$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: GAEM9gSUzlr+siSPh3D+CR0jxMWhtf9EY2uIn0Lb/m4= Subject key identifier: 19:5E:75:6E:AA:87:85:1C:82:A2:39:CF:A7:8F:4E:E6:7D:38:2B:58 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 1A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 1A28 Signing time: Tue 24 Mar 2026 16:15:50 +0000 Manifest this update: Tue 24 Mar 2026 16:15:50 +0000 Manifest next update: Tue 31 Mar 2026 16:15:50 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: +oTCHSMvVzU/zn2LOLlXKAe0gB5Mlv+UDUYa7X/xAs4=) 2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: j8zPimmUKE8p8dATGQl7pSw0HZC2Oivbs1po3giv3uc=) 3: DCD75050315011F0BC916269C4F9AE02.roa (hash: noPbCtMqAat51qDXsfXwESX0FilH6PPV7bIjyoxZhqs=) 4: 545743246D1911E7A4448D81C4F9AE02.roa (hash: u9F/oOx7hPf++Dfyh0WSN1n/aI/KaU9C/Cj9VKOcsxk=) 5: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: BQetgOKP2pwjUT6eChrwhwSjxzfMAqwXit73S7tCp/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6738 (0x1a52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Mar 24 16:15:50 2026 GMT Not After : Mar 31 16:15:50 2026 GMT Subject: CN=69c2b8b6-d90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:20:9b:c9:6b:16:48:6f:ef:e8:8c:ef:ad: 70:ba:e3:bf:5d:73:89:ba:d8:31:1b:39:74:ad:a7: 3a:67:72:41:54:03:3b:5d:b8:fd:d7:43:9a:10:7f: 25:d7:03:31:7f:98:66:c0:e8:cb:49:42:3b:e5:3a: 7d:a7:c8:b2:cb:93:ca:bd:b1:0c:1d:8d:9e:cd:56: 7d:08:e5:87:34:96:0b:22:f3:ad:8f:11:60:dc:10: 9c:1b:4b:60:21:a7:c7:1d:27:4a:ba:2b:43:29:c9: d2:81:9e:a2:97:b1:15:7c:4a:9d:e3:36:c2:1d:44: e6:58:78:33:33:1d:59:b5:7b:fb:15:67:fa:e7:3b: f9:5b:3b:c3:98:a4:43:04:61:c2:f2:d4:48:e4:49: 79:9c:ad:96:1d:f6:b9:ae:f0:04:bf:41:d2:62:cf: 05:e6:61:bd:5d:2c:0f:c0:f4:e9:f4:84:e2:86:c9: 55:2f:09:62:b4:7b:cb:74:fb:f9:45:02:59:51:24: 03:00:c6:18:14:f4:ff:bc:ec:49:07:6a:8c:4b:a7: ad:cd:20:ec:47:38:db:2e:c9:ba:96:8f:af:6d:cb: b6:a4:3a:66:47:87:92:c3:d0:b9:df:24:2f:33:47: 35:ec:92:99:d6:59:68:0c:1a:b9:b2:31:a8:64:bf: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5E:75:6E:AA:87:85:1C:82:A2:39:CF:A7:8F:4E:E6:7D:38:2B:58 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:9e:93:64:a7:3d:e0:9b:d4:eb:5c:b4:04:3a:29:3d:c0: 3d:ad:08:6f:47:de:dd:e9:47:04:eb:34:d5:3b:33:cc:9b:5f: 00:9a:84:71:08:4f:90:73:73:9d:5c:c9:a7:79:ff:a6:95:c4: b1:1c:dc:90:f7:c7:06:c9:11:b3:a1:62:a0:33:6a:15:3b:c3: bf:f8:c7:84:c6:fc:af:22:11:be:c1:da:57:54:dd:49:41:d3: 91:bb:9e:13:cd:1b:fe:cf:27:43:93:e1:a9:6a:78:5b:c2:3a: 3c:33:0a:6a:f9:11:db:b1:64:99:98:8e:6a:64:ee:68:7b:4b: 0a:80:a8:9f:c3:51:ad:f2:86:d1:81:4b:d0:e1:99:03:41:46: 1c:43:bf:8b:48:82:a6:9b:9c:5d:92:12:fc:37:cb:e9:b0:a8: cb:3b:e4:6d:e5:55:0c:0b:7d:c9:ea:eb:20:e3:a0:d0:47:c0: 8d:7b:af:db:a5:d2:07:95:f1:76:90:79:bf:5f:e8:de:fc:26: c2:e4:76:af:e2:02:53:8d:6f:cc:33:bc:11:fd:93:e7:a9:e6: 24:17:8d:e6:13:a5:13:6a:3e:a1:d6:25:5d:df:85:69:eb:94: f0:ad:88:1b:a4:08:95:8b:46:26:0d:ef:c8:86:fa:5a:11:dc: a7:a7:79:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjYwMzI0MTYxNTUwWhcNMjYwMzMxMTYxNTUwWjAYMRYwFAYD VQQDEw02OWMyYjhiNi1kOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttsgm8lrFkhv7+iM761wuuO/XXOJutgxGzl0rac6Z3JBVAM7Xbj910OaEH8l 1wMxf5hmwOjLSUI75Tp9p8iyy5PKvbEMHY2ezVZ9COWHNJYLIvOtjxFg3BCcG0tg IafHHSdKuitDKcnSgZ6il7EVfEqd4zbCHUTmWHgzMx1ZtXv7FWf65zv5WzvDmKRD BGHC8tRI5El5nK2WHfa5rvAEv0HSYs8F5mG9XSwPwPTp9ITihslVLwlitHvLdPv5 RQJZUSQDAMYYFPT/vOxJB2qMS6etzSDsRzjbLsm6lo+vbcu2pDpmR4eSw9C53yQv M0c17JKZ1lloDBq5sjGoZL/IrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBledW6q h4UcgqI5z6ePTuZ9OCtYMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIp2ek2SnPeCb1OtctAQ6KT3APa0Ib0fe3elHBOs01TszzJtfAJqEcQhPkHNz nVzJp3n/ppXEsRzckPfHBskRs6FioDNqFTvDv/jHhMb8ryIRvsHaV1TdSUHTkbue E80b/s8nQ5PhqWp4W8I6PDMKavkR27FkmZiOamTuaHtLCoCon8NRrfKG0YFL0OGZ A0FGHEO/i0iCppucXZIS/DfL6bCoyzvkbeVVDAt9yerrIOOg0EfAjXuv26XSB5Xx dpB5v1/o3vwmwuR2r+ICU41vzDO8Ef2T56nmJBeN5hOlE2o+odYlXd+FaeuU8K2I G6QIlYtGJg3vyIb6WhHcp6d59A== -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:03 2026 by rpki-client