$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: G2DTTmZOJZMVsvyHhAfM0rmyVnD0govUVY1kn0zMScQ= Subject key identifier: 95:EB:E2:FF:D9:59:07:AB:9A:F8:5F:56:BC:AA:56:8B:93:C0:BD:25 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 6A Signing time: Wed 25 Mar 2026 07:45:56 +0000 Manifest this update: Wed 25 Mar 2026 07:45:56 +0000 Manifest next update: Wed 01 Apr 2026 07:45:56 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: QBw4gZAB5eBw81duKHDLcAqXUTqEIo6nfzMfGtaAleQ=) 2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=) 3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Mar 25 07:45:56 2026 GMT Not After : Apr 1 07:45:56 2026 GMT Subject: CN=69c392b4-db56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:93:90:15:09:06:1d:72:dd:0f:fb:43:64: 99:f9:ec:50:f8:4c:b2:e8:d9:ff:b9:20:33:5d:f6: 61:fe:e7:b3:8d:74:fc:2e:5c:9d:60:19:1a:4e:da: 87:62:c3:74:8c:36:9d:7e:ae:85:db:ef:34:c9:7c: 5d:1d:42:82:90:88:d8:ea:13:ae:09:9a:69:9c:cb: 25:da:1d:bd:fa:37:bd:08:5f:27:8d:be:b3:57:4e: 2b:90:f7:6d:4a:42:87:c7:cd:0b:e8:c3:f2:d3:4c: f0:72:1d:39:e3:40:8e:38:43:75:4e:37:02:24:5a: 40:11:9e:61:e7:5a:1a:62:54:32:95:49:62:43:42: 03:27:ad:b2:98:01:d1:73:e4:ed:75:43:aa:d4:34: 22:84:f8:d7:26:61:48:70:37:19:fc:ad:80:d6:e4: f9:57:5b:46:df:e1:61:53:04:5c:23:14:7c:bb:dc: 70:e3:d7:0d:d6:af:c1:f3:92:5e:34:35:39:7f:0f: 81:c6:75:6c:aa:54:70:8b:5f:12:ea:55:16:33:c8: 3a:cf:31:e2:b2:9d:15:d0:5b:6d:35:78:85:3e:ec: 81:2f:72:07:0c:64:23:52:9b:2a:d4:e4:70:43:33: 8a:92:c3:de:33:0b:96:4e:dd:51:c7:e3:6b:41:ae: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EB:E2:FF:D9:59:07:AB:9A:F8:5F:56:BC:AA:56:8B:93:C0:BD:25 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:74:03:11:18:30:58:03:8f:0e:ff:2f:cf:26:5a:b1:4c:d7: a3:c1:be:2f:05:20:bd:9f:6a:50:82:5c:bb:b9:f8:c3:ca:4a: a7:61:67:34:14:2a:62:0e:73:6c:c3:e4:5d:90:5e:88:a7:9f: 8f:76:d7:7b:d4:b7:a8:61:0f:36:65:00:8b:cb:e2:82:4d:dd: af:db:f8:c4:9f:d3:85:f6:6e:ee:d8:88:4a:d0:4e:9a:d9:ff: 26:10:26:df:32:5e:eb:d2:cf:0e:06:42:71:7a:ad:af:86:4b: 25:d0:df:d5:ab:3e:77:35:f4:a5:fd:a5:59:65:a7:c5:50:62: 84:de:fb:b3:90:24:b8:f7:8c:ad:98:ef:6b:24:3e:b9:2d:8e: 47:ca:d1:c2:36:3d:b4:e2:51:e3:c3:89:fe:86:03:22:59:b0: 41:aa:0f:3b:78:84:20:db:66:c0:9b:a9:89:4f:51:ce:78:d2: c2:7a:47:62:da:7e:33:29:df:28:02:42:d8:55:12:fe:15:86: 70:17:fa:3e:14:8a:31:76:c4:e1:82:fa:ad:95:26:87:66:0c: d6:77:b2:54:1f:79:cf:14:f8:8b:0f:8a:bf:29:18:63:84:67: 6b:3b:63:06:77:d0:61:13:5b:48:72:58:ba:c2:a4:d1:75:ea: 66:c9:47:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNjAzMjUwNzQ1NTZaFw0yNjA0MDEwNzQ1NTZaMBgxFjAUBgNV BAMTDTY5YzM5MmI0LWRiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9kpOQFQkGHXLdD/tDZJn57FD4TLLo2f+5IDNd9mH+57ONdPwuXJ1gGRpO2odi w3SMNp1+roXb7zTJfF0dQoKQiNjqE64JmmmcyyXaHb36N70IXyeNvrNXTiuQ921K QofHzQvow/LTTPByHTnjQI44Q3VONwIkWkARnmHnWhpiVDKVSWJDQgMnrbKYAdFz 5O11Q6rUNCKE+NcmYUhwNxn8rYDW5PlXW0bf4WFTBFwjFHy73HDj1w3Wr8Hzkl40 NTl/D4HGdWyqVHCLXxLqVRYzyDrPMeKynRXQW201eIU+7IEvcgcMZCNSmyrU5HBD M4qSw94zC5ZO3VHH42tBrsU3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlevi/9lZ B6ua+F9WvKpWi5PAvSUwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7dAMRGDBYA48O/y/PJlqxTNejwb4vBSC9n2pQgly7ufjDykqnYWc0FCpiDnNs w+RdkF6Ip5+Pdtd71LeoYQ82ZQCLy+KCTd2v2/jEn9OF9m7u2IhK0E6a2f8mECbf Ml7r0s8OBkJxeq2vhksl0N/Vqz53NfSl/aVZZafFUGKE3vuzkCS494ytmO9rJD65 LY5HytHCNj204lHjw4n+hgMiWbBBqg87eIQg22bAm6mJT1HOeNLCekdi2n4zKd8o AkLYVRL+FYZwF/o+FIoxdsThgvqtlSaHZgzWd7JUH3nPFPiLD4q/KRhjhGdrO2MG d9BhE1tIcli6wqTRdepmyUc3 -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:09 2026 by rpki-client