$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: sppa1TU/VElKz9GEl5W3tSyWMiF7tFI95ko8ll0VS0E= Subject key identifier: D4:F1:48:65:9A:2B:95:6E:E9:B4:CD:0D:C4:CF:E3:95:CD:2E:70:71 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0BC3 Signing time: Tue 24 Mar 2026 18:45:54 +0000 Manifest this update: Tue 24 Mar 2026 18:45:53 +0000 Manifest next update: Tue 31 Mar 2026 18:45:53 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: 9sBNzmLdc0lXEovaBGipPqKgJ/m5O8aScZWRAtj/ePg=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: SCXjTUPrR9d678oR+OWQXH7H0AUB5NbQ5rZ/IrsYFNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Mar 24 18:45:53 2026 GMT Not After : Mar 31 18:45:53 2026 GMT Subject: CN=69c2dbe2-bfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:0a:10:88:64:fd:63:4b:d2:d4:1d:9f:ce: 91:cf:0e:37:76:6c:f2:da:f5:29:bb:f3:34:1e:68: bb:1c:7c:40:4c:db:17:a0:79:0c:76:e6:78:68:26: 4f:14:a1:48:50:14:ee:ed:c7:df:81:65:d5:4c:39: 67:d9:43:84:ea:f5:4f:af:e4:49:6e:26:32:ce:79: 53:8d:2a:2f:16:48:2d:e8:5d:79:42:67:70:5f:ae: 3c:e9:34:40:f5:71:f7:92:6f:33:c3:95:38:73:ec: 3f:8e:fd:d3:24:92:de:9d:9b:fb:83:2f:9d:d0:48: 6f:5e:04:71:4a:06:ec:ef:12:ae:9a:66:7f:00:07: f0:ed:2d:c8:b8:73:a4:ce:58:08:d6:83:9b:30:e1: b8:4f:17:c6:5f:88:a6:15:56:01:2f:93:f7:b8:9e: fa:f1:95:b5:47:60:dd:e1:e5:29:41:5a:28:ab:1e: 69:09:45:93:cf:01:f0:b5:ea:5a:20:3f:eb:7d:b6: 89:8a:c9:09:95:fb:77:6d:1f:ee:bb:40:f7:70:5e: cb:1f:6e:18:cb:01:06:29:4f:4f:ea:7f:cc:c4:6a: 79:04:5e:ae:7e:4a:de:f0:95:93:1c:39:ce:93:74: e8:cd:8b:1c:dd:33:78:01:a7:a0:76:68:f2:30:cf: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F1:48:65:9A:2B:95:6E:E9:B4:CD:0D:C4:CF:E3:95:CD:2E:70:71 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ad:2f:0f:51:cb:ac:54:18:35:a2:97:70:f2:50:5f:56:9c: 4d:71:bd:56:1b:76:dd:55:da:95:8c:2c:e9:e5:43:96:72:9f: 87:04:16:38:4f:7a:fc:7a:e8:3f:dc:65:bf:c0:b6:99:d8:ce: 01:f0:14:f4:01:11:a0:1c:7e:59:25:78:99:c4:86:c1:4a:80: 60:da:45:37:28:a3:17:3c:c5:25:57:26:b0:2f:14:29:a5:a1: b1:b2:21:c8:14:5b:16:24:50:bd:33:43:8e:ee:ee:22:cf:a9: 48:38:15:29:bb:1c:d1:98:2a:07:47:1c:50:da:c7:f1:0d:70: c8:ed:ff:04:01:ae:e6:cb:ac:74:d2:e5:0e:f8:b9:21:bd:ce: a7:a6:11:01:3b:26:a7:f9:1e:30:05:fd:d7:b5:71:9f:aa:8d: ec:6a:7a:34:6c:ea:5f:97:bf:71:2c:d6:a5:ea:64:8b:92:7d: 18:7f:21:a1:20:de:d4:93:0a:e2:5c:43:d0:ca:a9:80:e2:3c: 33:0e:70:0c:8a:9a:a9:bb:bb:3f:77:fe:f0:4c:6f:e7:e8:6f: 95:2b:1d:99:56:af:26:4d:9b:07:d1:6a:42:5d:d9:d9:5d:1e: 16:a6:a9:b9:30:10:1f:fc:bb:c3:a6:48:8d:ad:41:4f:49:19: ea:5d:3e:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjYwMzI0MTg0NTUzWhcNMjYwMzMxMTg0NTUzWjAYMRYwFAYD VQQDEw02OWMyZGJlMi1iZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySAKEIhk/WNL0tQdn86Rzw43dmzy2vUpu/M0Hmi7HHxATNsXoHkMduZ4aCZP FKFIUBTu7cffgWXVTDln2UOE6vVPr+RJbiYyznlTjSovFkgt6F15QmdwX6486TRA 9XH3km8zw5U4c+w/jv3TJJLenZv7gy+d0EhvXgRxSgbs7xKummZ/AAfw7S3IuHOk zlgI1oObMOG4TxfGX4imFVYBL5P3uJ768ZW1R2Dd4eUpQVooqx5pCUWTzwHwtepa ID/rfbaJiskJlft3bR/uu0D3cF7LH24YywEGKU9P6n/MxGp5BF6ufkre8JWTHDnO k3TozYsc3TN4AaegdmjyMM/XowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNTxSGWa K5Vu6bTNDcTP45XNLnBxMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdK0vD1HLrFQYNaKXcPJQX1acTXG9Vht23VXalYws6eVDlnKfhwQWOE96/Hro P9xlv8C2mdjOAfAU9AERoBx+WSV4mcSGwUqAYNpFNyijFzzFJVcmsC8UKaWhsbIh yBRbFiRQvTNDju7uIs+pSDgVKbsc0ZgqB0ccUNrH8Q1wyO3/BAGu5susdNLlDvi5 Ib3Op6YRATsmp/keMAX917Vxn6qN7Gp6NGzqX5e/cSzWpepki5J9GH8hoSDe1JMK 4lxD0MqpgOI8Mw5wDIqaqbu7P3f+8Exv5+hvlSsdmVavJk2bB9FqQl3Z2V0eFqap uTAQH/y7w6ZIja1BT0kZ6l0+qw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:09 2026 by rpki-client