$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: fj3b8KyvVtIH1CdSr8oPpXPQ+HrjtuYrTTH4XC/roXA= Subject key identifier: A9:2C:21:A3:33:C6:48:5A:49:E4:3E:9B:3A:6D:7C:CF:59:44:37:50 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 10F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 10E4 Signing time: Thu 26 Mar 2026 17:15:48 +0000 Manifest this update: Thu 26 Mar 2026 17:15:47 +0000 Manifest next update: Thu 02 Apr 2026 17:15:47 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: brEGT+zfb1DGVXgHekdpFgoDmclcCPII/jkOPXmE9Ok=) 2: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=) 3: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4344 (0x10f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Mar 26 17:15:47 2026 GMT Not After : Apr 2 17:15:47 2026 GMT Subject: CN=69c569c3-dc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:8a:65:c1:8a:d7:7a:22:8b:19:ff:5d:03: 8e:98:63:80:77:c4:d1:03:e8:76:d0:22:d1:c7:55: f7:c9:31:b2:a8:a7:4a:cb:33:9a:be:db:75:bf:21: 3b:70:77:81:2b:67:93:e5:29:9d:60:d3:43:17:2c: 08:e3:8b:f8:88:82:25:9e:4d:8b:d5:18:b0:2f:29: 96:a2:86:7c:6b:03:d5:7a:6e:b3:68:e0:01:a2:33: 1c:d1:fe:3f:f9:f0:63:73:0a:2a:71:19:08:5f:17: 24:e9:d9:0b:d4:0d:fd:cc:5a:83:bb:e0:79:3f:28: f8:2c:19:4b:03:68:76:fe:53:1b:29:3b:7a:91:f0: bb:4b:41:02:f7:d9:8a:89:38:2b:9b:fa:10:0c:47: 43:a9:f1:55:c9:6b:67:7c:55:8e:f1:66:21:6c:98: 36:35:69:76:b1:81:df:10:7d:51:38:e9:91:b9:24: 15:63:7e:5e:a5:be:09:a1:de:19:a9:05:11:4f:80: 9d:39:54:ed:41:18:20:59:83:3c:b2:92:35:78:2d: eb:10:21:f3:ec:71:db:bc:3c:6d:ae:ce:fe:8b:eb: 49:45:85:57:b5:df:23:02:0d:7c:31:b3:37:78:86: 5f:f0:ac:82:72:a2:bb:73:dd:8c:d0:80:c0:95:75: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2C:21:A3:33:C6:48:5A:49:E4:3E:9B:3A:6D:7C:CF:59:44:37:50 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0c:9f:aa:e0:3b:0a:ea:eb:63:f7:e8:52:94:29:98:73:19: 5d:61:bb:eb:71:d2:da:93:30:05:02:55:17:f9:bc:1e:e8:24: 3c:e5:1f:43:2f:24:6d:3d:53:96:bc:19:ec:1a:a6:0c:d8:e5: b6:91:97:40:58:38:98:60:9a:98:27:c5:36:98:fc:40:20:bd: 3f:24:bf:2c:67:02:14:bb:8f:e3:60:7b:d1:18:b3:cb:02:80: fe:9b:62:e0:c1:a5:d1:63:5d:29:8e:0a:2b:28:de:5c:ce:ee: 3b:3a:b0:26:fc:9a:0d:0e:ed:79:61:aa:54:31:20:dc:d9:b0: 40:3c:56:62:d4:67:67:cf:6c:0f:8b:82:a0:c8:8d:25:9d:d2: 0f:ab:1e:13:88:ed:13:d0:07:57:95:93:93:27:e5:51:6c:b6: ad:eb:10:57:49:61:6f:9a:d1:14:42:f8:45:3d:d0:6f:7e:b8: a8:5a:78:11:a5:c5:c8:98:c2:e3:60:20:f9:85:57:fc:29:6a: fa:11:50:c6:90:dd:a5:39:e7:ae:00:6f:b4:91:ce:84:eb:76: e1:6d:b9:07:bd:d1:1b:de:5f:ac:a2:be:20:54:0a:f7:22:a6: f9:45:ef:f0:c8:d6:7b:d0:8e:ea:d7:b5:bd:08:61:d9:33:36: cc:d4:7d:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjYwMzI2MTcxNTQ3WhcNMjYwNDAyMTcxNTQ3WjAYMRYwFAYD VQQDEw02OWM1NjljMy1kYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhd2KZcGK13oiixn/XQOOmGOAd8TRA+h20CLRx1X3yTGyqKdKyzOavtt1vyE7 cHeBK2eT5SmdYNNDFywI44v4iIIlnk2L1RiwLymWooZ8awPVem6zaOABojMc0f4/ +fBjcwoqcRkIXxck6dkL1A39zFqDu+B5Pyj4LBlLA2h2/lMbKTt6kfC7S0EC99mK iTgrm/oQDEdDqfFVyWtnfFWO8WYhbJg2NWl2sYHfEH1ROOmRuSQVY35epb4Jod4Z qQURT4CdOVTtQRggWYM8spI1eC3rECHz7HHbvDxtrs7+i+tJRYVXtd8jAg18MbM3 eIZf8KyCcqK7c92M0IDAlXWcrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKksIaMz xkhaSeQ+mzptfM9ZRDdQMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEQyfquA7CurrY/foUpQpmHMZXWG763HS2pMwBQJVF/m8HugkPOUfQy8kbT1T lrwZ7BqmDNjltpGXQFg4mGCamCfFNpj8QCC9PyS/LGcCFLuP42B70RizywKA/pti 4MGl0WNdKY4KKyjeXM7uOzqwJvyaDQ7teWGqVDEg3NmwQDxWYtRnZ89sD4uCoMiN JZ3SD6seE4jtE9AHV5WTkyflUWy2resQV0lhb5rRFEL4RT3Qb364qFp4EaXFyJjC 42Ag+YVX/Clq+hFQxpDdpTnnrgBvtJHOhOt24W25B73RG95frKK+IFQK9yKm+UXv 8MjWe9CO6te1vQhh2TM2zNR9vg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:06 2026 by rpki-client