$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: xMLZeivjYHjIg6QIAiYiSM+7mQcZjmnF9brZUe91AvA= Subject key identifier: B9:69:43:52:90:49:77:A0:4A:92:58:90:29:A7:50:FA:9F:80:C4:3F Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 356D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 3541 Signing time: Thu 26 Mar 2026 14:16:46 +0000 Manifest this update: Thu 26 Mar 2026 14:16:46 +0000 Manifest next update: Thu 02 Apr 2026 14:16:46 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: +aiJ7h+onfCxM4Ho05lOQFXBUpx4rddMJQMr0CWILpE=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13677 (0x356d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Mar 26 14:16:46 2026 GMT Not After : Apr 2 14:16:46 2026 GMT Subject: CN=69c53fce-43ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:4e:61:72:09:94:48:03:c1:d5:57:7e:1f: 4b:16:0a:c8:f9:6a:11:bf:9b:79:10:3b:b7:e1:58: 65:fb:1e:d9:81:81:1d:e9:d2:7f:4b:e4:58:e1:06: 80:6c:67:b6:b2:58:bc:80:ef:5f:b1:c3:47:e4:65: 8f:c9:14:bf:59:1b:61:e5:b7:f0:00:8f:49:66:d2: 3a:54:9a:fa:9f:ed:92:c6:71:63:43:e3:83:65:02: 54:93:95:c8:c6:fc:f5:64:19:a5:8c:f4:bc:65:28: 67:21:c1:e0:ba:c8:75:27:94:d4:2a:c3:d1:24:f0: 16:ca:f3:25:52:49:4c:05:bd:78:5c:69:0e:a7:fd: 5b:ec:56:38:2a:02:54:89:5c:3b:ff:8b:53:86:0b: d5:b8:57:62:d7:dd:3c:18:28:35:c5:e5:25:46:a8: bc:ba:6d:4b:0c:64:fc:d9:82:90:07:bb:9b:d3:53: 53:cf:c3:8b:98:e3:59:5c:7a:db:4e:fa:c3:b5:12: eb:a3:a8:37:48:58:c7:76:73:29:2e:b3:c7:4d:ee: 39:f2:8f:10:23:31:23:54:86:90:96:83:4d:34:31: 6c:c6:5a:3d:b3:c5:b0:de:73:c5:47:12:89:70:86: 20:da:1d:60:04:19:db:82:12:d1:1d:9b:02:99:2e: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:43:52:90:49:77:A0:4A:92:58:90:29:A7:50:FA:9F:80:C4:3F X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5a:e2:02:d9:5d:07:38:4a:a7:43:21:74:3a:af:e4:21:33: 32:e4:4d:83:94:12:46:01:c7:e4:96:dd:d7:c0:93:95:ae:d8: cf:42:dd:e2:6f:45:b4:58:f3:60:bf:0e:5c:02:d6:71:83:8b: 0b:ce:ac:62:31:66:b6:48:c0:6a:63:bf:89:3f:41:66:d4:e6: 90:97:ee:4a:82:2a:b8:22:a2:2a:0c:98:36:f7:93:7a:72:99: a5:2f:0a:5f:7f:c5:30:65:8d:33:8d:ca:25:cb:e3:3d:8d:16: ac:25:b9:29:de:34:5e:19:b9:d3:04:ef:1d:ec:d3:c8:00:64: ee:c1:9b:7c:b8:43:09:7c:19:88:11:e5:d5:f2:ec:84:3b:1a: 0f:ac:59:32:e2:38:14:4a:5b:a3:0f:25:a8:b4:b1:e3:33:42: fe:2c:77:f6:55:ca:dc:33:c8:b5:ad:4a:ed:b0:32:99:96:ef: 3d:62:50:c1:4a:8d:12:da:59:7a:e1:0c:e4:07:36:66:32:f8: 72:16:fb:d3:02:c0:e4:58:e2:5a:83:64:17:20:05:4e:04:9c: 8c:ff:95:3a:fb:cb:6d:6c:98:5e:be:1d:2c:2b:6a:28:1e:bf: 41:44:58:ef:9d:5f:61:bf:52:a8:ab:c8:22:3b:a3:22:ef:12: 14:a9:d7:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjYwMzI2MTQxNjQ2WhcNMjYwNDAyMTQxNjQ2WjAYMRYwFAYD VQQDEw02OWM1M2ZjZS00M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArApOYXIJlEgDwdVXfh9LFgrI+WoRv5t5EDu34Vhl+x7ZgYEd6dJ/S+RY4QaA bGe2sli8gO9fscNH5GWPyRS/WRth5bfwAI9JZtI6VJr6n+2SxnFjQ+ODZQJUk5XI xvz1ZBmljPS8ZShnIcHgush1J5TUKsPRJPAWyvMlUklMBb14XGkOp/1b7FY4KgJU iVw7/4tThgvVuFdi1908GCg1xeUlRqi8um1LDGT82YKQB7ub01NTz8OLmONZXHrb TvrDtRLro6g3SFjHdnMpLrPHTe458o8QIzEjVIaQloNNNDFsxlo9s8Ww3nPFRxKJ cIYg2h1gBBnbghLRHZsCmS79WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlpQ1KQ SXegSpJYkCmnUPqfgMQ/MB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMVriAtldBzhKp0MhdDqv5CEzMuRNg5QSRgHH5Jbd18CTla7Yz0Ld4m9FtFjz YL8OXALWcYOLC86sYjFmtkjAamO/iT9BZtTmkJfuSoIquCKiKgyYNveTenKZpS8K X3/FMGWNM43KJcvjPY0WrCW5Kd40Xhm50wTvHezTyABk7sGbfLhDCXwZiBHl1fLs hDsaD6xZMuI4FEpbow8lqLSx4zNC/ix39lXK3DPIta1K7bAymZbvPWJQwUqNEtpZ euEM5Ac2ZjL4chb70wLA5FjiWoNkFyAFTgScjP+VOvvLbWyYXr4dLCtqKB6/QURY 751fYb9SqKvIIjujIu8SFKnX9w== -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:29 2026 by rpki-client