$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: 4y2NMbCMzzzN+GrBiwxBZA/qz8RBWj2CwKJtfbgQ/jA= Subject key identifier: FE:13:A4:25:3B:5D:58:CD:69:6D:C8:45:D3:AB:DB:B3:07:57:D9:BC Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: 0154 Signing time: Fri 27 Mar 2026 04:36:02 +0000 Manifest this update: Fri 27 Mar 2026 04:36:02 +0000 Manifest next update: Fri 03 Apr 2026 04:36:02 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: LiUddZHSOsShYZ9s0BzBZzWUITx2fIoiqn/cPDcAT2A=) 2: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: ooDmK99ixwmZHb01igd9edAZRWXI26i5vbPS7c6NFw0=) 3: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: Ug9ILiDXqWcLa6yuD4ODzV/AkZeAMrnjdmuMuL/P0OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Mar 27 04:36:02 2026 GMT Not After : Apr 3 04:36:02 2026 GMT Subject: CN=69c60932-8363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:bb:76:6b:fe:8a:5a:65:c7:5b:52:23:3d: 20:0a:36:f0:d2:d6:36:6a:63:ee:5f:d6:01:13:ed: d8:d2:f0:58:1f:e5:09:b3:a4:8f:1c:f8:89:47:4e: 74:d2:c2:fc:6d:f8:c5:de:d9:64:7e:c7:ce:db:f4: 15:1d:c7:76:2f:6c:02:4c:34:33:c3:4a:22:d3:05: b4:07:e5:fd:f8:fc:ee:5f:51:6c:d2:f7:b6:73:f9: c7:f2:97:34:82:f4:88:0f:61:3e:34:8c:b2:5f:99: e2:f2:57:3d:46:8a:5d:aa:0c:52:b3:fd:d2:79:bc: a6:73:22:56:7e:5f:22:ef:38:b6:83:27:41:dc:d4: 1d:ca:c8:fd:33:23:be:90:fe:38:77:03:b8:a9:da: 0f:9f:44:b8:05:72:85:93:9b:a1:0b:56:83:a6:8e: 6b:22:6c:25:c3:96:8e:ef:7b:49:f9:b4:7a:e8:f9: 3d:6b:3f:f1:b5:de:1f:ec:e0:b5:8f:18:80:68:74: 2a:bb:9f:05:7d:3b:4c:db:fb:16:55:21:4d:28:91: a6:d6:e8:e5:68:81:82:fa:c8:5e:08:70:7b:28:b8: e8:90:97:59:9b:f7:3e:17:89:2a:b4:af:49:c6:4a: e4:20:b5:f1:24:54:3a:81:a0:34:1b:f7:0a:ba:4a: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:13:A4:25:3B:5D:58:CD:69:6D:C8:45:D3:AB:DB:B3:07:57:D9:BC X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6f:ee:bf:6d:b1:c5:a0:f6:ce:c2:e3:06:0d:6d:c2:fe:dc: 02:dc:3a:49:77:f6:ac:9e:86:37:99:ec:8a:57:9c:f7:a9:95: 91:1d:7c:f6:34:91:7d:2d:11:42:b9:58:bb:51:66:1d:bd:f4: 1c:51:50:91:b9:47:f3:58:bd:ea:41:e2:7d:c0:52:3a:0f:61: d3:d1:94:dc:45:75:c8:ff:89:5f:ad:d7:24:42:4c:9e:12:7f: 55:16:f3:49:a5:6c:3d:a9:e9:ea:e9:af:25:1f:db:a6:03:82: 9f:c5:7c:7e:e2:38:65:c4:04:2f:f6:21:8f:3f:4b:ce:b5:f6: c3:9d:89:d0:ce:d3:a6:b1:7b:bd:32:75:29:01:52:09:57:ac: 07:7a:7c:a8:78:c1:87:61:ae:9f:dd:2a:30:18:ef:23:35:a0: 98:2c:60:0c:b6:0f:e6:2a:6c:56:1c:2a:be:6e:9f:c9:c9:27: ea:1d:32:75:83:b0:f1:f5:fe:aa:9a:e2:15:1e:75:c3:65:ed: c6:35:02:db:17:4d:92:96:33:41:a8:5c:29:45:f2:ea:42:ac: d3:8c:bc:36:5f:88:6b:f0:96:95:dc:61:64:91:60:b3:a7:6f: 96:d8:05:ba:5e:9b:1e:6e:e7:59:a9:18:86:05:91:89:eb:40: d6:f5:0c:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjYwMzI3MDQzNjAyWhcNMjYwNDAzMDQzNjAyWjAYMRYwFAYD VQQDEw02OWM2MDkzMi04MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZG7dmv+ilplx1tSIz0gCjbw0tY2amPuX9YBE+3Y0vBYH+UJs6SPHPiJR050 0sL8bfjF3tlkfsfO2/QVHcd2L2wCTDQzw0oi0wW0B+X9+PzuX1Fs0ve2c/nH8pc0 gvSID2E+NIyyX5ni8lc9RopdqgxSs/3SebymcyJWfl8i7zi2gydB3NQdysj9MyO+ kP44dwO4qdoPn0S4BXKFk5uhC1aDpo5rImwlw5aO73tJ+bR66Pk9az/xtd4f7OC1 jxiAaHQqu58FfTtM2/sWVSFNKJGm1ujlaIGC+sheCHB7KLjokJdZm/c+F4kqtK9J xkrkILXxJFQ6gaA0G/cKukqsvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4TpCU7 XVjNaW3IRdOr27MHV9m8MB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlm/uv22xxaD2zsLjBg1twv7cAtw6SXf2rJ6GN5nsilec96mVkR189jSRfS0R QrlYu1FmHb30HFFQkblH81i96kHifcBSOg9h09GU3EV1yP+JX63XJEJMnhJ/VRbz SaVsPanp6umvJR/bpgOCn8V8fuI4ZcQEL/Yhjz9LzrX2w52J0M7TprF7vTJ1KQFS CVesB3p8qHjBh2Gun90qMBjvIzWgmCxgDLYP5ipsVhwqvm6fyckn6h0ydYOw8fX+ qpriFR51w2XtxjUC2xdNkpYzQahcKUXy6kKs04y8Nl+Ia/CWldxhZJFgs6dvltgF ul6bHm7nWakYhgWRietA1vUMxg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:20 2026 by rpki-client