$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: NNyWExF5dpBg31JYnZ1MyDOaAoL6l1aUmRvJbAGA08c= Subject key identifier: 41:E7:94:79:E9:9F:91:9D:46:33:5E:5F:E4:15:88:D0:AD:56:FA:0C Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0C3C Signing time: Tue 24 Mar 2026 18:34:33 +0000 Manifest this update: Tue 24 Mar 2026 18:34:32 +0000 Manifest next update: Tue 31 Mar 2026 18:34:32 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: DdbSdzuvIkBumgeHNJZ6z7+sxEPghC6mZjoxWRJ0r/Q=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Mar 24 18:34:32 2026 GMT Not After : Mar 31 18:34:32 2026 GMT Subject: CN=69c2d939-e0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:3e:1e:32:c3:b6:87:f6:5d:b6:9e:35:5d: 58:b3:fd:63:33:42:da:86:da:ed:cc:9a:e1:36:0a: 9e:14:8d:e7:24:82:3c:d5:7a:ae:ba:d0:f8:dc:54: ae:d0:79:a2:6e:d4:85:fd:9b:1b:95:8a:19:3e:9e: 5c:cf:a3:a2:d4:1f:39:66:c5:9a:b5:76:87:e6:0f: b4:7d:f9:b5:73:30:63:e4:65:39:44:d0:e4:e2:e4: 21:55:4e:34:d6:5e:30:51:09:54:e3:39:f0:9b:56: 07:c6:33:91:fe:59:e4:98:7f:fe:af:f9:e1:d3:1a: 03:bf:fa:5e:9d:3c:99:46:2c:f5:13:23:61:0d:94: 16:0f:88:9a:5f:e4:07:8e:13:12:be:e6:9e:34:8d: 04:f9:18:8c:3f:00:03:6e:bc:f2:a2:41:71:44:e5: 50:87:04:77:18:7d:ca:30:1a:c9:ed:85:cd:41:0b: 69:5e:d4:3f:ff:d7:5c:e4:2b:a8:7a:b7:2e:fb:93: 8d:3c:ef:91:e0:91:6c:c1:60:7c:b0:8b:bb:c2:58: db:0e:57:8b:eb:5f:b0:a4:4d:53:9e:59:37:f1:4b: 8b:f8:fb:cb:2d:e4:8b:b0:a6:02:02:f4:56:c4:45: f0:c4:9f:27:de:67:90:3a:35:a5:47:d7:bb:0b:30: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:94:79:E9:9F:91:9D:46:33:5E:5F:E4:15:88:D0:AD:56:FA:0C X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c2:e3:55:83:70:75:6e:fc:05:20:bf:93:37:0b:4d:bc:8c: 56:e9:66:d9:29:7d:7f:1d:a2:24:99:d1:bc:0c:3b:de:a6:7c: cc:eb:66:4c:a3:7f:22:15:43:99:c3:de:b4:e4:dd:e2:2f:ef: cd:50:45:07:b9:84:c0:28:03:56:47:a3:7d:91:a1:10:db:25: be:42:1d:7f:45:bd:44:2b:d4:f7:f4:60:44:20:b5:b3:cd:13: 0a:6e:d9:8d:72:f7:5c:45:b3:cc:49:8c:6c:ae:4e:ef:c1:9d: 39:68:e1:ba:2a:d7:25:f2:46:4d:95:b0:05:b7:f2:64:e3:15: e0:db:0e:fa:e8:18:e0:f5:6f:5e:c8:1e:4b:21:a2:5d:06:eb: 15:68:18:f2:76:89:f9:24:0e:54:09:45:af:21:5d:be:99:02: 28:b9:36:d8:79:81:1b:6c:2b:04:7e:12:50:17:f5:15:24:d2: 37:27:64:02:50:6a:27:46:3e:58:54:9e:4d:39:01:f0:c1:e8: 33:13:23:eb:85:5e:b3:9f:ff:60:f2:95:3a:fc:fb:71:97:14: 2c:e3:10:ab:b4:1c:7b:24:a1:b4:39:bb:94:63:bb:41:0b:2e: c0:85:b1:b1:7a:31:15:84:3b:4e:87:b1:70:18:cb:e9:a7:94: 64:4c:ba:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjYwMzI0MTgzNDMyWhcNMjYwMzMxMTgzNDMyWjAYMRYwFAYD VQQDEw02OWMyZDkzOS1lMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8A+HjLDtof2XbaeNV1Ys/1jM0LahtrtzJrhNgqeFI3nJII81XquutD43FSu 0HmibtSF/ZsblYoZPp5cz6Oi1B85ZsWatXaH5g+0ffm1czBj5GU5RNDk4uQhVU40 1l4wUQlU4znwm1YHxjOR/lnkmH/+r/nh0xoDv/penTyZRiz1EyNhDZQWD4iaX+QH jhMSvuaeNI0E+RiMPwADbrzyokFxROVQhwR3GH3KMBrJ7YXNQQtpXtQ//9dc5Cuo ercu+5ONPO+R4JFswWB8sIu7wljbDleL61+wpE1Tnlk38UuL+PvLLeSLsKYCAvRW xEXwxJ8n3meQOjWlR9e7CzB6kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHnlHnp n5GdRjNeX+QViNCtVvoMMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhcLjVYNwdW78BSC/kzcLTbyMVulm2Sl9fx2iJJnRvAw73qZ8zOtmTKN/IhVD mcPetOTd4i/vzVBFB7mEwCgDVkejfZGhENslvkIdf0W9RCvU9/RgRCC1s80TCm7Z jXL3XEWzzEmMbK5O78GdOWjhuirXJfJGTZWwBbfyZOMV4NsO+ugY4PVvXsgeSyGi XQbrFWgY8naJ+SQOVAlFryFdvpkCKLk22HmBG2wrBH4SUBf1FSTSNydkAlBqJ0Y+ WFSeTTkB8MHoMxMj64Ves5//YPKVOvz7cZcULOMQq7QceyShtDm7lGO7QQsuwIWx sXoxFYQ7ToexcBjL6aeUZEy6sQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:42 2026 by rpki-client