$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: MCSHxgBoVRl/2YCWIIUBR5UCIYBzsC95PoJgJpnGmBU= Subject key identifier: C7:09:D5:74:34:D6:02:5A:94:22:8E:2A:26:62:3D:93:3F:9F:F6:6B Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 07D2 Signing time: Tue 24 Mar 2026 21:05:46 +0000 Manifest this update: Tue 24 Mar 2026 21:05:45 +0000 Manifest next update: Tue 31 Mar 2026 21:05:45 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: YK+1VAk1VcH9kQOD2F0NLjicZSgPIZ4lQvN1Q5ZvdJA=) 2: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=) 3: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: Mar 24 21:05:45 2026 GMT Not After : Mar 31 21:05:45 2026 GMT Subject: CN=69c2fca9-5635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:9f:58:ec:f7:30:18:1b:5e:c1:9a:8d:59: a2:42:7b:88:d5:35:1e:eb:39:fc:cf:a0:fd:a2:5a: f5:f4:54:b7:37:c5:73:e5:47:a8:1c:1e:1e:a1:22: 64:15:d7:24:14:2d:99:36:cd:53:8d:29:b5:f0:95: 20:53:e9:eb:01:6d:1e:c7:ba:55:25:24:d8:3a:16: 39:2f:97:08:74:d5:86:da:82:f0:08:36:fd:84:fd: e3:5b:b3:96:69:b0:01:a6:14:5f:5c:e0:ef:f6:b4: 6a:e9:fb:b7:d3:c3:48:5b:96:14:d0:01:13:1e:6e: a8:40:7a:32:9a:61:4a:f1:b5:c2:06:9b:92:4f:7d: 5e:a0:31:a9:e8:d4:c7:da:42:08:58:1f:fa:75:3e: 35:fc:40:ab:69:37:e9:6f:a5:ff:0b:be:d0:95:52: 39:73:ba:18:86:1e:6e:d6:1b:9c:0b:a8:74:2a:a2: 59:6b:b8:5b:44:8b:c6:d8:30:ac:00:40:5a:60:e5: 1a:1b:4f:32:18:ad:40:e5:36:d0:89:e5:1a:c9:2e: 8e:8d:be:b3:fd:b5:ac:bd:82:02:c5:96:c9:cd:73: 9d:45:af:cd:ca:6e:e6:1f:21:dd:59:46:96:39:a7: 54:6e:ed:c3:e9:b4:ac:d1:3a:e5:a5:f2:7e:45:dc: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:D5:74:34:D6:02:5A:94:22:8E:2A:26:62:3D:93:3F:9F:F6:6B X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c9:bf:1e:cd:f1:85:82:d8:8f:f2:04:65:f3:d9:28:42:cb: 1c:bd:f0:21:6f:1a:93:e2:5d:37:54:9b:ec:27:44:84:f8:4d: 77:c6:6c:76:8e:8e:ce:3c:9b:a7:cf:d0:54:f1:95:8e:da:c4: 23:c1:4c:64:b5:a8:0b:ef:f3:d8:f5:60:68:c7:b6:fe:4e:f1: b9:37:e3:14:94:f6:36:f8:d2:96:92:2a:69:f1:a4:54:c7:62: c2:c8:73:4a:e1:12:97:20:11:08:c8:dd:f4:d5:d0:48:6b:d2: 60:c8:1c:78:88:2b:04:7c:cd:d2:f1:80:bb:a9:0d:7a:fc:13: 75:21:fd:2d:7d:1f:3a:2e:7a:ce:50:0a:c9:93:6f:b4:e8:bb: ba:a8:83:12:d6:8b:db:d3:cc:7c:a1:0d:fb:a1:ee:1a:68:61: e3:9b:ad:88:5e:3e:11:88:be:d2:e7:d6:0e:01:29:4b:e7:1a: b9:13:27:66:4a:a1:7f:33:80:29:78:73:e7:0e:d2:16:4a:df: e6:b3:75:f0:19:55:93:dd:e3:aa:32:7d:bd:16:aa:91:10:6d: e9:23:3f:e9:bb:d9:70:9a:23:8a:33:04:f8:82:b9:eb:f9:d9: d1:d9:e6:48:7e:d8:22:93:80:e9:7b:f0:04:1d:54:09:b5:d1: ef:67:f6:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjYwMzI0MjEwNTQ1WhcNMjYwMzMxMjEwNTQ1WjAYMRYwFAYD VQQDEw02OWMyZmNhOS01NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xGfWOz3MBgbXsGajVmiQnuI1TUe6zn8z6D9olr19FS3N8Vz5UeoHB4eoSJk FdckFC2ZNs1TjSm18JUgU+nrAW0ex7pVJSTYOhY5L5cIdNWG2oLwCDb9hP3jW7OW abABphRfXODv9rRq6fu308NIW5YU0AETHm6oQHoymmFK8bXCBpuST31eoDGp6NTH 2kIIWB/6dT41/ECraTfpb6X/C77QlVI5c7oYhh5u1hucC6h0KqJZa7hbRIvG2DCs AEBaYOUaG08yGK1A5TbQieUayS6Ojb6z/bWsvYICxZbJzXOdRa/Nym7mHyHdWUaW OadUbu3D6bSs0TrlpfJ+RdywPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcJ1XQ0 1gJalCKOKiZiPZM/n/ZrMB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN8m/Hs3xhYLYj/IEZfPZKELLHL3wIW8ak+JdN1Sb7CdEhPhNd8Zsdo6Ozjyb p8/QVPGVjtrEI8FMZLWoC+/z2PVgaMe2/k7xuTfjFJT2NvjSlpIqafGkVMdiwshz SuESlyARCMjd9NXQSGvSYMgceIgrBHzN0vGAu6kNevwTdSH9LX0fOi56zlAKyZNv tOi7uqiDEtaL29PMfKEN+6HuGmhh45utiF4+EYi+0ufWDgEpS+cauRMnZkqhfzOA KXhz5w7SFkrf5rN18BlVk93jqjJ9vRaqkRBt6SM/6bvZcJojijME+IK56/nZ0dnm SH7YIpOA6XvwBB1UCbXR72f2Gw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:15 2026 by rpki-client