y8tPK4= Subject key identifier: 92:75:06:EE:C5:E9:2E:D4:BB:65:5F:9C:C2:B5:92:5D:6B:EB:05:7A Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 068E Signing time: Tue 24 Mar 2026 22:11:21 +0000 Manifest this update: Tue 24 Mar 2026 22:11:20 +0000 Manifest next update: Tue 31 Mar 2026 22:11:20 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: ZCdK3j8uu35SowKhMvzG69n+FFAEd3/WRMNw/CVERAE=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Mar 24 22:11:20 2026 GMT Not After : Mar 31 22:11:20 2026 GMT Subject: CN=69c30c09-f155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:cf:97:80:13:76:d3:4b:83:76:f1:e2:5a: f3:f9:b8:78:63:2b:a6:af:5a:d0:20:2f:c5:36:f9: c9:a5:15:80:7b:e5:cb:5a:bf:5c:79:57:77:c9:f8: 01:3a:86:61:fa:e0:11:8e:7c:80:dd:80:71:1d:e4: e2:0d:45:97:b6:2a:db:48:e6:63:9b:29:2f:71:24: 08:35:4e:b8:b4:c5:55:e8:13:a2:51:69:62:24:70: d0:d3:64:44:df:c4:55:cd:ce:80:7f:21:3e:b2:94: 17:be:4b:f8:ef:3f:0d:d5:45:23:30:62:0a:d0:93: 5d:af:dd:5a:5e:38:71:a5:b5:13:1b:5e:20:b0:46: 6e:46:cc:fa:fd:5b:06:e9:5d:b3:12:8e:3f:8e:80: 9f:68:98:78:b5:bc:5e:69:d4:de:44:3a:2f:0d:54: 0f:9f:98:b3:9f:a6:8b:41:50:3a:fc:7a:2d:2f:fd: da:12:ed:3f:64:62:0a:df:05:a1:27:15:ff:16:56: 2d:dc:cb:93:eb:48:fd:a4:38:51:b1:6a:5e:72:d1: c5:c0:e1:f9:fe:5a:fb:7e:58:09:80:ad:84:d4:a3: 69:b7:f1:a9:10:ce:26:57:ac:10:12:8c:5d:8a:78: ea:1c:29:9c:70:31:86:35:34:c8:35:a2:d7:cf:cb: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:06:EE:C5:E9:2E:D4:BB:65:5F:9C:C2:B5:92:5D:6B:EB:05:7A X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:98:f9:b2:a6:36:ea:b9:3a:f2:e5:05:c5:c1:6d:b3:9e:d3: 07:3a:7f:c9:fb:8b:14:20:d0:00:ad:9d:4b:08:a1:4d:27:e0: c7:36:e6:91:e7:22:3c:fe:59:24:e1:32:0e:c5:ff:40:59:63: 37:6b:b9:50:85:85:50:b3:8b:4e:cf:fc:13:e8:7f:39:6b:53: 31:75:75:e0:a6:81:d7:50:91:e6:48:03:01:5e:da:e6:31:01: d9:56:26:9e:b5:df:78:74:e6:a0:fc:73:e1:03:b0:4f:39:ad: 5e:dc:98:29:ec:2f:4a:9e:1e:f4:3f:ff:63:18:78:da:7c:17: fd:e9:ae:6d:b8:4f:43:1e:24:43:5d:fd:da:ee:c1:39:d8:7f: 46:64:d0:05:00:1e:5a:47:53:63:e4:54:1b:87:53:6f:4d:6b: 03:5f:93:59:5c:c2:99:1a:b3:21:99:bc:36:de:45:79:7b:98: f6:af:64:5b:99:dc:9a:2b:16:19:01:c6:93:62:44:3c:a1:52: 18:09:1f:fd:b2:56:9a:f0:4a:3e:c5:06:7f:e8:19:f6:6f:f4: 62:5f:f5:8d:c4:18:7c:f6:f2:9c:86:a5:c4:bc:9e:31:0d:2f: 24:71:e7:4e:e9:ae:43:17:75:b8:23:a1:f8:81:8d:35:5a:38: 11:dc:a0:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjYwMzI0MjIxMTIwWhcNMjYwMzMxMjIxMTIwWjAYMRYwFAYD VQQDEw02OWMzMGMwOS1mMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRXPl4ATdtNLg3bx4lrz+bh4Yyumr1rQIC/FNvnJpRWAe+XLWr9ceVd3yfgB OoZh+uARjnyA3YBxHeTiDUWXtirbSOZjmykvcSQINU64tMVV6BOiUWliJHDQ02RE 38RVzc6AfyE+spQXvkv47z8N1UUjMGIK0JNdr91aXjhxpbUTG14gsEZuRsz6/VsG 6V2zEo4/joCfaJh4tbxeadTeRDovDVQPn5izn6aLQVA6/HotL/3aEu0/ZGIK3wWh JxX/FlYt3MuT60j9pDhRsWpectHFwOH5/lr7flgJgK2E1KNpt/GpEM4mV6wQEoxd injqHCmccDGGNTTINaLXz8v8owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJ1Bu7F 6S7Uu2VfnMK1kl1r6wV6MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnJj5sqY26rk68uUFxcFts57TBzp/yfuLFCDQAK2dSwihTSfgxzbmkeciPP5Z JOEyDsX/QFljN2u5UIWFULOLTs/8E+h/OWtTMXV14KaB11CR5kgDAV7a5jEB2VYm nrXfeHTmoPxz4QOwTzmtXtyYKewvSp4e9D//Yxh42nwX/emubbhPQx4kQ1392u7B Odh/RmTQBQAeWkdTY+RUG4dTb01rA1+TWVzCmRqzIZm8Nt5FeXuY9q9kW5ncmisW GQHGk2JEPKFSGAkf/bJWmvBKPsUGf+gZ9m/0Yl/1jcQYfPbynIalxLyeMQ0vJHHn TumuQxd1uCOh+IGNNVo4EdygDg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:16 2026 by rpki-client