$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft File: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json) Hash identifier: XLdVF5MTqRICuw+dlF6Em3ag1/P4FMNiU/612DRu6lI= Subject key identifier: F6:CE:F9:43:EE:12:8F:3C:A7:77:AD:59:E5:C2:ED:A3:1F:D6:42:BC Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC Certificate issuer: /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft Manifest number: 3E Signing time: Wed 25 Mar 2026 07:42:22 +0000 Manifest this update: Wed 25 Mar 2026 07:42:22 +0000 Manifest next update: Wed 01 Apr 2026 07:42:22 +0000 Files and hashes: 1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: UTP5NtbaMsoS+jvHBb1lhEKguTc1Uvimm8BOUF6vdr4=) 2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC Validity Not Before: Mar 25 07:42:22 2026 GMT Not After : Apr 1 07:42:22 2026 GMT Subject: CN=69c391de-1056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:80:f1:5b:68:1e:41:32:8b:e0:34:2e:20:92: 56:b0:97:1d:50:81:58:23:54:82:68:7a:b7:d9:00: 65:ec:d9:ae:8d:7a:37:b2:2e:3e:54:0d:12:33:e4: 55:6b:c0:d4:f1:b5:b9:68:27:9c:78:d5:a6:28:66: b8:c2:9a:0f:2c:7b:d1:c6:ec:3c:d4:ea:53:ed:d2: df:64:0f:d9:22:d1:e6:f8:39:01:af:2d:b7:f7:3e: 47:ac:67:8b:cb:c6:0a:8d:af:0b:26:05:ae:0b:0b: ce:f7:4e:78:1f:23:7b:e5:c6:93:6a:84:fb:bc:a4: 3f:06:42:b1:4f:82:b2:d8:54:3b:f3:c5:b0:75:b2: 25:69:c1:68:ff:e5:b6:e0:dd:27:0e:72:9a:c4:04: 40:d0:37:13:3b:21:73:3b:cf:74:9b:d2:8a:d4:fb: c7:06:d8:71:af:ea:a0:a8:ce:52:d2:43:13:de:8d: 8a:3a:d5:97:7f:09:86:68:a9:27:b2:15:46:bb:b6: 75:37:a9:60:92:a0:e3:71:58:f5:26:70:25:90:b1: b2:72:6a:74:dd:d5:17:b3:f5:c4:cb:99:64:5e:64: bc:d9:60:c0:1d:34:a5:c1:1c:33:30:90:79:49:e7: aa:74:bd:83:f0:c2:16:1d:17:06:b9:e9:3c:ae:a2: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CE:F9:43:EE:12:8F:3C:A7:77:AD:59:E5:C2:ED:A3:1F:D6:42:BC X509v3 Authority Key Identifier: keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6f:43:ee:10:69:ff:5b:cd:02:97:75:c8:e8:6d:cb:1b:30: 8d:8d:da:93:ba:25:37:04:ba:bb:3c:0b:ef:e7:d9:50:27:78: 16:a3:30:32:70:2f:e7:43:c5:ce:6d:45:40:f1:ea:ce:03:fe: c0:72:51:9f:39:71:b8:67:54:8c:67:1b:97:71:6e:f3:39:ab: d1:6c:04:09:66:3a:77:43:3c:a3:0e:ba:33:07:8d:03:d3:5c: 5e:fa:d8:55:5e:67:21:3c:d3:c2:51:6d:25:d1:58:3d:54:fb: 5b:46:d1:d4:e5:0b:14:0c:da:02:6b:1d:62:00:46:52:04:b9: 41:04:a1:5f:6c:58:dc:23:03:ad:9e:68:77:80:40:94:1d:ea: 3c:ea:d4:cc:6b:d6:ef:6e:5a:2f:27:07:4e:cf:b5:ce:8a:a2: 20:6b:ef:97:4d:60:df:f1:b9:bf:0b:ca:ac:7a:bf:43:63:2f: b7:a3:bb:aa:86:67:d5:75:5d:84:7a:4c:8e:81:8d:03:1e:14: 4c:2f:14:c9:b8:b1:0a:02:f2:1e:94:75:c8:72:9c:28:e3:14: a3:ec:20:85:c5:8e:88:49:f1:18:2d:29:4d:fc:88:55:a8:cf: 53:45:a2:7d:0d:48:39:1e:9b:76:bd:18:ec:5e:d9:e0:1a:c6: ac:41:f8:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUQ4QzExMC8GA1UEBRMoRUUzMjMxRDVBQTU2NUY0MDUyNDE5NzkyQUI4MkM0Mjc4 ODRCQzJFQzAeFw0yNjAzMjUwNzQyMjJaFw0yNjA0MDEwNzQyMjJaMBgxFjAUBgNV BAMTDTY5YzM5MWRlLTEwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkgPFbaB5BMovgNC4gklawlx1QgVgjVIJoerfZAGXs2a6NejeyLj5UDRIz5FVr wNTxtbloJ5x41aYoZrjCmg8se9HG7DzU6lPt0t9kD9ki0eb4OQGvLbf3PkesZ4vL xgqNrwsmBa4LC873TngfI3vlxpNqhPu8pD8GQrFPgrLYVDvzxbB1siVpwWj/5bbg 3ScOcprEBEDQNxM7IXM7z3Sb0orU+8cG2HGv6qCozlLSQxPejYo61Zd/CYZoqSey FUa7tnU3qWCSoONxWPUmcCWQsbJyanTd1Rez9cTLmWReZLzZYMAdNKXBHDMwkHlJ 56p0vYPwwhYdFwa56TyuouynAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9s75Q+4S jzynd61Z5cLtox/WQrwwHwYDVR0jBBgwFoAU7jIx1apWX0BSQZeSq4LEJ4hLwuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRDhDLzk3NTREQTM4RDAx NjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBXWDBCU1FaZVNxNExFSjRoTHd1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN2pJeDFhcFdYMEJTUVplU3E0TEVKNGhMd3V3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RDhDLzk3NTREQTM4RDAxNjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBXWDBC U1FaZVNxNExFSjRoTHd1dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6b0PuEGn/W80Cl3XI6G3LGzCNjdqTuiU3BLq7PAvv59lQJ3gWozAycC/nQ8XO bUVA8erOA/7AclGfOXG4Z1SMZxuXcW7zOavRbAQJZjp3QzyjDrozB40D01xe+thV XmchPNPCUW0l0Vg9VPtbRtHU5QsUDNoCax1iAEZSBLlBBKFfbFjcIwOtnmh3gECU Heo86tTMa9bvblovJwdOz7XOiqIga++XTWDf8bm/C8qser9DYy+3o7uqhmfVdV2E ekyOgY0DHhRMLxTJuLEKAvIelHXIcpwo4xSj7CCFxY6ISfEYLSlN/IhVqM9TRaJ9 DUg5Hpt2vRjsXtngGsasQfiV -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:55 2026 by rpki-client