$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json) Hash identifier: MMVsmD67cMlxBMhOo0AfqVIbQwDbAF/S75ggzBRaW9c= Subject key identifier: AC:14:25:A2:E3:62:BE:F3:F4:FA:AA:E7:8E:71:78:00:B6:BA:2F:AB Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft Manifest number: 06EC Signing time: Tue 24 Mar 2026 14:47:32 +0000 Manifest this update: Tue 24 Mar 2026 14:47:31 +0000 Manifest next update: Tue 31 Mar 2026 14:47:31 +0000 Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: 4Oqw9V2L3ZJUGt19xyO+E7OX9FBNcnSKJTQEqWklbio=) 2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: 7lIGItgwakyIm1ogfbfmJas4qk4ZwY4pDMQ8JsNuNZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Validity Not Before: Mar 24 14:47:31 2026 GMT Not After : Mar 31 14:47:31 2026 GMT Subject: CN=69c2a404-2670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:6b:9b:85:45:de:ab:90:54:49:bb:8e:bb: 66:2e:54:b1:69:6c:c0:ba:fd:c6:10:61:78:fe:37: 8f:e5:c6:20:46:59:ff:55:6c:1c:cf:e0:3b:c6:e9: f8:73:f8:48:36:e3:1c:11:3c:c6:23:13:bf:18:21: 3b:db:72:eb:5b:a2:d0:a6:9c:20:d5:3b:3f:17:fe: d7:33:1f:b3:ca:ef:a1:68:02:11:3c:78:cc:47:4f: 4b:0f:59:ff:5a:20:6d:c7:a7:ed:4f:67:67:01:21: a4:37:82:ae:e1:52:3c:de:a0:e4:05:d8:ab:2f:ea: fb:a5:6e:6a:4e:09:5e:67:68:6a:12:c6:09:8a:7c: bb:d6:b7:43:6b:21:af:4e:7b:9a:ed:d7:df:dc:ee: 27:af:5e:49:d1:21:2d:45:52:01:ec:e1:62:93:91: d8:08:72:31:77:06:b3:0c:56:dc:a6:e9:24:60:8d: ff:d7:52:c2:4a:85:f2:45:3c:bd:bd:29:b3:0d:d8: 9e:f9:52:78:34:f6:25:fb:16:ef:c2:fa:93:2b:33: 85:cc:84:b8:71:6e:1b:0e:31:af:36:f3:43:32:19: 75:6b:bf:bd:3b:c7:d0:2a:b5:8f:bb:af:e9:fe:81: b6:e5:ec:0a:2c:aa:ed:0d:93:e3:16:b8:00:34:a0: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:25:A2:E3:62:BE:F3:F4:FA:AA:E7:8E:71:78:00:B6:BA:2F:AB X509v3 Authority Key Identifier: keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:20:50:77:2b:09:a5:57:3f:f4:e3:f4:a0:5d:f6:b7:8d:3b: 25:b7:83:fa:f8:6b:a5:55:e5:29:49:5d:60:03:bc:18:12:1f: e6:e7:df:f2:f4:77:bc:98:9a:87:bc:a6:95:fa:3b:26:ad:47: d3:34:73:74:55:1e:cf:94:cf:7b:bf:f0:97:90:22:84:a9:1b: 13:76:2b:9a:8c:c5:c5:56:01:ee:b6:eb:53:0f:05:00:ad:14: 7e:dc:51:02:80:6b:5d:cc:84:54:36:cd:af:8a:7d:67:f9:a7: 9c:6a:ae:65:c0:af:73:7c:f6:99:28:8d:99:3e:1a:b7:49:da: 4b:64:b9:6d:60:c9:7e:a9:01:a0:25:43:dc:4b:dc:ed:79:d0: 94:53:1f:1f:bb:6a:8c:26:30:1b:e8:51:29:70:d8:bf:8f:6b: 1a:52:b7:43:60:f7:72:98:c9:c6:31:4f:7a:ec:a0:59:65:e9: 16:e6:e9:91:2f:f1:c2:58:e6:48:9d:79:00:08:71:6c:fc:d2: 17:f1:a5:60:00:61:4f:9f:6d:ea:2d:aa:ae:be:06:30:57:0a: fe:45:9b:91:56:66:56:f8:5f:b6:aa:ea:5b:f9:d1:8e:04:a8: e5:78:27:2e:d5:81:89:34:0d:4b:ea:cb:34:d0:e0:3f:7e:37: be:d8:88:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4 MUIxRDhERkQwHhcNMjYwMzI0MTQ0NzMxWhcNMjYwMzMxMTQ0NzMxWjAYMRYwFAYD VQQDEw02OWMyYTQwNC0yNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouNrm4VF3quQVEm7jrtmLlSxaWzAuv3GEGF4/jeP5cYgRln/VWwcz+A7xun4 c/hINuMcETzGIxO/GCE723LrW6LQppwg1Ts/F/7XMx+zyu+haAIRPHjMR09LD1n/ WiBtx6ftT2dnASGkN4Ku4VI83qDkBdirL+r7pW5qTgleZ2hqEsYJiny71rdDayGv Tnua7dff3O4nr15J0SEtRVIB7OFik5HYCHIxdwazDFbcpukkYI3/11LCSoXyRTy9 vSmzDdie+VJ4NPYl+xbvwvqTKzOFzIS4cW4bDjGvNvNDMhl1a7+9O8fQKrWPu6/p /oG25ewKLKrtDZPjFrgANKC6IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwUJaLj Yr7z9Pqq545xeAC2ui+rMB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDRFMC84MzQ1NzExNjhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldo NmlBcFpwbXVtU2lCc2RqZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmiBQdysJpVc/9OP0oF32t407JbeD+vhrpVXlKUldYAO8GBIf5uff8vR3vJia h7ymlfo7Jq1H0zRzdFUez5TPe7/wl5AihKkbE3YrmozFxVYB7rbrUw8FAK0UftxR AoBrXcyEVDbNr4p9Z/mnnGquZcCvc3z2mSiNmT4at0naS2S5bWDJfqkBoCVD3Evc 7XnQlFMfH7tqjCYwG+hRKXDYv49rGlK3Q2D3cpjJxjFPeuygWWXpFubpkS/xwljm SJ15AAhxbPzSF/GlYABhT59t6i2qrr4GMFcK/kWbkVZmVvhftqrqW/nRjgSo5Xgn LtWBiTQNS+rLNNDgP343vtiIew== -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:48 2026 by rpki-client