$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: dk8js4N3G2RsEKuNm7pmWUt42cz8k4Sk9ThCrxQrJJs= Subject key identifier: 4D:F5:80:9F:5A:63:E3:F4:45:75:BF:1B:AC:37:DB:C4:20:9D:93:3E Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 132A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 131D Signing time: Tue 24 Mar 2026 16:54:46 +0000 Manifest this update: Tue 24 Mar 2026 16:54:46 +0000 Manifest next update: Tue 31 Mar 2026 16:54:46 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: 4dykUXW+BPLxSxZ95nvQ6vVEBDmlJdK7B+vH1hoGsUs=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4906 (0x132a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Mar 24 16:54:46 2026 GMT Not After : Mar 31 16:54:46 2026 GMT Subject: CN=69c2c1d6-e3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:95:ad:14:26:6d:2e:dd:9b:25:16:44:8f: e6:de:43:fd:bd:2c:4a:df:7b:c0:67:54:26:e1:c3: fd:26:60:b4:45:1f:f2:5b:34:71:00:02:dc:da:2f: 3a:3b:97:0a:bf:b8:82:ef:97:09:51:f6:75:56:9f: 3b:b0:f5:a5:ba:6f:ec:c6:a3:16:1a:27:5e:c4:98: 99:ab:4f:30:83:2f:c7:d2:1c:d2:22:66:50:fa:81: b1:ab:90:a2:d6:55:2e:e8:5c:61:8c:3c:f7:7c:f9: 6c:bd:a4:28:00:9d:fd:ed:68:4b:16:bc:56:1a:4a: ba:8f:46:49:66:24:17:3b:94:70:30:ec:7f:64:d6: 1e:f2:20:dd:3d:ed:64:9b:b4:a1:f2:2a:ed:3a:7b: 7d:7d:06:22:39:43:ca:d9:f0:db:04:8c:b2:c6:d1: d6:d5:2b:03:f2:b4:75:83:c3:5c:c7:b6:c4:8f:d5: 56:0e:75:9c:52:97:ab:30:cb:69:67:db:94:03:d2: 67:e5:93:04:d5:5e:ad:c9:94:3a:f4:7c:74:3b:19: 9d:e1:79:1b:f1:6d:7d:13:cb:16:02:bf:ad:4a:cf: 76:6b:8d:c3:d0:69:b7:49:6c:a1:ab:47:45:3f:3a: 74:d4:a8:eb:4b:a7:8c:9a:1c:fe:dd:e5:a1:64:1a: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:80:9F:5A:63:E3:F4:45:75:BF:1B:AC:37:DB:C4:20:9D:93:3E X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:66:44:16:ae:d9:99:1a:3f:c6:d5:84:4a:83:d5:02:d9:38: c7:37:5c:12:7c:43:b1:af:7a:15:7a:bf:ea:2c:d2:eb:fc:bf: 31:49:72:25:b7:9c:05:b8:a9:0e:a5:78:f5:3a:99:9f:68:78: 80:26:01:4b:39:c6:29:d5:9c:a7:0f:4c:8d:23:f5:f3:77:95: ee:02:4a:17:e0:6e:71:32:7f:f6:5b:e8:09:9e:48:2a:d3:51: 45:9e:4d:28:7b:83:72:cf:48:c7:b6:bc:6e:8f:44:a5:37:80: 07:b0:43:6c:46:28:b9:33:0e:6d:d8:41:9b:12:6b:6e:53:cb: 5c:d0:a9:56:ec:42:8d:5f:e1:20:05:b0:38:2e:40:d2:a7:57: fe:56:29:65:52:fd:22:6b:69:57:2f:1e:03:61:6c:f5:12:3c: 33:8d:57:4f:75:d2:e8:8e:c4:83:b1:9d:9f:46:ca:23:73:5b: 28:ac:95:9a:d6:40:80:c2:3a:09:32:2d:24:c4:f9:51:b8:d0: f3:33:89:6e:71:9e:f3:58:6a:66:38:df:33:8b:5b:a6:37:10: 6a:64:a6:19:7d:47:cd:0e:4b:3d:4f:ee:d2:51:9a:01:32:1c: 22:39:a7:69:11:3f:a5:c6:de:0d:c2:2f:3c:47:9c:3a:cc:04: e9:c6:aa:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjYwMzI0MTY1NDQ2WhcNMjYwMzMxMTY1NDQ2WjAYMRYwFAYD VQQDEw02OWMyYzFkNi1lM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssSVrRQmbS7dmyUWRI/m3kP9vSxK33vAZ1Qm4cP9JmC0RR/yWzRxAALc2i86 O5cKv7iC75cJUfZ1Vp87sPWlum/sxqMWGidexJiZq08wgy/H0hzSImZQ+oGxq5Ci 1lUu6FxhjDz3fPlsvaQoAJ397WhLFrxWGkq6j0ZJZiQXO5RwMOx/ZNYe8iDdPe1k m7Sh8irtOnt9fQYiOUPK2fDbBIyyxtHW1SsD8rR1g8Ncx7bEj9VWDnWcUperMMtp Z9uUA9Jn5ZME1V6tyZQ69Hx0Oxmd4Xkb8W19E8sWAr+tSs92a43D0Gm3SWyhq0dF Pzp01KjrS6eMmhz+3eWhZBrG1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE31gJ9a Y+P0RXW/G6w328QgnZM+MB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoGZEFq7ZmRo/xtWESoPVAtk4xzdcEnxDsa96FXq/6izS6/y/MUlyJbecBbip DqV49TqZn2h4gCYBSznGKdWcpw9MjSP183eV7gJKF+BucTJ/9lvoCZ5IKtNRRZ5N KHuDcs9Ix7a8bo9EpTeAB7BDbEYouTMObdhBmxJrblPLXNCpVuxCjV/hIAWwOC5A 0qdX/lYpZVL9ImtpVy8eA2Fs9RI8M41XT3XS6I7Eg7Gdn0bKI3NbKKyVmtZAgMI6 CTItJMT5UbjQ8zOJbnGe81hqZjjfM4tbpjcQamSmGX1HzQ5LPU/u0lGaATIcIjmn aRE/pcbeDcIvPEecOswE6caq0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:53 2026 by rpki-client