$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json) Hash identifier: /GNTfzZvA8wWxALrB+ZB5Yi1XpzqV7Di9wkhFSMnC/U= Subject key identifier: 1F:39:09:0D:80:B9:D2:E5:C1:51:34:C2:C5:39:E4:03:B5:31:F9:09 Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft Manifest number: 0739 Signing time: Tue 24 Mar 2026 21:30:35 +0000 Manifest this update: Tue 24 Mar 2026 21:30:34 +0000 Manifest next update: Tue 31 Mar 2026 21:30:34 +0000 Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: 0o9z87GRB1vlvFFOa8aAno8SUpXcsuPh2rFYyB/GmNo=) 2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: Y08aauLWlD/3KbKUWbhD8x6QFYVQbXZtknrvh7LrAZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Mar 24 21:30:34 2026 GMT Not After : Mar 31 21:30:34 2026 GMT Subject: CN=69c3027a-fbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:91:35:22:a1:2f:88:93:e6:c5:a2:9c:32: 90:4d:cd:42:ee:1a:28:87:0e:c7:99:b4:52:d5:ff: 4c:9a:76:a2:23:a2:25:e3:9c:17:37:17:4b:a6:7d: 6a:f6:41:36:4d:c0:a0:17:8f:49:a6:14:cf:14:4b: 18:9f:9b:b9:87:bd:5b:8a:3e:36:f0:04:13:57:ac: e7:7e:46:56:02:1e:8a:1a:84:2f:9e:03:a4:81:6c: 51:99:20:68:98:2c:f3:9a:70:d7:92:8b:30:15:05: 68:79:22:d9:35:26:c3:5b:34:5f:b9:cb:b6:2c:b5: af:e4:29:32:2a:fe:33:ac:d5:ff:35:53:bc:59:20: b3:37:d2:42:92:51:df:32:8e:89:9b:dd:37:6f:c7: 8b:12:bc:eb:cd:4b:ef:e3:c1:35:e5:40:a4:1d:4b: 68:ca:f8:76:63:50:59:12:08:d7:f3:43:f3:8f:3d: f5:cf:be:59:ff:21:88:61:ee:5f:cc:7f:8e:03:bc: 48:f4:61:10:ea:e5:3e:d4:6b:9d:9f:71:5b:ec:a9: d9:02:e3:88:26:d9:a9:d2:47:94:0c:8e:6b:fc:24: 0b:84:6b:ea:74:11:0b:3c:fa:0e:fa:92:74:16:20: 9b:04:4e:8a:b8:6a:69:05:5e:41:7d:e3:dd:aa:f0: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:39:09:0D:80:B9:D2:E5:C1:51:34:C2:C5:39:E4:03:B5:31:F9:09 X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1f:a5:ae:d2:fa:5f:af:99:03:e4:1d:54:f8:73:6d:a6:15: 6b:c3:d6:ea:b7:76:1c:73:f0:4a:5c:35:be:af:b6:a3:11:85: 02:49:58:e3:9e:2d:40:1b:12:5f:0a:e8:66:f7:dc:c0:db:3b: ea:38:d7:98:86:e3:3a:a2:8d:78:57:10:d1:e3:bf:9b:87:cc: 97:da:f4:cc:27:24:f7:a7:f9:42:15:bd:39:d4:88:24:d6:b6: 88:3a:b6:75:5a:80:6e:ae:ac:41:54:22:65:ae:a0:f3:c7:a9: bc:cd:d7:5c:21:59:63:fb:78:2b:7d:eb:3b:08:f7:7b:8e:4a: e0:db:4b:6d:11:0d:dd:b0:60:43:03:eb:b8:ec:38:ac:f4:ce: 08:31:2c:c4:13:e2:30:64:93:c9:06:87:7c:81:5f:28:69:f8: 7a:4d:04:f0:fe:aa:5b:7e:39:7b:64:c1:76:46:6a:52:a6:03: 5b:23:47:c7:de:a2:63:01:e8:46:70:64:a2:5f:40:97:cf:49: 73:73:23:fe:f3:2a:d6:0a:c0:f7:72:9d:64:5f:68:ba:d5:8b: c8:d8:9c:9c:81:86:6e:d8:8d:d9:5f:26:95:4b:9b:95:c3:10: f2:b1:54:15:f5:10:59:21:b4:97:2c:9d:4e:c3:a1:1e:fb:8c: 6b:ee:e5:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjYwMzI0MjEzMDM0WhcNMjYwMzMxMjEzMDM0WjAYMRYwFAYD VQQDEw02OWMzMDI3YS1mYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsweRNSKhL4iT5sWinDKQTc1C7hoohw7HmbRS1f9MmnaiI6Il45wXNxdLpn1q 9kE2TcCgF49JphTPFEsYn5u5h71bij428AQTV6znfkZWAh6KGoQvngOkgWxRmSBo mCzzmnDXkoswFQVoeSLZNSbDWzRfucu2LLWv5CkyKv4zrNX/NVO8WSCzN9JCklHf Mo6Jm903b8eLErzrzUvv48E15UCkHUtoyvh2Y1BZEgjX80Pzjz31z75Z/yGIYe5f zH+OA7xI9GEQ6uU+1Gudn3Fb7KnZAuOIJtmp0keUDI5r/CQLhGvqdBELPPoO+pJ0 FiCbBE6KuGppBV5BfePdqvBF4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB85CQ2A udLlwVE0wsU55AO1MfkJMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW bGJvTXZFOXJ1SE54UGtHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUh+lrtL6X6+ZA+QdVPhzbaYVa8PW6rd2HHPwSlw1vq+2oxGFAklY454tQBsS XwroZvfcwNs76jjXmIbjOqKNeFcQ0eO/m4fMl9r0zCck96f5QhW9OdSIJNa2iDq2 dVqAbq6sQVQiZa6g88epvM3XXCFZY/t4K33rOwj3e45K4NtLbREN3bBgQwPruOw4 rPTOCDEsxBPiMGSTyQaHfIFfKGn4ek0E8P6qW345e2TBdkZqUqYDWyNHx96iYwHo RnBkol9Al89Jc3Mj/vMq1grA93KdZF9outWLyNicnIGGbtiN2V8mlUublcMQ8rFU FfUQWSG0lyydTsOhHvuMa+7liA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:34:05 2026 by rpki-client