$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: aNjDArqWQCUdiCE78yftfAfPj8Pv8p8N8FfioW7hsXA= Subject key identifier: 60:67:C1:B9:53:FF:92:06:9F:FF:5C:C7:B6:08:2B:29:AB:20:49:A8 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0C6F Signing time: Thu 26 Mar 2026 18:32:25 +0000 Manifest this update: Thu 26 Mar 2026 18:32:25 +0000 Manifest next update: Thu 02 Apr 2026 18:32:25 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: 8NcAfKCMttdZ+nugED8+XQx7nhs6qLQ2/42TIUuG++k=) 2: 627B1438281211EA881CC32DC4F9AE02.roa (hash: QuMcWQGwhElYLcNGEV8qqlAOlpLd+8u3fMjc2LDn80I=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Lb32CCKaZxPXJVtVTz41kWSGeP/mH1CszKT3y/ullaM=) 4: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: 4bnWRv5wJBsyx0TFBETKt2oLFJp/Xiza93KwZfpHk70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: Mar 26 18:32:25 2026 GMT Not After : Apr 2 18:32:25 2026 GMT Subject: CN=69c57bb9-4ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:38:c9:74:70:d6:91:db:54:aa:4f:ca:2d: 80:58:f1:16:97:ab:78:60:0e:38:25:6f:38:74:e1: f9:28:b8:80:20:81:ba:49:8d:9f:21:d7:44:9e:40: 7c:85:2a:ea:72:a3:62:17:92:3f:aa:a4:f0:75:18: be:e3:46:f0:72:29:61:47:a7:88:eb:44:e1:74:b3: fc:ab:1b:db:9f:16:aa:0e:18:18:ec:fe:d2:ef:8b: 2c:0f:dc:87:26:ca:1a:84:c4:7d:67:d0:61:78:4b: 0e:d7:6c:89:bf:18:4a:a1:36:3b:1d:9f:ae:e2:7b: 93:df:64:0d:6a:fa:dc:98:fa:e5:75:9b:6f:14:8b: e2:d0:99:6d:e5:b0:ad:87:d9:26:74:3d:be:f2:1e: 06:7c:9a:5d:88:64:c6:b6:21:16:9d:ab:9f:48:fc: 9c:38:35:c8:78:84:8d:3c:00:7b:8b:c4:f9:ba:e5: 55:57:fc:f0:63:49:32:3f:37:d7:5f:8e:54:fb:78: ac:36:ae:fc:8f:1d:ca:bc:98:2e:39:32:1f:e6:ef: 29:a5:e9:01:b9:59:ec:93:ee:34:74:f2:79:6d:00: 46:a1:93:91:33:d4:75:d2:b0:04:5d:1d:2d:fc:32: 0c:43:61:a1:64:9d:b1:4e:a2:8d:24:5a:79:66:84: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:67:C1:B9:53:FF:92:06:9F:FF:5C:C7:B6:08:2B:29:AB:20:49:A8 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:1e:0c:04:67:01:06:bf:c8:dd:fd:b7:0c:08:5b:21:e8:fb: e0:95:62:49:07:d7:93:fb:ad:b5:4d:fc:2f:80:8d:c8:56:52: 0e:90:d8:24:2b:6a:40:f5:0f:85:2c:12:b3:91:c4:d7:27:26: fc:35:31:31:47:58:62:7c:d5:b4:18:83:7b:99:cc:b1:d8:79: cd:f3:c7:1b:6b:8d:b8:7a:0d:23:20:81:4b:5e:08:63:55:5d: 72:cb:3b:3a:1c:76:fb:bf:fe:5d:b7:81:ae:30:ea:68:c9:1d: eb:f7:fb:99:f9:73:7e:b4:3e:4c:75:d8:22:be:21:4d:f5:27: 45:83:77:8f:7a:5e:d6:a3:6d:97:a4:8d:fe:64:a8:63:ec:74: d6:62:5d:16:34:36:58:f6:a2:70:57:c9:01:ed:2b:79:9e:05: 0a:59:85:4a:c6:ef:02:42:d3:48:29:4e:47:98:bf:51:ef:b2: 68:04:c9:06:ca:b3:d7:a1:c7:77:24:51:43:38:54:97:98:59: 28:fb:21:ba:a9:9e:4b:63:32:ec:5f:54:69:93:f4:a0:d0:39: ba:e0:b4:42:f6:10:18:cc:dc:d4:0e:93:77:8f:41:96:fd:81: c2:4b:44:f3:bb:07:7e:9c:b3:c3:0d:a6:a7:05:8a:fe:5d:64: ce:d1:30:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjYwMzI2MTgzMjI1WhcNMjYwNDAyMTgzMjI1WjAYMRYwFAYD VQQDEw02OWM1N2JiOS00YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iM4yXRw1pHbVKpPyi2AWPEWl6t4YA44JW84dOH5KLiAIIG6SY2fIddEnkB8 hSrqcqNiF5I/qqTwdRi+40bwcilhR6eI60ThdLP8qxvbnxaqDhgY7P7S74ssD9yH JsoahMR9Z9BheEsO12yJvxhKoTY7HZ+u4nuT32QNavrcmPrldZtvFIvi0Jlt5bCt h9kmdD2+8h4GfJpdiGTGtiEWnaufSPycODXIeISNPAB7i8T5uuVVV/zwY0kyPzfX X45U+3isNq78jx3KvJguOTIf5u8ppekBuVnsk+40dPJ5bQBGoZORM9R10rAEXR0t /DIMQ2GhZJ2xTqKNJFp5ZoQ79wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBnwblT /5IGn/9cx7YIKymrIEmoMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwx4MBGcBBr/I3f23DAhbIej74JViSQfXk/uttU38L4CNyFZSDpDYJCtqQPUP hSwSs5HE1ycm/DUxMUdYYnzVtBiDe5nMsdh5zfPHG2uNuHoNIyCBS14IY1Vdcss7 Ohx2+7/+XbeBrjDqaMkd6/f7mflzfrQ+THXYIr4hTfUnRYN3j3pe1qNtl6SN/mSo Y+x01mJdFjQ2WPaicFfJAe0reZ4FClmFSsbvAkLTSClOR5i/Ue+yaATJBsqz16HH dyRRQzhUl5hZKPshuqmeS2My7F9UaZP0oNA5uuC0QvYQGMzc1A6Td49Blv2BwktE 87sHfpyzww2mpwWK/l1kztEwjg== -----END CERTIFICATE-----Generated at Sat Mar 28 13:44:10 2026 by rpki-client