$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: +e0QmqwrpgrB+f9KjkIZMRr+8DEb4LfJyKLTHx7Rqzo= Subject key identifier: F2:65:28:FF:3D:C7:95:22:5E:28:5F:3F:73:21:FB:BF:E7:07:22:CF Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: CD Signing time: Wed 25 Mar 2026 06:01:06 +0000 Manifest this update: Wed 25 Mar 2026 06:01:06 +0000 Manifest next update: Wed 01 Apr 2026 06:01:06 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: zMx6accfTROb1oDZq2BVowDti8gowMYCjhwCk1yA1So=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: waPht2Jw2owuimcpCZhjIlIZYot2jTd9WZt/SFL4sjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Mar 25 06:01:06 2026 GMT Not After : Apr 1 06:01:06 2026 GMT Subject: CN=69c37a22-89d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:fb:8d:ca:4a:ca:b0:ac:22:60:ba:d7:05: 38:09:94:e5:6a:35:88:d7:bc:a2:99:69:f7:2f:1f: 7c:7a:22:f0:79:8e:8c:1e:68:6f:29:81:66:d5:c7: 76:d9:f3:c2:bc:25:ec:06:9a:e9:79:81:02:62:87: 03:1f:22:6e:ed:4b:82:ad:77:a0:92:1c:da:9c:70: f0:6f:69:35:f9:62:4b:f9:f6:cf:1d:f1:b4:6e:48: 78:7a:86:41:66:02:9f:4e:01:a2:1a:cd:a4:e9:ed: 66:ec:c4:61:da:00:43:fe:b4:97:8e:1d:b4:60:2d: 16:c9:c2:46:d1:10:7f:d4:54:24:77:2e:ac:20:e0: df:c0:94:46:bd:5c:ef:50:38:47:66:a9:d6:4a:6a: 2f:06:ce:d0:e4:48:76:48:1e:77:43:23:48:7d:d9: e4:b0:81:af:a9:a6:56:10:ed:d8:fd:f9:e1:7d:11: 92:56:3e:5b:e7:a8:0a:ec:22:58:9c:dd:d8:30:f2: a4:bc:e2:a0:36:1d:61:6e:1d:69:81:06:6c:9a:7a: 2f:35:84:77:4a:af:7e:e4:18:0b:de:ff:14:4f:4b: a1:fc:ee:2b:9b:4a:41:a6:59:eb:57:58:63:cb:16: 2f:c9:92:d8:bc:27:99:13:72:33:6a:ae:c3:9a:b6: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:28:FF:3D:C7:95:22:5E:28:5F:3F:73:21:FB:BF:E7:07:22:CF X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d4:0e:2b:c2:33:7c:cc:cc:1d:3b:7b:51:b2:ff:36:28:b2: b3:97:b2:58:49:2f:51:05:28:af:5a:5c:01:be:e7:33:ae:8b: 21:e5:2f:c1:9a:b4:e6:59:c9:ae:41:1a:2a:4c:d9:fb:ec:1f: de:01:03:d8:72:d6:be:a9:59:cf:25:0e:92:e8:1f:1f:9d:26: 6c:9e:78:a3:a5:a9:47:b5:b9:e4:84:42:d1:77:cc:d8:e9:94: 4b:8c:3b:0b:a0:8e:38:8a:5d:47:0d:39:61:ee:fe:28:8a:fe: 1f:d3:53:44:f1:9c:42:74:1f:59:eb:d9:00:05:05:6c:c5:69: 92:93:3d:55:cc:ed:42:f7:48:bd:b2:32:86:98:33:b9:cb:51: c6:2e:97:df:7b:52:d6:de:c5:b8:20:7d:77:30:ef:98:bb:c3: c5:7a:08:94:b0:b5:3f:27:01:14:11:95:4a:62:80:85:cd:1b: 04:04:5a:ab:5c:b9:7e:72:35:c6:4a:03:67:ff:02:1d:d4:09: a3:90:f6:1d:67:86:e6:c5:79:4b:af:43:4a:a5:f1:7e:bf:99: e9:2b:c3:3f:6b:51:39:ce:ba:0c:a6:de:55:3e:94:91:69:a4: d2:cd:63:7d:c7:50:df:ba:95:58:6c:dc:9d:0c:36:aa:30:19: 11:95:90:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjYwMzI1MDYwMTA2WhcNMjYwNDAxMDYwMTA2WjAYMRYwFAYD VQQDEw02OWMzN2EyMi04OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nT7jcpKyrCsImC61wU4CZTlajWI17yimWn3Lx98eiLweY6MHmhvKYFm1cd2 2fPCvCXsBprpeYECYocDHyJu7UuCrXegkhzanHDwb2k1+WJL+fbPHfG0bkh4eoZB ZgKfTgGiGs2k6e1m7MRh2gBD/rSXjh20YC0WycJG0RB/1FQkdy6sIODfwJRGvVzv UDhHZqnWSmovBs7Q5Eh2SB53QyNIfdnksIGvqaZWEO3Y/fnhfRGSVj5b56gK7CJY nN3YMPKkvOKgNh1hbh1pgQZsmnovNYR3Sq9+5BgL3v8UT0uh/O4rm0pBplnrV1hj yxYvyZLYvCeZE3Izaq7DmrZMfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJlKP89 x5UiXihfP3Mh+7/nByLPMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoNQOK8IzfMzMHTt7UbL/Niiys5eyWEkvUQUor1pcAb7nM66LIeUvwZq05lnJ rkEaKkzZ++wf3gED2HLWvqlZzyUOkugfH50mbJ54o6WpR7W55IRC0XfM2OmUS4w7 C6COOIpdRw05Ye7+KIr+H9NTRPGcQnQfWevZAAUFbMVpkpM9VcztQvdIvbIyhpgz uctRxi6X33tS1t7FuCB9dzDvmLvDxXoIlLC1PycBFBGVSmKAhc0bBARaq1y5fnI1 xkoDZ/8CHdQJo5D2HWeG5sV5S69DSqXxfr+Z6SvDP2tROc66DKbeVT6UkWmk0s1j fcdQ37qVWGzcnQw2qjAZEZWQ4g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:10 2026 by rpki-client