$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: 4on++e+fBpjm3k/0/VP8dHmksrT+gJ/Iq44OjYTyLbc= Subject key identifier: 8E:07:E1:AD:FC:E9:36:53:31:6F:C1:8B:8F:E0:92:F7:87:CE:1A:BF Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: 0250 Signing time: Wed 25 Mar 2026 01:43:34 +0000 Manifest this update: Wed 25 Mar 2026 01:43:34 +0000 Manifest next update: Wed 01 Apr 2026 01:43:34 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: 8aoXCrfyCVcx6auV9clfvx7mgYTfcBUslVa2va6KOyM=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: Ht1RtlrEvpJprnXpzi27AqBChmOPSDOow73vkTiQStQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: Mar 25 01:43:34 2026 GMT Not After : Apr 1 01:43:34 2026 GMT Subject: CN=69c33dc6-8b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:e9:a3:e5:c0:0d:e5:3c:90:29:53:e1:55: e6:a1:04:54:c2:6c:eb:43:15:d5:26:22:7a:e1:70: d3:89:e8:88:b9:fd:36:05:c2:83:16:48:87:fd:4e: cc:6f:3f:0d:f1:c1:3b:5c:7a:d7:b1:35:95:e2:a5: b3:67:04:d5:1a:16:cc:94:40:b2:57:0d:38:c7:89: b7:d6:22:aa:9b:a8:31:2c:bd:1c:c2:24:d4:42:d9: 5b:36:56:09:cc:57:ed:49:20:7e:14:3a:78:72:9e: be:7e:04:9c:67:81:3f:6c:38:9e:3a:2f:f7:8a:c7: 52:d5:cf:58:33:9a:54:c3:be:2c:7a:ab:ff:8d:c1: a3:37:6e:d8:39:ee:83:75:30:ad:e0:92:3f:2a:3a: 0e:99:12:0a:30:61:e5:33:6d:cd:d9:85:15:98:40: 79:e7:f9:23:41:f8:79:da:8d:d4:97:44:c4:af:43: e6:67:e8:90:b1:90:2b:87:47:22:21:72:ba:a9:e3: cb:61:d1:85:c0:30:06:b8:e3:47:34:64:1a:3f:de: 4f:f0:70:fc:e9:2d:cf:63:c8:33:df:17:89:21:08: 47:41:7a:83:17:d3:9b:6b:b2:0a:07:96:a2:78:ef: 3d:2d:93:52:2e:ef:96:52:ab:53:a1:06:5f:45:9c: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:E1:AD:FC:E9:36:53:31:6F:C1:8B:8F:E0:92:F7:87:CE:1A:BF X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:55:60:30:43:6e:de:5f:a5:8a:45:15:01:8d:51:4d:ce:b1: c1:11:b1:7d:06:36:c5:9e:df:e9:ae:87:be:79:35:0c:dd:d1: 72:a5:84:03:c3:01:7d:03:79:ac:80:d4:f7:61:1f:5a:48:bc: d3:37:dd:bb:e1:74:0a:d7:ff:0a:72:4f:70:09:72:11:5b:87: 04:b8:fa:b4:e9:38:9f:0b:90:e8:54:69:f6:50:3c:78:a9:03: 71:5e:a3:81:52:89:91:66:22:6a:bc:c1:bd:aa:02:4a:94:67: 93:91:fd:8b:dc:4a:36:39:89:70:ab:a5:29:c6:82:6b:c3:5e: b6:00:17:2a:7f:d5:49:42:0e:5e:3b:7f:92:79:f8:88:73:fb: 77:b9:69:37:70:00:3b:14:7c:21:90:e3:2d:ba:66:09:fa:25: 8b:af:15:33:27:a9:db:5e:07:05:82:9c:b4:ef:93:3e:0c:aa: fb:43:a0:af:cc:f5:9a:9b:c5:72:38:64:ba:74:8c:c5:d4:29: e5:52:26:9e:d2:6a:c1:d7:3a:f0:66:c9:09:1c:f5:4f:d2:a3: 38:25:a1:7a:57:a9:79:20:dc:bb:35:9b:9b:5b:61:ff:a7:fe: 05:84:0d:46:43:a4:07:29:84:2f:14:70:b5:55:db:e4:74:79: f0:ec:5c:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjYwMzI1MDE0MzM0WhcNMjYwNDAxMDE0MzM0WjAYMRYwFAYD VQQDEw02OWMzM2RjNi04YjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznrpo+XADeU8kClT4VXmoQRUwmzrQxXVJiJ64XDTieiIuf02BcKDFkiH/U7M bz8N8cE7XHrXsTWV4qWzZwTVGhbMlECyVw04x4m31iKqm6gxLL0cwiTUQtlbNlYJ zFftSSB+FDp4cp6+fgScZ4E/bDieOi/3isdS1c9YM5pUw74seqv/jcGjN27YOe6D dTCt4JI/KjoOmRIKMGHlM23N2YUVmEB55/kjQfh52o3Ul0TEr0PmZ+iQsZArh0ci IXK6qePLYdGFwDAGuONHNGQaP95P8HD86S3PY8gz3xeJIQhHQXqDF9Oba7IKB5ai eO89LZNSLu+WUqtToQZfRZwZmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4H4a38 6TZTMW/Bi4/gkveHzhq/MB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe1VgMENu3l+likUVAY1RTc6xwRGxfQY2xZ7f6a6Hvnk1DN3RcqWEA8MBfQN5 rIDU92EfWki80zfdu+F0Ctf/CnJPcAlyEVuHBLj6tOk4nwuQ6FRp9lA8eKkDcV6j gVKJkWYiarzBvaoCSpRnk5H9i9xKNjmJcKulKcaCa8NetgAXKn/VSUIOXjt/knn4 iHP7d7lpN3AAOxR8IZDjLbpmCfoli68VMyep214HBYKctO+TPgyq+0Ogr8z1mpvF cjhkunSMxdQp5VImntJqwdc68GbJCRz1T9KjOCWhelepeSDcuzWbm1th/6f+BYQN RkOkBymELxRwtVXb5HR58OxchQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:19:08 2026 by rpki-client