$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: N3cBIxJVoHfvMU6qKL1X5BqB5NuhafsficZhDimqVrk= Subject key identifier: 00:83:EE:0A:6A:4E:0A:BB:AE:24:1F:45:46:B6:B8:15:0F:21:0D:FF Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0B61 Signing time: Tue 24 Mar 2026 19:01:43 +0000 Manifest this update: Tue 24 Mar 2026 19:01:42 +0000 Manifest next update: Tue 31 Mar 2026 19:01:42 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: IBuFOb49qyxz4IHbr0q2s3/KoZyrVgiRJAZJ1X/VlrA=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: oxvZQxfI2lrclpcwuHvgZQ5erEVbaDSTdEtNZCqnaFM=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: FlilM/koVByJN7Uw72af4g42T01so31c53bUniW9lIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Mar 24 19:01:42 2026 GMT Not After : Mar 31 19:01:42 2026 GMT Subject: CN=69c2df96-6bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:47:28:52:c7:be:17:9c:fc:6c:b7:3e:42: ce:c1:f9:bf:f8:95:40:cd:2d:c8:bb:cc:12:08:23: 20:eb:78:5b:de:0f:f5:e0:b3:75:57:29:af:bf:ee: b4:b5:d0:79:ba:31:2f:fc:32:73:ff:92:b9:17:71: dd:a9:34:75:ca:1f:ef:a1:51:35:81:c2:a8:50:20: 2b:23:d2:cb:58:b9:5b:0e:d2:11:24:9d:b1:91:d0: 6b:43:8c:be:09:c7:71:a4:bf:1e:e4:be:3c:72:53: c9:af:2d:6d:61:7e:1c:5c:f6:fe:24:d9:16:8b:c4: c9:19:93:5b:04:ba:28:0b:59:d9:62:85:0e:69:9b: 2c:f8:56:c5:7f:7a:73:45:6c:56:a7:a3:d7:42:73: 59:49:51:72:6d:cb:35:59:9e:9b:68:80:ac:58:38: ec:73:e0:04:3a:70:df:6d:1d:e9:8f:35:00:30:e4: 1c:8c:e2:44:cf:8b:fd:9d:f6:b4:3c:11:76:e6:b7: 2e:01:34:e9:d3:f4:72:e6:41:e3:9c:b5:63:84:2a: a0:b7:67:b8:b2:c3:69:2c:11:9b:48:89:2c:22:0c: dc:52:08:d0:a3:de:7b:f3:1e:ca:51:68:ad:39:9c: b8:48:7d:f4:e8:b7:72:89:57:0a:67:6e:52:b7:aa: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:EE:0A:6A:4E:0A:BB:AE:24:1F:45:46:B6:B8:15:0F:21:0D:FF X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:71:94:cb:ed:26:2e:f8:18:c9:a9:d0:b2:d0:e9:90:5f:98: 5c:e4:46:f2:d3:a4:73:6b:18:f8:99:99:23:99:08:41:0c:93: 2d:65:e2:40:65:ed:8c:a4:7f:8c:fc:36:36:5b:ed:1f:1a:92: 22:60:de:fd:9a:4e:7b:6d:5a:a8:30:e1:6d:97:14:c6:6b:91: 4a:da:14:5d:21:e4:28:28:93:44:1d:0c:79:41:e1:9f:18:1b: 5e:71:3d:09:18:b9:67:7c:91:69:2d:39:97:83:f0:53:cc:9f: f5:c1:0b:03:d6:71:40:e4:b3:86:83:32:6d:e1:80:88:74:71: c7:e0:8d:cc:c7:30:c2:d7:82:98:9b:9f:74:b6:0c:1d:a1:ff: 80:74:c0:d5:53:08:bd:a6:84:66:43:dd:e6:4b:e0:22:af:f8: 31:46:17:52:55:a7:ad:28:fe:6d:4d:41:fe:63:e4:1d:f1:12: a3:71:d1:29:c8:6b:77:97:b6:61:54:79:1c:56:0b:57:e1:41: e7:9d:5c:4a:fc:d0:3f:67:ee:7a:9d:77:ea:96:85:e9:bc:11: 3a:69:d7:0a:45:f3:d7:64:51:06:1c:77:e4:14:c2:0a:79:6b: e3:b0:44:85:f7:3a:14:e8:a5:8f:53:33:ba:4d:ba:17:a1:a2: 59:f7:24:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjYwMzI0MTkwMTQyWhcNMjYwMzMxMTkwMTQyWjAYMRYwFAYD VQQDEw02OWMyZGY5Ni02YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiSdHKFLHvhec/Gy3PkLOwfm/+JVAzS3Iu8wSCCMg63hb3g/14LN1Vymvv+60 tdB5ujEv/DJz/5K5F3HdqTR1yh/voVE1gcKoUCArI9LLWLlbDtIRJJ2xkdBrQ4y+ CcdxpL8e5L48clPJry1tYX4cXPb+JNkWi8TJGZNbBLooC1nZYoUOaZss+FbFf3pz RWxWp6PXQnNZSVFybcs1WZ6baICsWDjsc+AEOnDfbR3pjzUAMOQcjOJEz4v9nfa0 PBF25rcuATTp0/Ry5kHjnLVjhCqgt2e4ssNpLBGbSIksIgzcUgjQo9578x7KUWit OZy4SH306LdyiVcKZ25St6ojAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACD7gpq Tgq7riQfRUa2uBUPIQ3/MB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX3GUy+0mLvgYyanQstDpkF+YXORG8tOkc2sY+JmZI5kIQQyTLWXiQGXtjKR/ jPw2NlvtHxqSImDe/ZpOe21aqDDhbZcUxmuRStoUXSHkKCiTRB0MeUHhnxgbXnE9 CRi5Z3yRaS05l4PwU8yf9cELA9ZxQOSzhoMybeGAiHRxx+CNzMcwwteCmJufdLYM HaH/gHTA1VMIvaaEZkPd5kvgIq/4MUYXUlWnrSj+bU1B/mPkHfESo3HRKchrd5e2 YVR5HFYLV+FB551cSvzQP2fuep136paF6bwROmnXCkXz12RRBhx35BTCCnlr47BE hfc6FOilj1Mzuk26F6GiWfckUA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:49 2026 by rpki-client