$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: lcO8Jq2XFYjG4EKAkRjMQ94djGpeuC9fFVlb3Ji93QI= Subject key identifier: 55:A2:C6:5A:84:FB:4F:16:A6:BF:67:45:26:4E:9B:E7:07:FE:68:0F Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 1001 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0FEE Signing time: Tue 24 Mar 2026 17:21:30 +0000 Manifest this update: Tue 24 Mar 2026 17:21:29 +0000 Manifest next update: Tue 31 Mar 2026 17:21:29 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: 9FF+CI3ijTmZ05OXTMaiBN5vTMIHXxywfrvnlqFYaLo=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: GpIlPzjXhUM0zJ+cM7pnn7EyYVYFkBP5Hh3rm33qqKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4097 (0x1001) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Mar 24 17:21:29 2026 GMT Not After : Mar 31 17:21:29 2026 GMT Subject: CN=69c2c81a-8ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:1d:59:87:3f:50:b2:49:a2:7f:ec:ff:82: 2e:3f:f4:04:e2:d3:7a:3b:a5:91:3b:1e:d3:9c:f7: 94:56:b5:a9:87:61:09:ca:da:2e:26:9b:70:02:8e: 22:f2:43:d0:a8:5c:97:fb:5a:0e:1d:84:3f:0c:db: 45:1a:b0:03:37:c5:24:e6:5a:90:91:4b:8f:b0:cf: 4d:cb:50:f5:2d:aa:35:93:9e:80:77:6f:4c:2d:b5: 58:17:41:a8:b8:23:8a:d4:da:30:67:bb:43:2f:21: cf:87:36:69:ac:1f:2a:22:b6:80:81:38:5b:07:2b: 76:5f:49:dd:ba:70:72:03:f1:51:ff:1a:af:e1:ca: df:77:df:14:c8:46:1b:25:0f:a5:8d:9d:69:c7:17: d4:02:7c:d0:34:26:82:3a:d3:5c:29:c4:6d:59:6d: 35:f4:d1:dd:3d:14:61:7d:9d:e2:31:1f:8b:83:21: 84:3b:a9:f8:53:fc:45:08:0e:07:c8:f9:42:6c:b0: 4f:23:02:d0:1f:8e:0a:c5:9a:1c:1c:40:91:54:d1: 8e:87:36:dd:91:51:d1:30:9e:bf:57:f7:bb:01:38: 01:0b:8e:c1:95:5a:02:05:e4:60:73:9e:52:9a:80: a8:50:87:33:02:d0:fa:da:ac:75:f1:77:6c:19:17: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:C6:5A:84:FB:4F:16:A6:BF:67:45:26:4E:9B:E7:07:FE:68:0F X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1c:67:50:47:fc:04:ae:a6:03:ba:5b:f4:31:63:2d:7f:5e: e8:db:b0:09:b0:50:b8:44:94:e7:12:bb:31:9e:24:a4:76:1c: 29:05:b0:7f:d9:40:e6:9f:e7:ef:46:10:24:91:f9:9f:cc:c5: e8:a4:7f:6b:67:da:41:18:e5:4d:e5:c5:e7:52:6d:cc:96:72: 2b:ef:33:ed:1f:90:0b:ce:fc:de:55:5d:4b:3e:fe:72:d7:bc: c0:32:06:87:eb:e4:90:87:8e:38:48:fd:9d:ae:1f:d1:31:55: ae:91:cd:ab:dd:f3:66:f9:8e:b3:50:f2:3b:76:9e:69:e7:df: 65:d9:80:00:1c:4b:de:14:d9:c7:2b:36:43:6f:1a:c0:01:8f: 36:e0:44:d4:87:5a:ec:4a:9b:82:e9:78:39:cc:79:87:23:e3: f3:b7:d7:26:d9:fb:0a:ae:c6:05:f4:4a:8c:40:71:be:a0:b4: 27:e1:86:0f:a4:6f:e9:a2:43:32:9f:9b:df:e9:46:c6:47:3b: 01:59:a0:6c:a9:e2:f5:05:6d:c2:0c:87:4d:fa:bd:f0:21:dc: da:49:ef:85:f5:45:e1:67:24:c4:a7:4d:86:ca:34:50:f0:c6: 67:12:9a:69:fd:bc:67:ba:cc:d5:29:d6:7b:a8:bd:1b:98:db: 3b:b7:5b:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjYwMzI0MTcyMTI5WhcNMjYwMzMxMTcyMTI5WjAYMRYwFAYD VQQDEw02OWMyYzgxYS04ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkPYdWYc/ULJJon/s/4IuP/QE4tN6O6WROx7TnPeUVrWph2EJytouJptwAo4i 8kPQqFyX+1oOHYQ/DNtFGrADN8Uk5lqQkUuPsM9Ny1D1Lao1k56Ad29MLbVYF0Go uCOK1NowZ7tDLyHPhzZprB8qIraAgThbByt2X0ndunByA/FR/xqv4crfd98UyEYb JQ+ljZ1pxxfUAnzQNCaCOtNcKcRtWW019NHdPRRhfZ3iMR+LgyGEO6n4U/xFCA4H yPlCbLBPIwLQH44KxZocHECRVNGOhzbdkVHRMJ6/V/e7ATgBC47BlVoCBeRgc55S moCoUIczAtD62qx18XdsGRdFLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWixlqE +08Wpr9nRSZOm+cH/mgPMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABhxnUEf8BK6mA7pb9DFjLX9e6NuwCbBQuESU5xK7MZ4kpHYcKQWwf9lA5p/n 70YQJJH5n8zF6KR/a2faQRjlTeXF51JtzJZyK+8z7R+QC8783lVdSz7+cte8wDIG h+vkkIeOOEj9na4f0TFVrpHNq93zZvmOs1DyO3aeaeffZdmAABxL3hTZxys2Q28a wAGPNuBE1Ida7Eqbgul4Ocx5hyPj87fXJtn7Cq7GBfRKjEBxvqC0J+GGD6Rv6aJD Mp+b3+lGxkc7AVmgbKni9QVtwgyHTfq98CHc2knvhfVF4WckxKdNhso0UPDGZxKa af28Z7rM1SnWe6i9G5jbO7dbLw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:36:11 2026 by rpki-client