$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json) Hash identifier: KvBzaz/Nivmem3X/0v/MxwvaolejaJiyVROpViQRp3M= Subject key identifier: 90:FF:AB:8E:1B:C5:6B:CD:19:03:3B:78:0B:A9:3E:0F:95:E6:33:71 Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Certificate serial: 1A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft Manifest number: 1A65 Signing time: Tue 24 Mar 2026 16:15:21 +0000 Manifest this update: Tue 24 Mar 2026 16:15:20 +0000 Manifest next update: Tue 31 Mar 2026 16:15:20 +0000 Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: D+XMRiriEouJPkio4FZ0tHrZd4ObvkU5VzSUFUgD2Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6757 (0x1a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Validity Not Before: Mar 24 16:15:20 2026 GMT Not After : Mar 31 16:15:20 2026 GMT Subject: CN=69c2b899-a67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:56:b9:d7:24:0f:45:1f:47:90:45:97:27: df:62:48:35:de:74:95:3d:83:67:27:29:ac:15:44: 9a:96:f3:cb:fc:5b:c4:52:20:fe:20:1b:88:2f:cb: 14:b9:05:3e:be:d0:3c:c4:fd:dd:a4:02:a1:ee:28: 0a:b7:56:2e:aa:a0:40:00:00:62:51:bc:6e:05:db: 99:10:43:ea:c8:ed:fd:1b:7a:b7:f0:09:64:41:f8: ab:85:92:b6:29:ac:f8:f9:ec:93:54:d7:e3:64:f8: 32:ff:3d:cb:48:e4:24:de:20:86:ea:c1:80:70:76: a8:77:6a:e7:cc:52:d4:40:d3:0c:fa:23:71:06:d4: cf:2a:f2:84:9c:31:33:35:ca:67:75:85:a6:28:e3: cd:b0:02:d1:a2:5c:87:05:f8:09:25:7d:a7:56:81: 67:65:d3:2f:e7:b4:0f:62:82:85:6a:d7:6d:82:16: fe:1e:27:e0:b1:e2:4a:e1:fd:fc:a8:9d:71:ec:4d: 9f:d8:2a:86:10:2d:93:cc:8f:40:a2:94:a0:8a:58: 86:cd:cf:6f:f9:a0:88:c1:65:50:f3:ef:c2:68:12: 94:f3:46:c2:32:20:8e:36:a1:f2:27:cc:a7:38:96: 66:17:35:f8:ef:27:ae:57:23:b4:32:f9:c4:0f:da: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FF:AB:8E:1B:C5:6B:CD:19:03:3B:78:0B:A9:3E:0F:95:E6:33:71 X509v3 Authority Key Identifier: keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1a:7e:2c:8f:5e:99:ed:d6:7e:93:dc:84:39:e4:5e:76:14: 1a:12:6a:f3:d6:00:cb:b6:1f:19:07:58:47:93:96:08:3e:e9: 77:a4:43:96:9b:77:de:bb:7c:a2:75:19:a7:fb:89:7d:9e:45: 62:b7:f5:4f:66:42:a0:1c:00:b8:08:02:f6:26:a9:b1:88:e3: 08:91:32:f1:42:b4:32:3b:f7:2b:51:5f:fe:b4:56:23:19:cf: e4:a0:51:40:5c:49:3e:28:6b:a8:11:bd:83:3a:40:ea:9d:8f: 5e:13:ec:62:23:1c:1c:14:d3:75:7b:38:ec:86:91:7e:d5:2a: bf:6b:be:1d:45:a5:40:d7:77:74:9a:96:11:09:ea:ee:55:88: 86:b2:6a:92:3e:12:14:ec:57:fa:fa:2f:13:4c:90:0c:15:50: 69:d1:0b:5e:c8:d5:9f:01:e5:31:75:0e:72:fc:ca:31:8a:68: 90:32:47:8c:28:96:e8:3e:50:12:16:af:07:ff:1f:cc:ff:3a: a8:fb:0b:09:5c:11:c4:38:0f:09:2e:1f:8c:f2:ff:4a:25:6a: 57:7f:cb:f1:8f:cd:cb:96:4a:3e:c1:15:05:37:6a:e9:51:23: 20:f0:65:c6:be:24:cb:a5:9b:3f:22:81:83:90:a4:f0:38:53: 4d:50:e5:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy OTkxRDdBOTgwHhcNMjYwMzI0MTYxNTIwWhcNMjYwMzMxMTYxNTIwWjAYMRYwFAYD VQQDEw02OWMyYjg5OS1hNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ERWudckD0UfR5BFlyffYkg13nSVPYNnJymsFUSalvPL/FvEUiD+IBuIL8sU uQU+vtA8xP3dpAKh7igKt1YuqqBAAABiUbxuBduZEEPqyO39G3q38AlkQfirhZK2 Kaz4+eyTVNfjZPgy/z3LSOQk3iCG6sGAcHaod2rnzFLUQNMM+iNxBtTPKvKEnDEz NcpndYWmKOPNsALRolyHBfgJJX2nVoFnZdMv57QPYoKFatdtghb+HifgseJK4f38 qJ1x7E2f2CqGEC2TzI9AopSgiliGzc9v+aCIwWVQ8+/CaBKU80bCMiCONqHyJ8yn OJZmFzX47yeuVyO0MvnED9ruBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJD/q44b xWvNGQM7eAupPg+V5jNxMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL RWRBVkNqRHZLMG9wa2RlcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhp+LI9eme3WfpPchDnkXnYUGhJq89YAy7YfGQdYR5OWCD7pd6RDlpt33rt8 onUZp/uJfZ5FYrf1T2ZCoBwAuAgC9iapsYjjCJEy8UK0Mjv3K1Ff/rRWIxnP5KBR QFxJPihrqBG9gzpA6p2PXhPsYiMcHBTTdXs47IaRftUqv2u+HUWlQNd3dJqWEQnq 7lWIhrJqkj4SFOxX+vovE0yQDBVQadELXsjVnwHlMXUOcvzKMYpokDJHjCiW6D5Q EhavB/8fzP86qPsLCVwRxDgPCS4fjPL/SiVqV3/L8Y/Ny5ZKPsEVBTdq6VEjIPBl xr4ky6WbPyKBg5Ck8DhTTVDlpQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:41:58 2026 by rpki-client