$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json) Hash identifier: XYn/oIaIsfbr0rspnMicm/5EjgpT9C+JRurgkRmvuBY= Subject key identifier: A5:DE:67:0A:7A:1E:2D:D5:3E:92:91:6A:69:65:A1:2F:2A:35:6D:11 Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft Manifest number: F5 Signing time: Wed 25 Mar 2026 05:30:14 +0000 Manifest this update: Wed 25 Mar 2026 05:30:14 +0000 Manifest next update: Wed 01 Apr 2026 05:30:14 +0000 Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: r4/AsJWblntb3J9juvD9KSmPCnyNfVHB5S7xlZWjM0M=) 2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: IlwuqYd+V3i+RoW8n6rnlp+BLBlUeaUn1+UQMM4yK1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: Mar 25 05:30:14 2026 GMT Not After : Apr 1 05:30:14 2026 GMT Subject: CN=69c372e6-063e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:69:c4:7a:a2:2d:eb:ed:d1:da:d9:12:e6: 10:64:a3:31:d7:88:f3:38:fb:e7:e1:b1:a2:85:c9: 40:37:27:2e:3d:e9:37:25:ea:c9:be:43:29:31:dc: 99:e4:5f:f8:40:31:21:77:67:b0:27:ee:ef:03:81: 49:20:a0:5b:a2:b1:e5:a4:6e:ea:dc:fa:2a:e3:d5: c2:b9:55:b9:e3:6e:51:5c:c3:09:61:f2:83:c7:6c: 24:df:4f:06:72:dc:76:9a:01:ca:4c:69:42:c0:cb: 42:88:64:52:5f:18:8a:d3:5f:a5:29:2b:fb:0e:65: 9d:55:00:70:33:10:6e:8f:d9:56:7f:c4:2f:b3:af: 83:76:30:fd:86:16:ff:00:0e:72:c3:2a:ec:d0:d0: 71:16:d3:55:38:99:4c:0a:02:d5:24:da:3d:8a:16: 00:20:aa:1c:26:2e:74:02:4a:36:af:8f:75:96:2d: e8:5c:b7:30:84:56:f1:f6:0f:59:0a:cb:e4:dd:66: 43:ba:1e:39:17:be:bd:e2:3e:3f:d2:66:57:b0:61: 98:f5:ef:34:94:41:43:5c:45:c9:cb:38:d9:40:77: 7f:ff:24:62:28:89:bb:77:47:50:77:ef:0b:bd:95: eb:df:a5:12:65:3e:bf:8b:62:69:16:53:4b:73:cc: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:67:0A:7A:1E:2D:D5:3E:92:91:6A:69:65:A1:2F:2A:35:6D:11 X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c8:01:3b:1c:71:75:57:5b:48:23:b4:d3:82:75:aa:1f:68: e1:73:56:06:cc:fc:cc:26:42:0a:c0:9c:72:c1:f7:33:36:59: 95:eb:59:ba:27:a4:06:3a:d9:ac:47:81:69:78:e9:04:4e:48: c1:7a:f0:10:18:97:35:15:58:69:e7:be:f3:09:35:94:19:8b: 09:16:b2:cd:ee:b5:06:54:6b:98:5c:e8:82:e7:df:3d:5d:8c: 90:07:44:b3:a2:d4:95:b4:6f:87:9b:fa:4a:f2:94:d4:3d:ca: 89:ea:48:58:5d:1e:37:d6:52:6a:93:3c:64:8e:7c:df:3e:10: 70:97:a5:2e:95:98:ec:0a:e2:30:2d:f9:91:61:c8:08:a0:5f: 68:77:6d:eb:dd:a4:94:33:6e:6b:38:dc:0e:48:bb:f4:ab:b0: cc:7a:5e:bf:14:89:0d:00:ab:2f:f1:85:88:6a:ac:cc:47:12: a7:3b:61:f8:0b:c1:53:a7:b0:93:06:d7:93:62:52:9c:a2:8c: 4f:14:9d:45:f5:f2:e1:da:4b:68:6b:11:57:9e:f2:84:77:1d: 78:c3:18:70:53:42:01:ee:a8:ee:7e:9f:58:85:98:06:30:38: 18:13:a7:80:cc:37:10:15:97:b0:0d:ec:1d:0c:cc:ec:92:8c: 18:9b:e7:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3Q0YxMTAvBgNVBAUTKEVDM0Q4MDdGNzkzQzlDRjVGQ0UzMzVFRTE1RTA5ODQ0 NDlCNDMwOTYwHhcNMjYwMzI1MDUzMDE0WhcNMjYwNDAxMDUzMDE0WjAYMRYwFAYD VQQDEw02OWMzNzJlNi0wNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV1pxHqiLevt0drZEuYQZKMx14jzOPvn4bGihclANycuPek3JerJvkMpMdyZ 5F/4QDEhd2ewJ+7vA4FJIKBborHlpG7q3Poq49XCuVW5425RXMMJYfKDx2wk308G ctx2mgHKTGlCwMtCiGRSXxiK01+lKSv7DmWdVQBwMxBuj9lWf8Qvs6+DdjD9hhb/ AA5ywyrs0NBxFtNVOJlMCgLVJNo9ihYAIKocJi50Ako2r491li3oXLcwhFbx9g9Z Csvk3WZDuh45F7694j4/0mZXsGGY9e80lEFDXEXJyzjZQHd//yRiKIm7d0dQd+8L vZXr36USZT6/i2JpFlNLc8zacwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXeZwp6 Hi3VPpKRamlloS8qNW0RMB8GA1UdIwQYMBaAFOw9gH95PJz1/OM17hXgmERJtDCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTdDRi9CNDE1NTQ1OEIy QzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5QWDg0elh1RmVDWVJFbTBN SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1KWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5Q WDg0elh1RmVDWVJFbTBNSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPsgBOxxxdVdbSCO004J1qh9o4XNWBsz8zCZCCsCccsH3MzZZletZuiekBjrZ rEeBaXjpBE5IwXrwEBiXNRVYaee+8wk1lBmLCRayze61BlRrmFzoguffPV2MkAdE s6LUlbRvh5v6SvKU1D3KiepIWF0eN9ZSapM8ZI583z4QcJelLpWY7AriMC35kWHI CKBfaHdt692klDNuazjcDki79KuwzHpevxSJDQCrL/GFiGqszEcSpzth+AvBU6ew kwbXk2JSnKKMTxSdRfXy4dpLaGsRV57yhHcdeMMYcFNCAe6o7n6fWIWYBjA4GBOn gMw3EBWXsA3sHQzM7JKMGJvnoA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:58 2026 by rpki-client