$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: QesLLIyF3ks8nalQOCzer/FgtuLM8Ysw6Pj+9mWMoPM= Subject key identifier: DD:10:37:45:EE:79:81:21:C7:3F:5A:15:E0:BF:4A:91:C6:E0:EB:37 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0462 Signing time: Tue 24 Mar 2026 23:49:50 +0000 Manifest this update: Tue 24 Mar 2026 23:49:50 +0000 Manifest next update: Tue 31 Mar 2026 23:49:50 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: Ak0iG/IPZHIqt22bQlXPtYcRSpuVfc9/YnASwo43p6w=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Mar 24 23:49:50 2026 GMT Not After : Mar 31 23:49:50 2026 GMT Subject: CN=69c3231e-48df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:32:87:c3:76:c8:74:a5:2b:c4:35:0a:67:13: cf:30:f7:d4:47:8e:7f:ab:98:96:57:27:f5:4c:21: ae:56:08:51:36:d1:0d:23:d3:2e:88:5f:bf:77:41: 11:95:0e:2c:fb:be:44:8e:a6:b1:ef:ba:f1:c6:34: 24:c7:38:0f:87:80:42:45:d0:75:de:b2:34:a3:a8: 77:30:9e:d7:eb:a5:03:8e:aa:85:09:95:f8:42:47: c5:df:15:0a:25:72:13:12:89:8e:e1:ab:19:e6:3d: da:25:c5:40:d9:f6:db:6d:c9:fc:f7:b6:9d:9b:87: 67:1c:13:e9:0d:a2:5f:55:82:e7:8d:df:cd:88:e8: 56:06:1d:90:6b:c0:0b:f8:43:7f:e2:58:85:32:4f: e7:10:7c:cb:63:5d:b7:52:e4:77:94:8e:57:97:47: b3:52:9d:fa:a0:c3:09:2b:a6:3f:40:9e:c7:66:78: 7b:a2:5f:0a:9b:bc:e5:26:d6:4f:5a:f9:8d:aa:68: 96:9e:d7:d2:62:85:31:35:d5:25:8e:7b:3d:2d:68: 73:95:f0:d2:21:21:93:ca:67:ce:41:5b:f5:11:2d: e8:bd:a3:a1:aa:16:b8:c9:05:42:43:b1:bb:52:69: a2:c1:e2:50:73:74:c0:ba:ee:81:1f:28:df:3f:44: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:10:37:45:EE:79:81:21:C7:3F:5A:15:E0:BF:4A:91:C6:E0:EB:37 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0d:0b:ae:dd:a4:ed:2a:b0:29:c8:22:3b:79:8f:d4:9d:d8: 04:2f:12:f4:22:30:29:f0:ac:e3:43:ef:34:59:1d:04:8d:dd: c7:19:58:cf:9f:17:26:2d:41:96:81:52:6c:dd:e6:03:65:45: 8b:72:4a:22:c5:07:78:00:a7:91:81:e1:d0:14:98:d4:f3:fc: ce:3e:a3:7a:ac:d8:82:df:14:92:c4:3a:6c:e3:1c:c0:d3:09: 6a:60:9a:f0:57:7a:ee:9d:bf:58:a2:9b:49:81:8e:d3:f8:e0: d5:4d:45:22:7a:5f:9e:6c:1e:b5:a0:75:d7:26:6c:1f:e1:59: 39:d6:2b:40:92:ae:dc:cd:42:63:7e:20:de:7c:e3:47:67:9c: 74:d1:5a:40:c2:a5:74:e5:dd:91:a2:89:0b:18:b4:d2:4c:8a: 6b:b6:d4:dc:55:f4:9f:f7:9f:13:d8:78:50:43:7f:ef:85:d7: 41:14:44:cb:41:b8:3a:88:cd:ca:10:19:16:a7:38:34:b7:c9: 63:be:f7:3d:a6:a6:89:b3:a3:81:ac:a2:98:a4:52:d0:2a:09: 5b:61:3d:4c:0b:16:e7:a4:88:3b:d3:de:24:5d:bb:39:6b:30: 52:5d:ce:ad:ec:2b:69:15:22:ca:d0:d9:03:df:ba:4a:9f:fc: 0e:4c:8a:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwMzI0MjM0OTUwWhcNMjYwMzMxMjM0OTUwWjAYMRYwFAYD VQQDEw02OWMzMjMxZS00OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zKHw3bIdKUrxDUKZxPPMPfUR45/q5iWVyf1TCGuVghRNtENI9MuiF+/d0ER lQ4s+75Ejqax77rxxjQkxzgPh4BCRdB13rI0o6h3MJ7X66UDjqqFCZX4QkfF3xUK JXITEomO4asZ5j3aJcVA2fbbbcn897adm4dnHBPpDaJfVYLnjd/NiOhWBh2Qa8AL +EN/4liFMk/nEHzLY123UuR3lI5Xl0ezUp36oMMJK6Y/QJ7HZnh7ol8Km7zlJtZP WvmNqmiWntfSYoUxNdUljns9LWhzlfDSISGTymfOQVv1ES3ovaOhqha4yQVCQ7G7 UmmiweJQc3TAuu6BHyjfP0RN+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0QN0Xu eYEhxz9aFeC/SpHG4Os3MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKw0Lrt2k7SqwKcgiO3mP1J3YBC8S9CIwKfCs40PvNFkdBI3dxxlYz58XJi1B loFSbN3mA2VFi3JKIsUHeACnkYHh0BSY1PP8zj6jeqzYgt8UksQ6bOMcwNMJamCa 8Fd67p2/WKKbSYGO0/jg1U1FInpfnmwetaB11yZsH+FZOdYrQJKu3M1CY34g3nzj R2ecdNFaQMKldOXdkaKJCxi00kyKa7bU3FX0n/efE9h4UEN/74XXQRREy0G4OojN yhAZFqc4NLfJY773PaamibOjgayimKRS0CoJW2E9TAsW56SIO9PeJF27OWswUl3O rewraRUiytDZA9+6Sp/8DkyKDA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:48:03 2026 by rpki-client