$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: jK03gnFn4BnYh3VhSx4aSavLSbfVvVwBDMWFUHl02p4= Subject key identifier: 11:89:0E:F6:A8:E1:70:C5:3D:BA:CE:6F:21:4F:20:C1:A6:05:06:27 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0BC9 Signing time: Tue 24 Mar 2026 18:46:27 +0000 Manifest this update: Tue 24 Mar 2026 18:46:27 +0000 Manifest next update: Tue 31 Mar 2026 18:46:27 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: mJWTR5TRYXxcZQI8n5YEv3B2rwwCOwoFLIKfw7fz1KE=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Mar 24 18:46:27 2026 GMT Not After : Mar 31 18:46:27 2026 GMT Subject: CN=69c2dc03-f869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c8:6f:d4:4a:b7:f6:00:4a:8d:e2:2b:b6:c1: f7:26:72:80:48:05:19:e2:20:9a:9b:4e:90:e0:16: 18:84:ee:3e:74:ea:56:27:1f:e7:26:0a:cb:c1:e5: ee:4f:eb:0e:2c:aa:19:21:29:52:b5:73:75:66:c5: 6a:61:c8:d3:14:2f:12:32:0d:f5:77:51:a9:ad:13: d2:3f:6d:21:eb:9e:f7:88:c8:16:1f:7f:ed:1f:6e: db:3f:0c:e1:4c:8f:93:dd:f9:26:28:df:32:ac:ea: e6:53:5e:c1:93:d9:46:fa:ee:18:23:f3:73:d8:68: 1d:84:83:0c:c7:33:e0:1e:50:ab:87:7b:52:ea:51: 6f:c8:b9:95:b6:56:50:b1:1c:be:85:24:88:a9:ca: fb:be:52:57:70:1b:5f:73:09:6d:f7:80:df:5b:34: ca:63:5b:d2:28:67:4a:88:67:5d:37:39:2b:91:c1: 5f:a0:a4:e7:8a:a1:45:99:a7:66:a7:1d:35:40:63: 60:f5:21:c8:d7:b5:f1:da:69:91:ac:32:d2:47:6c: 4e:3c:b6:5a:e3:af:b6:e4:7e:29:f8:e3:9d:af:62: c1:45:1f:6c:c6:4f:bf:f8:49:a4:93:1d:43:f1:c5: 2e:54:00:5b:90:07:59:d2:11:80:2e:6e:99:57:5b: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:89:0E:F6:A8:E1:70:C5:3D:BA:CE:6F:21:4F:20:C1:A6:05:06:27 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6d:35:b9:04:0e:fe:fa:c2:bc:3f:d6:13:6b:e8:28:6e:1c: 51:ba:6e:37:0a:37:8d:11:29:71:06:3a:e0:34:fe:46:97:3f: ac:a5:83:3f:b9:ef:04:be:4d:92:a0:e9:44:6c:31:c1:3d:57: fb:2c:81:4e:b7:03:08:41:f8:d3:ec:43:14:0d:8c:71:6b:08: 27:3e:53:8c:2e:09:a6:f0:84:23:f2:49:87:ce:2b:fc:d8:71: dd:60:c8:f7:e2:dd:8c:b9:09:03:c0:e7:18:95:96:ea:cd:fd: 68:bd:ae:2a:36:4f:8d:b3:96:70:92:49:a1:f1:59:e9:5e:30: 15:bb:11:4d:01:c0:e7:ca:77:cf:e5:db:b2:5f:de:f8:b9:e8: d4:34:4f:d5:a8:9d:00:d5:04:db:a8:b2:0f:8d:ac:09:6b:d2: c1:0b:a0:f2:51:1a:71:6b:3a:a7:b5:08:92:55:21:34:48:05: 8e:de:48:dc:e6:d5:ec:38:93:6e:40:8e:cd:68:f6:13:f9:bb: aa:19:35:c6:98:4f:77:d9:3a:c1:cb:d7:bc:c6:fc:0d:fd:64: 6c:d1:c2:98:06:c4:9b:93:b3:12:cc:6b:49:2b:13:68:ee:b7: ce:2b:92:6e:55:d3:32:d0:ed:94:a9:c8:1c:9e:21:6b:7d:45: 6c:3e:e1:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjYwMzI0MTg0NjI3WhcNMjYwMzMxMTg0NjI3WjAYMRYwFAYD VQQDEw02OWMyZGMwMy1mODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8hv1Eq39gBKjeIrtsH3JnKASAUZ4iCam06Q4BYYhO4+dOpWJx/nJgrLweXu T+sOLKoZISlStXN1ZsVqYcjTFC8SMg31d1GprRPSP20h6573iMgWH3/tH27bPwzh TI+T3fkmKN8yrOrmU17Bk9lG+u4YI/Nz2GgdhIMMxzPgHlCrh3tS6lFvyLmVtlZQ sRy+hSSIqcr7vlJXcBtfcwlt94DfWzTKY1vSKGdKiGddNzkrkcFfoKTniqFFmadm px01QGNg9SHI17Xx2mmRrDLSR2xOPLZa46+25H4p+OOdr2LBRR9sxk+/+Emkkx1D 8cUuVABbkAdZ0hGALm6ZV1vDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGJDvao 4XDFPbrObyFPIMGmBQYnMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF201uQQO/vrCvD/WE2voKG4cUbpuNwo3jREpcQY64DT+Rpc/rKWDP7nvBL5N kqDpRGwxwT1X+yyBTrcDCEH40+xDFA2McWsIJz5TjC4JpvCEI/JJh84r/Nhx3WDI 9+LdjLkJA8DnGJWW6s39aL2uKjZPjbOWcJJJofFZ6V4wFbsRTQHA58p3z+Xbsl/e +Lno1DRP1aidANUE26iyD42sCWvSwQug8lEacWs6p7UIklUhNEgFjt5I3ObV7DiT bkCOzWj2E/m7qhk1xphPd9k6wcvXvMb8Df1kbNHCmAbEm5OzEsxrSSsTaO63ziuS blXTMtDtlKnIHJ4ha31FbD7h0A== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:08 2026 by rpki-client