$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json) Hash identifier: k1/AJCACx0xsaXQliHbf47H4BxFBDIOFw72Ekb6EBbM= Subject key identifier: 81:24:09:E8:00:86:51:45:9D:54:0C:A7:28:E6:69:97:51:E2:A4:D0 Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft Manifest number: 0150 Signing time: Wed 25 Mar 2026 04:21:05 +0000 Manifest this update: Wed 25 Mar 2026 04:21:04 +0000 Manifest next update: Wed 01 Apr 2026 04:21:04 +0000 Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: 0lw7gqdrTYwQuWk7EJ/j294ZjAWPI62T6VG4ZHt7EIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Validity Not Before: Mar 25 04:21:04 2026 GMT Not After : Apr 1 04:21:04 2026 GMT Subject: CN=69c362b0-065b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:89:dc:7d:e0:7d:87:ba:6e:0d:64:0d:d9: 69:e5:61:b4:43:bc:b4:cc:52:ed:78:3c:8e:91:88: aa:78:50:6e:a5:e1:7d:b2:11:e3:2b:0f:a3:0a:2f: 89:d2:f6:be:a7:1d:28:af:e9:b9:c3:5b:90:85:70: 6a:75:96:2b:6e:a9:bc:cf:fa:b0:1f:bd:50:86:45: dd:95:5f:a9:99:49:d1:8d:01:3d:bd:de:0f:28:54: 05:51:71:ec:ec:17:9e:13:53:11:85:32:72:f4:88: 91:13:5e:62:0f:cc:2f:0d:d9:ed:78:65:18:45:29: 26:d9:4e:95:81:d7:54:c6:dd:23:20:44:a0:22:a3: 35:b4:09:7f:79:64:78:63:96:fa:cc:93:94:63:54: 1b:49:fc:48:25:55:a2:ff:53:83:d3:73:7b:a9:9d: 07:80:e1:d5:1d:40:7b:49:80:8c:d4:6b:d9:fc:fe: dd:47:1c:cc:52:34:99:8b:c5:67:52:8f:6d:14:57: ad:69:00:29:69:f1:30:29:83:0f:b6:4e:61:9c:65: f1:d0:24:f6:49:c9:99:d5:9a:59:17:7e:bc:b4:20: d8:73:0c:dd:e8:37:fb:21:28:45:14:93:f8:66:8a: 80:78:ad:2c:ce:d2:4b:c4:ec:a1:b5:fd:31:72:7d: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:09:E8:00:86:51:45:9D:54:0C:A7:28:E6:69:97:51:E2:A4:D0 X509v3 Authority Key Identifier: keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:04:20:12:0a:06:e7:3d:78:0b:41:8d:0d:be:3d:c0:dd:dd: 73:26:a3:61:cc:dd:50:20:cd:19:e3:0c:3e:44:87:05:05:61: 25:89:c6:3a:f6:30:be:81:4e:1a:8c:34:37:e9:e4:31:d4:7c: 86:73:d7:89:c1:90:a5:a4:11:9b:08:c6:1c:46:7b:04:9f:06: 2d:a9:b5:2d:51:77:8c:04:b4:3b:ab:ae:42:2e:76:81:a1:53: 6a:39:72:0a:34:4f:79:66:4e:bb:64:05:24:fc:bd:60:44:99: 7a:9e:8c:8b:67:af:c5:81:e5:df:cb:92:96:c6:d4:71:76:04: a5:2c:62:01:c1:82:d4:6c:41:2a:e5:d2:73:8c:87:27:56:17: b9:51:6d:2a:f4:d5:01:f1:ef:55:9d:e2:a4:70:9e:c7:8a:03: df:74:b0:db:99:f9:a4:f1:62:78:3e:89:8e:46:0e:64:35:56: d7:09:04:16:7d:ad:d1:d4:16:3c:de:71:dc:fd:c0:e8:ab:ac: 9a:a8:9f:00:38:19:33:67:35:c0:57:e6:20:50:af:04:0e:2c: bd:5c:e5:34:5e:42:53:5d:d1:be:31:61:92:ec:cf:48:d3:23: f4:6e:ec:c7:90:e9:e1:9d:5a:bd:d6:d6:45:45:29:3a:40:24: 31:65:3f:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD QkVGMkRGMjIwHhcNMjYwMzI1MDQyMTA0WhcNMjYwNDAxMDQyMTA0WjAYMRYwFAYD VQQDEw02OWMzNjJiMC0wNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlqJ3H3gfYe6bg1kDdlp5WG0Q7y0zFLteDyOkYiqeFBupeF9shHjKw+jCi+J 0va+px0or+m5w1uQhXBqdZYrbqm8z/qwH71QhkXdlV+pmUnRjQE9vd4PKFQFUXHs 7BeeE1MRhTJy9IiRE15iD8wvDdnteGUYRSkm2U6VgddUxt0jIESgIqM1tAl/eWR4 Y5b6zJOUY1QbSfxIJVWi/1OD03N7qZ0HgOHVHUB7SYCM1GvZ/P7dRxzMUjSZi8Vn Uo9tFFetaQApafEwKYMPtk5hnGXx0CT2ScmZ1ZpZF368tCDYcwzd6Df7IShFFJP4 ZoqAeK0sztJLxOyhtf0xcn2KdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEkCegA hlFFnVQMpyjmaZdR4qTQMB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4 ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkM4NS8yODcwN0NCRTI4ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0 a3RqRm5SbUVaYkhMN3kzeUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACAQgEgoG5z14C0GNDb49wN3dcyajYczdUCDNGeMMPkSHBQVhJYnGOvYwvoFO Gow0N+nkMdR8hnPXicGQpaQRmwjGHEZ7BJ8GLam1LVF3jAS0O6uuQi52gaFTajly CjRPeWZOu2QFJPy9YESZep6Mi2evxYHl38uSlsbUcXYEpSxiAcGC1GxBKuXSc4yH J1YXuVFtKvTVAfHvVZ3ipHCex4oD33Sw25n5pPFieD6JjkYOZDVW1wkEFn2t0dQW PN5x3P3A6KusmqifADgZM2c1wFfmIFCvBA4svVzlNF5CU13RvjFhkuzPSNMj9G7s x5Dp4Z1avdbWRUUpOkAkMWU/QQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:36:38 2026 by rpki-client