$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: WiYQ7lydeMW5krUGCVOQaoPbt1mOQtdDkuyQMd8mLIs= Subject key identifier: A2:6B:54:66:4A:F0:EA:88:7B:E9:A3:EB:FA:42:D9:3B:AF:39:32:81 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 03CA Signing time: Wed 25 Mar 2026 00:16:29 +0000 Manifest this update: Wed 25 Mar 2026 00:16:28 +0000 Manifest next update: Wed 01 Apr 2026 00:16:28 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: 60jNgaovWFhX9VsaWIIn3bLUwv2RUHr7HnFiYzQ6q1s=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 7LRK+KcwEOnWS3ymmi8vjxn0ffhWtnXXLkl7lUy8srI=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: xMR/9VLxhNzTjgVdcqeCpKtEJ++jbZKm5f1wzo+8kac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Mar 25 00:16:28 2026 GMT Not After : Apr 1 00:16:28 2026 GMT Subject: CN=69c3295d-b072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:b6:ba:18:22:c1:2c:e0:33:b8:fd:2a:97: 6f:3a:97:7f:0c:fa:9b:ec:13:fb:2d:56:e7:56:7f: e8:23:74:84:ba:c9:11:53:1e:ca:1d:4b:86:41:aa: ba:ae:72:03:02:c8:da:fb:26:8f:27:c2:16:71:31: 08:0e:fa:0e:5a:a9:f4:e0:6e:b2:5a:94:4f:f7:32: 0f:f4:5c:3f:c8:2a:12:14:5b:40:9f:ff:e9:3c:b6: 02:e6:2e:d3:ec:d8:4b:ab:0d:00:d4:6a:5f:e1:60: 76:e5:c0:c7:9d:a3:9a:a9:4a:d8:68:5f:04:e9:83: c5:01:6c:25:50:7b:08:f1:c1:1d:41:ef:76:69:f8: e1:bb:3b:f6:0d:9d:8d:be:8e:04:a4:39:a6:a4:54: da:72:a8:05:2f:c9:c5:a4:96:f5:d2:ad:86:95:3a: e5:56:01:e1:d7:67:03:f6:9c:8f:40:97:3e:b2:93: 2c:e1:03:6c:a8:95:b8:aa:20:aa:78:a7:6d:51:4b: 26:13:93:94:10:70:2c:fe:58:c1:8d:ef:6b:ca:ed: fb:fa:ee:ae:f9:3f:29:93:20:65:22:35:b6:af:b1: 84:8c:cf:bb:e5:b0:1e:d5:8c:78:67:a7:a1:b7:59: 9c:78:a8:21:a2:17:bc:5b:d9:b5:50:bb:20:6b:3a: 42:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:54:66:4A:F0:EA:88:7B:E9:A3:EB:FA:42:D9:3B:AF:39:32:81 X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cf:d2:3d:62:a4:54:43:f0:b9:ee:8c:93:be:4f:ba:27:39: 0d:0f:d1:c2:f6:62:53:e9:17:7e:ae:3e:8f:c0:64:f8:6c:2e: 6a:20:b9:f2:8f:85:5d:2f:be:70:c8:e8:ae:db:22:e7:9d:98: 38:aa:46:6e:72:6f:c4:b6:06:3d:c2:2f:08:f6:f1:44:04:33: fe:c2:9f:24:90:6a:db:a3:e3:66:c9:87:b7:41:33:a8:0b:02: c1:cd:9e:6c:44:d3:d4:c1:a9:8d:87:bc:c6:be:45:a3:28:4b: d6:f7:b7:c9:93:57:0f:f3:b7:a5:d3:e1:4a:34:99:85:7b:83: 3c:a8:f5:9e:49:a6:8d:57:13:f9:c0:2e:47:9d:be:fd:81:83: 84:fb:e1:a1:cb:fc:57:e3:f2:a5:48:84:e9:99:2a:f8:d9:3b: 6a:0f:a5:8d:42:41:92:75:01:e6:c0:c6:6c:39:80:6a:9d:4f: ff:61:df:cc:f2:22:7f:b4:16:c8:f6:42:17:a4:95:17:10:2d: 1e:de:97:ff:cd:d4:d2:af:f8:a4:9f:6e:c8:4b:ad:bb:64:e0: 58:5b:50:34:57:3e:e3:f7:95:25:8e:fc:61:c1:c6:98:fa:f1: 71:57:b8:a9:03:60:b9:08:67:18:13:5a:ba:2d:41:c3:7e:4b: 16:97:5d:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjYwMzI1MDAxNjI4WhcNMjYwNDAxMDAxNjI4WjAYMRYwFAYD VQQDEw02OWMzMjk1ZC1iMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsu2uhgiwSzgM7j9KpdvOpd/DPqb7BP7LVbnVn/oI3SEuskRUx7KHUuGQaq6 rnIDAsja+yaPJ8IWcTEIDvoOWqn04G6yWpRP9zIP9Fw/yCoSFFtAn//pPLYC5i7T 7NhLqw0A1Gpf4WB25cDHnaOaqUrYaF8E6YPFAWwlUHsI8cEdQe92afjhuzv2DZ2N vo4EpDmmpFTacqgFL8nFpJb10q2GlTrlVgHh12cD9pyPQJc+spMs4QNsqJW4qiCq eKdtUUsmE5OUEHAs/ljBje9ryu37+u6u+T8pkyBlIjW2r7GEjM+75bAe1Yx4Z6eh t1mceKghohe8W9m1ULsgazpC5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJrVGZK 8OqIe+mj6/pC2TuvOTKBMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEs/SPWKkVEPwue6Mk75Puic5DQ/RwvZiU+kXfq4+j8Bk+GwuaiC58o+FXS++ cMjortsi552YOKpGbnJvxLYGPcIvCPbxRAQz/sKfJJBq26PjZsmHt0EzqAsCwc2e bETT1MGpjYe8xr5FoyhL1ve3yZNXD/O3pdPhSjSZhXuDPKj1nkmmjVcT+cAuR52+ /YGDhPvhocv8V+PypUiE6Zkq+Nk7ag+ljUJBknUB5sDGbDmAap1P/2HfzPIif7QW yPZCF6SVFxAtHt6X/83U0q/4pJ9uyEutu2TgWFtQNFc+4/eVJY78YcHGmPrxcVe4 qQNguQhnGBNaui1Bw35LFpddJg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:08 2026 by rpki-client