$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: ChX3cu8SjgA4yqJC/xQnLoP4k3dXLGELUOVdO/7DVoA= Subject key identifier: 22:2F:25:76:4A:80:7E:54:53:ED:78:FD:15:03:D5:FA:FA:4A:A0:40 Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0ED1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0EC4 Signing time: Tue 24 Mar 2026 17:33:05 +0000 Manifest this update: Tue 24 Mar 2026 17:33:04 +0000 Manifest next update: Tue 31 Mar 2026 17:33:04 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: rOH7gsST2vfNiFHUQZG5XrUcjXv6b9QFTNDhv1c7EWs=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: JeKAJdqbPEiYDYAJ1XzRDXMOefEFjZmJoWdofrNUX9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3793 (0xed1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Mar 24 17:33:04 2026 GMT Not After : Mar 31 17:33:04 2026 GMT Subject: CN=69c2cad0-6dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:9b:59:e0:df:a3:aa:93:a0:98:e4:5c:f6: 68:f0:4c:c4:d7:68:15:97:8a:d4:9b:b4:61:44:73: b2:7e:4e:82:57:27:43:fa:b8:d5:c2:cd:38:75:c9: 3b:99:65:cb:fc:29:f2:1e:a9:9d:79:b5:40:3d:8c: 95:03:87:1e:66:e3:09:fc:7d:79:e2:37:70:d8:2b: 2d:6b:fe:4b:c2:13:c5:f3:73:8c:1e:11:67:7a:25: 8f:6b:8a:ce:a4:eb:ec:7f:60:7a:d1:d3:97:3d:09: de:c9:7c:b4:b8:b4:9b:b2:85:54:e9:05:a6:18:d0: 6c:1f:e5:c8:5c:4a:0e:fc:88:32:18:69:ac:3e:f3: 91:7d:dd:14:34:5d:69:66:a3:81:fd:df:a7:b8:b9: d7:55:d0:6b:fe:65:81:ef:27:44:3a:23:ac:2d:e3: 18:6a:ae:96:a1:90:ba:f8:a4:72:a4:33:ac:d5:e4: e0:f4:a1:91:50:2e:75:4a:63:4b:cf:ea:e8:16:7b: 62:c1:fb:b5:b7:40:10:53:ac:0b:e0:0b:01:8f:09: fb:10:6f:f2:0d:b5:0c:a0:fd:35:72:2b:62:ef:2f: 8e:71:18:de:85:df:d4:85:26:67:ad:42:7a:b9:36: 0c:d3:93:f3:90:68:c5:35:01:b3:6d:a7:da:e7:4a: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2F:25:76:4A:80:7E:54:53:ED:78:FD:15:03:D5:FA:FA:4A:A0:40 X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:32:25:65:e6:0c:70:b2:d5:18:61:f6:c6:53:07:d3:4a:69: ee:78:0c:d0:2d:eb:35:95:44:ff:63:74:0a:e7:fa:43:02:18: 68:e2:15:09:e2:b9:49:56:32:3a:be:eb:a6:60:03:7e:85:16: 4e:b6:bd:a2:a5:d2:43:03:7c:97:6f:12:c8:cc:f5:95:e5:60: 4f:32:65:be:42:2d:b0:87:00:ed:ae:0f:d4:58:78:3b:d3:1b: 59:98:c9:c9:ee:4d:88:22:f8:83:15:7b:4d:ef:27:7b:58:76: 07:2d:1b:37:c7:ed:26:bb:f8:88:20:5c:a6:cc:83:ca:b9:11: dd:08:14:b3:37:11:b4:f4:50:5c:21:09:e8:d2:8e:99:6d:fb: f0:6c:13:fc:fb:f5:47:de:57:79:5e:f9:f0:e3:a0:6a:78:15: 48:3d:1f:e6:9a:49:a1:4f:64:dd:08:aa:d2:b3:3b:8d:b3:26: 93:e7:50:bd:df:5a:7b:d5:a7:04:6a:31:2f:6a:a6:fe:39:a9: 98:44:bb:be:7a:63:59:9d:19:f4:b3:bf:1b:f6:0b:44:3e:9d: 8c:64:f4:5c:f2:51:85:ee:64:88:18:14:af:ca:13:f8:b2:ae: a4:f5:c5:ab:03:fd:ac:db:af:d3:4d:e2:06:21:95:6f:d6:83: 44:90:ff:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjYwMzI0MTczMzA0WhcNMjYwMzMxMTczMzA0WjAYMRYwFAYD VQQDEw02OWMyY2FkMC02ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bibWeDfo6qToJjkXPZo8EzE12gVl4rUm7RhRHOyfk6CVydD+rjVws04dck7 mWXL/CnyHqmdebVAPYyVA4ceZuMJ/H154jdw2Csta/5LwhPF83OMHhFneiWPa4rO pOvsf2B60dOXPQneyXy0uLSbsoVU6QWmGNBsH+XIXEoO/IgyGGmsPvORfd0UNF1p ZqOB/d+nuLnXVdBr/mWB7ydEOiOsLeMYaq6WoZC6+KRypDOs1eTg9KGRUC51SmNL z+roFntiwfu1t0AQU6wL4AsBjwn7EG/yDbUMoP01citi7y+OcRjehd/UhSZnrUJ6 uTYM05PzkGjFNQGzbafa50qdqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIvJXZK gH5UU+14/RUD1fr6SqBAMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDIlZeYMcLLVGGH2xlMH00pp7ngM0C3rNZVE/2N0Cuf6QwIYaOIVCeK5SVYy Or7rpmADfoUWTra9oqXSQwN8l28SyMz1leVgTzJlvkItsIcA7a4P1Fh4O9MbWZjJ ye5NiCL4gxV7Te8ne1h2By0bN8ftJrv4iCBcpsyDyrkR3QgUszcRtPRQXCEJ6NKO mW378GwT/Pv1R95XeV758OOgangVSD0f5ppJoU9k3Qiq0rM7jbMmk+dQvd9ae9Wn BGoxL2qm/jmpmES7vnpjWZ0Z9LO/G/YLRD6djGT0XPJRhe5kiBgUr8oT+LKupPXF qwP9rNuv003iBiGVb9aDRJD/1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:47 2026 by rpki-client