$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: cOkpsuTrB/BAJjumBYhKeoGTdBDYYLfFgWCzCSO9fnk= Subject key identifier: 84:69:92:84:43:C6:F3:2E:75:A0:80:38:8A:DF:4A:05:4A:82:1C:62 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 3566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3541 Signing time: Tue 24 Mar 2026 15:12:36 +0000 Manifest this update: Tue 24 Mar 2026 15:12:36 +0000 Manifest next update: Tue 31 Mar 2026 15:12:36 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: EykRqgz7IfVZaB2GvEyL14oTBxa8eVJ5nZD7gBjfa0w=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 7bGtPyBGoN1SwqVRrEUHmbCfJdOGkrb5JuyAmWIVvAA=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: 2hfGsNVUmbO2vvpF424TRAk1BpXknhQcicom2XdbcDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13670 (0x3566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Mar 24 15:12:36 2026 GMT Not After : Mar 31 15:12:36 2026 GMT Subject: CN=69c2a9e4-9ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:c8:5c:f1:37:ed:f4:40:49:8f:e7:78:b8: 78:f7:8a:91:b8:32:4d:b8:69:3c:12:36:b4:51:fd: 5d:45:de:d7:58:3b:19:cd:b8:ce:95:35:58:4f:51: b3:c4:a4:45:d7:cf:10:fe:49:0d:ba:d4:49:0a:0f: b0:67:2f:16:a4:6a:97:4b:66:a4:0e:87:44:d2:67: 02:9b:60:71:8c:29:63:d1:7a:26:5a:9a:d3:e9:45: a0:32:3f:ae:dd:1d:0e:19:3f:79:07:65:b8:25:1c: 6f:27:66:a7:dc:90:27:38:af:48:d0:dd:58:61:db: e6:63:cc:9d:20:c3:76:42:04:bb:f3:f0:60:a5:ea: 83:ef:6c:f1:8d:b2:d2:a5:e5:c7:c9:41:36:00:88: a5:5b:81:5c:c3:59:69:35:4d:d6:58:8c:ad:42:fe: 98:3e:4c:48:6f:4b:1d:1d:5f:03:6b:7f:0f:23:3a: 56:ac:bf:56:38:d5:b9:4f:c6:c2:25:2f:7f:bc:94: 9a:da:7f:61:c1:7e:60:5c:c5:19:d9:af:07:28:40: 82:71:4b:dc:91:05:b5:df:8c:b6:ce:0d:3f:5d:73: 41:d0:99:1f:d5:9b:b1:17:4e:f9:f4:bd:76:c4:07: 4c:ec:34:84:c4:ba:ed:f3:18:51:a6:56:55:99:ab: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:69:92:84:43:C6:F3:2E:75:A0:80:38:8A:DF:4A:05:4A:82:1C:62 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:90:45:17:38:aa:0d:48:7e:52:0b:fe:9d:a2:71:be:7c:9b: f2:ed:7e:c4:4b:ec:2f:35:7f:7c:08:46:8f:cc:97:6f:52:0b: b3:e3:ce:31:b7:6f:9a:27:48:ed:86:9d:bb:ac:91:dd:f3:1f: 26:d2:b2:d8:8a:87:7c:fc:88:83:11:d1:3e:88:c6:bd:57:9c: 85:74:eb:4a:f2:d8:67:bc:04:b9:be:82:f4:85:8f:37:48:9f: 66:8a:31:3c:c5:da:6c:90:85:91:8a:3a:30:b0:e2:24:3f:73: 78:03:c0:a8:e1:37:33:9e:8b:82:9d:70:82:c4:ae:96:b3:fc: 76:29:a3:f3:68:65:be:89:31:5d:52:d8:99:cb:e2:dc:af:b3: b4:44:ed:2f:3e:8c:67:2c:69:1f:10:79:98:d5:60:70:ae:9b: ac:d2:b8:68:b6:dc:5f:a9:04:ac:05:39:ef:50:20:62:e6:c9: 80:f2:01:6b:22:d5:82:68:70:e1:81:44:ab:c1:a1:ce:b4:ec: 52:b8:24:4c:10:a2:4b:94:e9:04:85:36:b7:6f:a2:96:3e:66: 36:1f:e3:c6:78:2e:24:d8:0d:8d:f0:dd:52:42:22:bf:38:50: 9f:da:26:29:6d:7a:93:2c:f5:cd:64:0a:9b:76:99:3d:aa:6b: db:80:19:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjYwMzI0MTUxMjM2WhcNMjYwMzMxMTUxMjM2WjAYMRYwFAYD VQQDEw02OWMyYTllNC05ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NnIXPE37fRASY/neLh494qRuDJNuGk8Eja0Uf1dRd7XWDsZzbjOlTVYT1Gz xKRF188Q/kkNutRJCg+wZy8WpGqXS2akDodE0mcCm2BxjClj0XomWprT6UWgMj+u 3R0OGT95B2W4JRxvJ2an3JAnOK9I0N1YYdvmY8ydIMN2QgS78/BgpeqD72zxjbLS peXHyUE2AIilW4Fcw1lpNU3WWIytQv6YPkxIb0sdHV8Da38PIzpWrL9WONW5T8bC JS9/vJSa2n9hwX5gXMUZ2a8HKECCcUvckQW134y2zg0/XXNB0Jkf1ZuxF0759L12 xAdM7DSExLrt8xhRplZVmaso9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRpkoRD xvMudaCAOIrfSgVKghxiMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJBFFziqDUh+Ugv+naJxvnyb8u1+xEvsLzV/fAhGj8yXb1ILs+POMbdvmidI 7Yadu6yR3fMfJtKy2IqHfPyIgxHRPojGvVechXTrSvLYZ7wEub6C9IWPN0ifZoox PMXabJCFkYo6MLDiJD9zeAPAqOE3M56Lgp1wgsSulrP8dimj82hlvokxXVLYmcvi 3K+ztETtLz6MZyxpHxB5mNVgcK6brNK4aLbcX6kErAU571AgYubJgPIBayLVgmhw 4YFEq8GhzrTsUrgkTBCiS5TpBIU2t2+ilj5mNh/jxnguJNgNjfDdUkIivzhQn9om KW16kyz1zWQKm3aZPapr24AZrQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:13 2026 by rpki-client