$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json) Hash identifier: rTX0RUsie3J5QLW2vLyrTgHv2a6GS4oXRx9+nXCLcjM= Subject key identifier: BA:72:55:12:D9:B3:0F:87:4D:DA:58:F6:EC:AD:CD:B9:7B:C8:79:85 Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft Manifest number: 26 Signing time: Wed 25 Mar 2026 07:59:48 +0000 Manifest this update: Wed 25 Mar 2026 07:59:48 +0000 Manifest next update: Wed 01 Apr 2026 07:59:48 +0000 Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: 6BBvVD9cM7omRedMbBM9f/IR0ZqLMAYDjNOH4OZs29Y=) 2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: Mar 25 07:59:48 2026 GMT Not After : Apr 1 07:59:48 2026 GMT Subject: CN=69c395f4-f6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:a0:89:00:b5:12:af:c2:b6:95:27:b6:98: d6:1c:63:ab:31:7d:60:c1:4c:e6:5c:dc:84:f3:da: c8:bc:e7:cc:41:34:37:1d:9b:b1:44:15:91:eb:b0: 76:bf:3d:c1:5b:b1:01:60:45:21:81:d2:bf:59:97: b4:d8:48:8d:eb:8d:c6:76:3c:2e:45:7b:9d:f8:83: 79:25:83:fc:48:e9:03:d2:d3:f3:bb:a2:7b:d7:ec: 52:d7:f7:77:93:fd:54:df:10:0d:b3:ee:ab:da:45: 38:79:13:4b:b4:90:53:7c:d8:0e:d5:2f:93:0d:62: 1b:9f:95:2c:63:25:10:46:e7:fa:52:8f:0b:06:ee: 5f:af:37:66:c5:b0:05:c5:6c:38:3c:f8:2d:99:55: 98:74:c1:4e:76:4c:9a:74:56:ef:b1:5b:fc:95:9b: 03:83:33:a6:b5:cd:9b:11:d8:32:4a:bf:a1:4f:01: 28:ca:0a:1b:d9:7a:75:d5:cf:cb:89:d3:b0:11:49: 94:a7:64:8a:32:f5:76:20:93:4a:14:6e:e1:58:95: 4e:83:75:46:e0:f3:f9:e2:17:ad:a7:40:c6:c9:42: 3a:44:8b:75:a6:a4:b2:df:8b:e8:e9:74:c6:01:de: 16:44:21:68:7b:4b:69:d6:66:25:7b:b8:3c:fd:5e: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:55:12:D9:B3:0F:87:4D:DA:58:F6:EC:AD:CD:B9:7B:C8:79:85 X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:a7:ab:d5:e8:42:7c:fa:ae:87:2b:f5:21:b2:66:67:22: fe:cb:7b:1b:1f:19:c7:f3:79:e0:19:39:5c:2a:20:f0:38:8a: b7:d2:f6:8e:69:83:98:f7:15:12:39:fe:bf:f6:f9:04:10:dd: 32:a9:6c:16:f7:08:32:09:61:74:51:99:1d:b9:65:df:51:1c: 30:32:2e:bc:ed:9e:b0:5d:8e:b1:dd:fa:31:55:9a:c3:85:01: 8b:77:82:4e:6a:11:6e:16:6d:32:b9:a6:b6:9c:1b:70:87:bf: eb:b8:d4:93:5c:4c:1e:44:d2:d9:b5:e8:cf:25:7c:23:4b:0c: 81:0c:5c:fd:4f:d0:ec:45:82:08:75:e1:37:dc:1f:6e:1b:7b: 07:72:d8:39:e7:20:f4:46:0f:f1:f4:09:c7:05:7c:1b:5c:ed: 87:a7:b4:f8:86:41:30:b8:55:b3:ff:de:ff:2f:76:ae:85:6e: ca:cc:cf:70:b7:9c:0d:13:8b:af:f6:1f:03:23:d3:1d:da:a7: 0d:e2:66:c2:cd:81:4e:0b:1e:c5:54:ff:69:f9:e8:c3:13:62: 8c:50:b2:b4:4d:c8:df:c4:cb:1a:bd:72:f7:b9:d1:df:e9:3f: f0:b9:62:b8:dd:c7:9b:d4:10:2c:c8:b1:77:b7:0c:71:09:c7: b8:3d:b8:87 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjAzMjUwNzU5NDhaFw0yNjA0MDEwNzU5NDhaMBgxFjAUBgNV BAMTDTY5YzM5NWY0LWY2ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCIW6CJALUSr8K2lSe2mNYcY6sxfWDBTOZc3ITz2si858xBNDcdm7FEFZHrsHa/ PcFbsQFgRSGB0r9Zl7TYSI3rjcZ2PC5Fe534g3klg/xI6QPS0/O7onvX7FLX93eT /VTfEA2z7qvaRTh5E0u0kFN82A7VL5MNYhuflSxjJRBG5/pSjwsG7l+vN2bFsAXF bDg8+C2ZVZh0wU52TJp0Vu+xW/yVmwODM6a1zZsR2DJKv6FPASjKChvZenXVz8uJ 07ARSZSnZIoy9XYgk0oUbuFYlU6DdUbg8/niF62nQMbJQjpEi3WmpLLfi+jpdMYB 3hZEIWh7S2nWZiV7uDz9XnSfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUunJVEtmz D4dN2lj27K3NuXvIeYUwHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QjA5L0YzMDJFNTM0RjRGRTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4 VWVLdzZ0V3BxdFBuQnZVWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4pKer1ehCfPquhyv1IbJmZyL+y3sbHxnH83ngGTlcKiDwOIq30vaOaYOY9xUS Of6/9vkEEN0yqWwW9wgyCWF0UZkduWXfURwwMi687Z6wXY6x3foxVZrDhQGLd4JO ahFuFm0yuaa2nBtwh7/ruNSTXEweRNLZtejPJXwjSwyBDFz9T9DsRYIIdeE33B9u G3sHctg55yD0Rg/x9AnHBXwbXO2Hp7T4hkEwuFWz/97/L3auhW7KzM9wt5wNE4uv 9h8DI9Md2qcN4mbCzYFOCx7FVP9p+ejDE2KMULK0TcjfxMsavXL3udHf6T/wuWK4 3ceb1BAsyLF3twxxCce4PbiH -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:08 2026 by rpki-client