$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft File: 7DwKarkc4TMW0oQzDDgovv4qNBM.mft (raw, json) Hash identifier: PNwQZRHWkO2IRIV3WQbRq9F5eaH02ML9PfpVTbFAJX4= Subject key identifier: E2:D9:04:FC:F6:E7:52:2D:05:AA:F0:A3:71:6E:37:31:0E:AF:C9:00 Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13 Certificate issuer: /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft Manifest number: 34 Signing time: Wed 25 Mar 2026 07:51:33 +0000 Manifest this update: Wed 25 Mar 2026 07:51:32 +0000 Manifest next update: Wed 01 Apr 2026 07:51:32 +0000 Files and hashes: 1: 7DwKarkc4TMW0oQzDDgovv4qNBM.crl (hash: xvbeyIsXrclob93Myk8hGmOih3SKgij3igL52LE1TDs=) 2: 243B3BD4E58611F09F41C5B9446F56BC.roa (hash: Aj8RzUbCtaBCDWnM6UmtXq+ruFe179TzOiotm9T5UII=) 3: 8FB3AD6AE58611F0A2F174BA446F56BC.roa (hash: sTktGN5NFdYq+gsUaHWLCXYe1rpci+mF34P/YuXEE0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413 Validity Not Before: Mar 25 07:51:32 2026 GMT Not After : Apr 1 07:51:32 2026 GMT Subject: CN=69c39405-9218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:d7:6a:b7:6f:97:6b:fa:a1:97:0e:bc:23: ca:0b:1c:1b:00:f7:5f:10:25:22:18:0d:53:02:df: cd:03:0f:a9:5e:2b:06:2f:65:81:ff:6c:21:54:fb: 56:d3:a2:f0:a2:75:66:46:84:00:08:36:1e:40:43: 35:90:99:f8:64:6d:a7:3b:c3:f5:f9:ca:50:ba:b4: 91:a7:55:36:dd:77:5c:76:2a:9e:f7:b3:03:44:f7: e1:6c:19:11:fb:ca:60:10:6c:30:7f:c1:fd:03:d6: ad:fe:b1:9c:55:69:fc:a1:16:18:24:58:65:4b:b6: a1:36:28:2e:23:58:65:c1:7b:e6:7d:99:d5:aa:d5: 76:8f:bf:ea:a5:ba:8e:c1:48:82:68:4c:2a:15:d9: 7b:e0:cc:a4:58:12:83:24:61:24:0d:cf:62:54:cd: 2c:c1:9d:c1:cc:5f:ec:3e:df:2c:b6:6c:5f:76:db: aa:7d:53:2a:ac:0c:53:30:a3:8f:ba:28:a0:d5:55: 5b:ed:1c:c5:a4:5f:f6:35:f5:d6:64:21:66:db:74: 2d:a7:9a:cd:c1:e9:3f:f0:84:99:10:bf:6a:3e:bc: 42:28:ac:82:61:f9:47:f7:fa:d6:83:ac:7d:8b:6d: fd:98:8e:b0:c1:2f:d7:3d:3d:9b:2d:7d:51:4a:d1: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D9:04:FC:F6:E7:52:2D:05:AA:F0:A3:71:6E:37:31:0E:AF:C9:00 X509v3 Authority Key Identifier: keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ec:f3:5a:cf:73:4c:83:1b:ba:ac:f3:3d:b8:12:c9:6c:28: f9:2e:a2:e1:61:79:61:08:f5:20:07:72:c2:f6:27:85:6d:6e: c3:99:73:77:fe:cb:84:9c:fe:cc:6d:e8:9d:93:37:2e:19:35: fa:46:42:de:31:c8:e1:e7:ef:25:97:a2:f9:d9:66:15:9f:b5: cf:f8:22:07:fc:05:b5:dc:3f:ae:f7:65:c3:4e:10:f2:be:0a: 9a:d1:e8:50:4d:f3:87:41:28:e3:30:05:40:41:85:f2:82:7e: 29:e0:43:e8:bb:43:89:2e:da:80:15:1d:a9:bd:0a:12:01:92: b8:28:30:7c:08:07:67:ed:aa:bd:d1:28:4c:88:77:f0:d8:b1: 61:0f:3f:1b:f6:f3:6a:a9:4d:ec:f9:11:d5:29:af:9b:34:2e: b4:8e:da:1b:77:61:4f:09:92:f4:b0:9f:ff:c3:aa:9d:54:e0: 6f:06:fa:ef:cc:2f:f5:49:4d:98:6b:a7:af:be:0e:02:60:ec: b2:39:84:4a:0a:7e:d8:c1:3e:26:e2:44:7f:98:b6:30:89:e9: 7b:30:63:06:2a:dd:e0:a0:e8:25:8a:b0:41:bf:f1:e5:70:f3: 35:5b:ab:3c:47:d5:95:86:dc:dc:97:b7:dc:a0:5a:36:4b:2d: 30:11:27:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODhFQjExMC8GA1UEBRMoRUMzQzBBNkFCOTFDRTEzMzE2RDI4NDMzMEMzODI4QkVG RTJBMzQxMzAeFw0yNjAzMjUwNzUxMzJaFw0yNjA0MDEwNzUxMzJaMBgxFjAUBgNV BAMTDTY5YzM5NDA1LTkyMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW69dqt2+Xa/qhlw68I8oLHBsA918QJSIYDVMC380DD6leKwYvZYH/bCFU+1bT ovCidWZGhAAINh5AQzWQmfhkbac7w/X5ylC6tJGnVTbdd1x2Kp73swNE9+FsGRH7 ymAQbDB/wf0D1q3+sZxVafyhFhgkWGVLtqE2KC4jWGXBe+Z9mdWq1XaPv+qluo7B SIJoTCoV2XvgzKRYEoMkYSQNz2JUzSzBncHMX+w+3yy2bF9226p9UyqsDFMwo4+6 KKDVVVvtHMWkX/Y19dZkIWbbdC2nms3B6T/whJkQv2o+vEIorIJh+Uf3+taDrH2L bf2YjrDBL9c9PZstfVFK0UFHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4tkE/Pbn Ui0FqvCjcW43MQ6vyQAwHwYDVR0jBBgwFoAU7DwKarkc4TMW0oQzDDgovv4qNBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4OEVCL0Y4NEVCOUZDRTQ4 QTExRjA4M0QxMUU2QjQ0NkY1NkJDLzdEd0thcmtjNFRNVzBvUXpERGdvdnY0cU5C TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0R3S2Fya2M0VE1XMG9RekREZ292djRxTkJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 OEVCL0Y4NEVCOUZDRTQ4QTExRjA4M0QxMUU2QjQ0NkY1NkJDLzdEd0thcmtjNFRN VzBvUXpERGdvdnY0cU5CTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBC7PNaz3NMgxu6rPM9uBLJbCj5LqLhYXlhCPUgB3LC9ieFbW7DmXN3/suEnP7M beidkzcuGTX6RkLeMcjh5+8ll6L52WYVn7XP+CIH/AW13D+u92XDThDyvgqa0ehQ TfOHQSjjMAVAQYXygn4p4EPou0OJLtqAFR2pvQoSAZK4KDB8CAdn7aq90ShMiHfw 2LFhDz8b9vNqqU3s+RHVKa+bNC60jtobd2FPCZL0sJ//w6qdVOBvBvrvzC/1SU2Y a6evvg4CYOyyOYRKCn7YwT4m4kR/mLYwiel7MGMGKt3goOglirBBv/HlcPM1W6s8 R9WVhtzcl7fcoFo2Sy0wESdB -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:07 2026 by rpki-client