$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: PfQffTp7IkC+3yKOKw7dVHAgDVwgndroOlR3sm/31FI= Subject key identifier: 46:64:9B:6F:9A:7E:12:1A:62:50:26:56:67:B4:9F:19:B4:32:B6:6D Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 08CE Signing time: Sat 04 Apr 2026 20:12:20 +0000 Manifest this update: Sat 04 Apr 2026 20:12:20 +0000 Manifest next update: Sat 11 Apr 2026 20:12:20 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: TEdk+o9BG+37JI6ZRuF94G2LYU/5Y2F2nsQg9k537Hg=) 2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: v4VonKeQXuZBqvV2HQfQ64OseQcBYEZ74pB/ABKdbNc=) 3: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: KrSQv9cvW5hLwW2iAyoa0siBvrK5PDEnlbwM0W8uyNs=) 4: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: ewYDV2AeFSraFT8cqNKwnfuovfJu1fvrIxXBNUNfFI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Apr 4 20:12:20 2026 GMT Not After : Apr 11 20:12:20 2026 GMT Subject: CN=69d170a4-68f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:47:f3:50:b9:76:62:d6:7b:56:bd:3b:8f: 08:df:97:74:ce:45:e4:d5:36:af:1c:dd:20:02:eb: 13:66:00:f2:81:27:1d:f2:7e:ac:41:4d:06:00:50: 03:39:b6:c8:8d:54:62:fc:11:87:42:60:03:44:d7: eb:e6:ce:b6:16:b4:0a:4f:33:1f:a4:d8:1b:38:ad: 1d:60:63:4b:76:0d:09:8c:ff:95:e2:20:86:88:ec: 15:d9:d0:b4:1b:6b:24:8e:b6:43:94:3d:ec:14:e7: 68:e9:f5:7c:2b:91:c1:37:7a:e6:1a:46:9d:22:b3: b3:24:12:80:e5:02:60:d9:ac:4c:cf:85:f5:2e:b5: c7:42:6c:09:39:fd:53:e2:fb:ec:27:b0:2c:0e:7c: cc:ac:a2:81:98:f3:73:6d:7b:37:95:f9:e3:61:7d: 89:62:ad:08:1d:52:a4:a5:5c:de:da:4d:de:e2:b3: d2:a6:95:49:03:52:97:fb:52:7f:bd:f5:0e:79:a1: 39:e2:69:71:63:4a:66:23:58:0d:f6:1b:5a:4c:2f: 84:5c:52:81:4d:c9:6f:14:d6:5a:d8:bc:23:a3:1e: ce:6e:61:d4:ba:7a:36:74:ef:9f:63:69:a9:3c:b7: 0e:9d:a4:c0:1e:68:6d:f9:2f:c7:27:d8:85:5f:3c: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:9B:6F:9A:7E:12:1A:62:50:26:56:67:B4:9F:19:B4:32:B6:6D X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ef:27:a5:0e:5d:c6:5f:20:6d:35:1b:67:af:62:2e:fa:ac: 46:3c:a5:cf:e4:a4:c0:82:4a:55:40:5d:a9:77:94:c2:80:b3: 8e:f8:fc:5a:da:65:60:dd:ad:82:f9:6b:3f:a0:a5:ea:2c:e8: dd:6a:d2:d6:77:8d:a3:43:01:70:d4:a6:58:9c:8a:2c:c9:94: 49:9a:70:b0:66:ba:1a:20:60:c8:86:91:28:a1:a2:e9:b6:f3: 9a:82:16:d6:a5:fc:8d:b7:ea:e9:a7:46:86:6f:8b:e3:dd:6b: 3a:ad:8e:2e:29:af:6d:38:cc:5c:ad:cf:66:2f:a9:89:d2:30: fe:ef:30:32:06:19:ff:d5:91:59:a2:77:ca:3a:6e:a0:f1:7d: 67:67:8e:01:ff:b4:db:16:2e:49:70:51:e3:ec:b4:1f:d0:9e: 4c:a7:f6:0c:61:70:c0:fa:5b:5e:1d:13:5f:1f:e1:eb:8a:d2: 1b:19:9e:67:1d:98:02:f7:f7:80:53:ae:f3:1e:55:92:de:b9: 5f:54:56:7f:1c:03:69:3c:83:65:1e:8f:31:f1:85:87:fb:a6: 43:88:e7:c9:c8:33:bb:f6:03:07:a2:b4:ed:0f:04:fa:19:28: 89:85:24:be:57:2f:d9:7d:1d:29:b5:e2:e3:49:53:dd:38:bd: 7d:e3:89:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjYwNDA0MjAxMjIwWhcNMjYwNDExMjAxMjIwWjAYMRYwFAYD VQQDEw02OWQxNzBhNC02OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtRH81C5dmLWe1a9O48I35d0zkXk1TavHN0gAusTZgDygScd8n6sQU0GAFAD ObbIjVRi/BGHQmADRNfr5s62FrQKTzMfpNgbOK0dYGNLdg0JjP+V4iCGiOwV2dC0 G2skjrZDlD3sFOdo6fV8K5HBN3rmGkadIrOzJBKA5QJg2axMz4X1LrXHQmwJOf1T 4vvsJ7AsDnzMrKKBmPNzbXs3lfnjYX2JYq0IHVKkpVze2k3e4rPSppVJA1KX+1J/ vfUOeaE54mlxY0pmI1gN9htaTC+EXFKBTclvFNZa2Lwjox7ObmHUuno2dO+fY2mp PLcOnaTAHmht+S/HJ9iFXzywjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZkm2+a fhIaYlAmVme0nxm0MrZtMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbu8npQ5dxl8gbTUbZ69iLvqsRjylz+SkwIJKVUBdqXeUwoCzjvj8WtplYN2t gvlrP6Cl6izo3WrS1neNo0MBcNSmWJyKLMmUSZpwsGa6GiBgyIaRKKGi6bbzmoIW 1qX8jbfq6adGhm+L491rOq2OLimvbTjMXK3PZi+pidIw/u8wMgYZ/9WRWaJ3yjpu oPF9Z2eOAf+02xYuSXBR4+y0H9CeTKf2DGFwwPpbXh0TXx/h64rSGxmeZx2YAvf3 gFOu8x5Vkt65X1RWfxwDaTyDZR6PMfGFh/umQ4jnycgzu/YDB6K07Q8E+hkoiYUk vlcv2X0dKbXi40lT3Ti9feOJjw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:59 2026 by rpki-client