$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: f4cvpKh3rHCK9hWSnGjvpXXdCSaLycyaR7IIAfUCIGw= Subject key identifier: 22:99:A0:B4:0B:D2:DE:19:3E:4B:92:BF:A5:81:EE:BF:F7:9A:66:34 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: A3 Signing time: Wed 25 Mar 2026 06:51:16 +0000 Manifest this update: Wed 25 Mar 2026 06:51:15 +0000 Manifest next update: Wed 01 Apr 2026 06:51:15 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: Kf22MvRhWUZzhnYWlynIWP51boxXq5AwDERozBicYBY=) 2: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 3: 89526C82036711F18D03459D2E3D8C67.roa (hash: g3Z/lb3zPni8T0QaNGFB/2aCLxhD3wsFvotEa6Pu0yk=) 4: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: pxyEkBwPYXvAD+2QjsKqnPjRJ2vw6CaCkMBO2KcYyvE=) 5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 6: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Mar 25 06:51:15 2026 GMT Not After : Apr 1 06:51:15 2026 GMT Subject: CN=69c385e4-fc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:fb:0d:3d:26:27:de:36:e9:3d:4b:9b:0d: 2c:08:3e:f3:a3:33:80:82:ea:ae:ea:c4:e4:9c:6f: fe:81:b1:64:6b:08:60:d1:bb:1d:5b:ff:65:af:64: 82:64:8e:ae:3d:69:db:8f:de:40:bb:fe:75:aa:90: 2e:19:bd:0f:7f:ab:5d:39:c0:81:21:cf:5d:26:57: 43:c3:63:a6:61:ba:56:c7:5f:ae:c5:3b:47:6c:1c: 16:cb:3f:1d:9a:bf:7a:14:5c:5d:fe:6e:7c:28:ed: 7b:15:55:aa:1c:37:20:79:eb:c4:41:61:be:0a:e2: 2e:ca:74:71:85:14:b6:75:b7:91:aa:c2:f6:52:bb: 53:a7:ee:37:83:a3:04:a6:34:66:5b:c2:0e:b5:10: 9e:15:ae:5b:e4:8f:a7:d6:66:39:ab:6b:f1:50:88: be:03:47:6a:63:c4:d4:b5:9b:7a:ef:a1:e7:f9:c1: 82:b6:15:95:9d:53:f7:01:c6:fe:46:98:fd:4d:13: 40:d4:d8:a0:7e:16:e8:90:75:7c:83:bb:4b:eb:4c: a3:a3:11:55:bc:1a:38:6f:9d:66:7e:2a:3c:e5:0d: 85:2a:73:c3:ff:76:38:6e:4d:3f:e9:8e:f7:c1:cf: 93:e7:88:98:d1:99:fd:f4:ba:46:b8:74:c0:11:14: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:99:A0:B4:0B:D2:DE:19:3E:4B:92:BF:A5:81:EE:BF:F7:9A:66:34 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:55:78:45:94:a8:e6:83:1d:bf:d3:ab:c4:7f:8f:2b:d1:3d: 23:bc:1b:fb:2f:ed:ac:a3:d3:7d:94:b8:22:c7:08:df:be:b1: e1:52:bb:0e:fe:01:36:81:a3:8e:42:1d:7e:4b:ee:d9:82:d1: 16:4b:1d:5b:c0:24:22:04:40:3f:e3:e2:01:4a:bf:3e:75:64: 42:a9:89:18:45:47:e3:2c:90:1c:a4:61:96:75:32:4e:7d:a9: c6:78:cf:54:bf:17:90:c6:84:fb:39:03:a2:4c:cb:05:fb:40: 4e:f2:fe:c9:4a:cb:54:53:ef:11:f2:24:10:d7:f8:2a:2a:50: 37:92:79:e0:2c:c3:5f:f7:6d:ff:6c:fb:80:4e:34:ee:b8:e1: 45:e2:27:2a:c5:bb:18:dd:7e:4a:9a:2d:ba:15:db:02:28:bd: 3e:3c:d8:0f:e6:ff:7e:d8:eb:07:e2:56:53:1c:68:81:4a:b4: cd:a8:79:6e:e7:38:12:9a:d1:18:e8:78:36:32:bc:fe:e7:d2: e0:42:a9:f0:07:9a:8e:16:1e:71:16:a0:08:0f:41:d1:00:b0: 0c:ce:0e:a9:f1:2c:2f:44:4c:11:b4:90:02:16:a7:c8:af:83: 1b:b6:3e:1f:3a:78:2e:04:16:80:07:33:7c:44:f9:74:c7:79: 59:65:f9:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwMzI1MDY1MTE1WhcNMjYwNDAxMDY1MTE1WjAYMRYwFAYD VQQDEw02OWMzODVlNC1mYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwP7DT0mJ9426T1Lmw0sCD7zozOAguqu6sTknG/+gbFkawhg0bsdW/9lr2SC ZI6uPWnbj95Au/51qpAuGb0Pf6tdOcCBIc9dJldDw2OmYbpWx1+uxTtHbBwWyz8d mr96FFxd/m58KO17FVWqHDcgeevEQWG+CuIuynRxhRS2dbeRqsL2UrtTp+43g6ME pjRmW8IOtRCeFa5b5I+n1mY5q2vxUIi+A0dqY8TUtZt676Hn+cGCthWVnVP3Acb+ Rpj9TRNA1NigfhbokHV8g7tL60yjoxFVvBo4b51mfio85Q2FKnPD/3Y4bk0/6Y73 wc+T54iY0Zn99LpGuHTAERRQXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKZoLQL 0t4ZPkuSv6WB7r/3mmY0MB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO1V4RZSo5oMdv9OrxH+PK9E9I7wb+y/trKPTfZS4IscI376x4VK7Dv4BNoGj jkIdfkvu2YLRFksdW8AkIgRAP+PiAUq/PnVkQqmJGEVH4yyQHKRhlnUyTn2pxnjP VL8XkMaE+zkDokzLBftATvL+yUrLVFPvEfIkENf4KipQN5J54CzDX/dt/2z7gE40 7rjhReInKsW7GN1+SpotuhXbAii9PjzYD+b/ftjrB+JWUxxogUq0zah5buc4EprR GOh4NjK8/ufS4EKp8AeajhYecRagCA9B0QCwDM4OqfEsL0RMEbSQAhanyK+DG7Y+ Hzp4LgQWgAczfET5dMd5WWX5wA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:32 2026 by rpki-client