$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: EUF8OCjbZXgOCuye0ckIyEJtQ2rAMhVRmyqpEAerAbc= Subject key identifier: 94:B1:A9:B5:6E:6D:D4:E7:EC:DB:77:50:82:99:C1:2D:B6:0E:AB:04 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: D3 Signing time: Sun 05 Apr 2026 06:07:59 +0000 Manifest this update: Sun 05 Apr 2026 06:07:59 +0000 Manifest next update: Sun 12 Apr 2026 06:07:59 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: gOO6AVRmLX8r29cXSS4Nsl8ql+SJAQN/chAFYXtpxSM=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: waPht2Jw2owuimcpCZhjIlIZYot2jTd9WZt/SFL4sjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Apr 5 06:07:59 2026 GMT Not After : Apr 12 06:07:59 2026 GMT Subject: CN=69d1fc3f-15b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:0c:4d:37:5c:5c:7a:91:52:70:78:0e:3f: 0b:e5:f6:23:4a:9e:63:38:5b:03:19:d2:28:af:00: 9f:b3:df:df:38:1c:72:94:4d:66:71:06:90:45:6e: f5:33:e7:de:dc:88:4d:4f:2a:dc:e1:35:b0:5e:6b: bd:1a:0a:68:03:b8:d1:ed:25:05:18:45:27:2a:c3: f0:16:da:e1:eb:cd:3e:15:03:e5:58:16:65:60:c0: 09:8a:62:50:12:12:39:76:4c:94:93:38:ba:7b:16: ca:f6:c5:18:ce:d5:2a:15:72:c5:c7:78:64:7f:44: 6a:b1:ab:d0:9b:a8:78:13:e8:6a:d6:3a:69:a7:a7: ee:2d:ee:1e:9e:6b:74:05:89:b3:87:e7:a5:9b:f2: 34:22:67:ba:59:d9:f8:ed:c0:50:82:33:af:98:a3: 08:f7:d6:87:a1:6b:dc:db:ab:13:ad:e2:34:b7:65: d7:2a:c9:99:29:65:fb:99:45:e4:15:06:ea:1f:a9: 04:f5:ba:dc:bc:94:35:91:c7:fa:10:d2:5d:82:bf: 8d:0c:94:ac:b5:10:b5:fe:94:99:0c:2c:aa:71:e3: 56:6d:6c:2e:3c:79:6b:c2:d2:0a:d9:90:e5:02:30: 9f:29:be:0d:fd:8f:8a:cd:90:03:09:a4:3a:b6:f6: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:A9:B5:6E:6D:D4:E7:EC:DB:77:50:82:99:C1:2D:B6:0E:AB:04 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7d:82:1c:e9:85:1c:a4:f4:11:9c:32:94:dd:25:1a:3e:04: 68:9f:2f:82:d2:8a:a7:11:d8:cc:1f:3b:19:7b:36:4c:3c:18: 5c:80:61:7b:cb:3d:42:0e:9b:1f:7a:60:c2:72:5c:35:c8:a3: a3:53:94:79:a5:44:fe:95:b7:d9:92:74:8d:ab:b7:57:3e:44: a1:a4:dd:ff:bc:1e:7b:ce:13:79:a3:0c:a6:af:db:56:43:e7: ca:55:71:51:dd:bb:ae:25:e4:aa:6a:48:75:a4:4d:24:1e:e1: 2c:c8:b8:3c:71:29:c7:f3:3f:9b:7b:16:08:7c:50:fa:96:55: ab:fe:e0:15:ed:04:ed:97:fb:3c:fe:5f:48:f0:b1:3a:f3:be: 2a:1c:4f:3a:f7:e7:6f:c9:d3:5c:17:60:03:b5:53:78:ac:f5: 1c:28:f8:bb:f0:64:09:f5:6a:4e:3a:fb:b0:65:b8:ac:db:87: ff:6b:27:66:13:1f:d6:90:45:2f:6e:c7:d3:ca:a3:61:69:d6: c6:41:35:34:53:88:3e:37:cb:0c:b4:82:7d:3a:03:a5:9d:9f: 3d:07:a0:79:3b:31:66:71:3f:8e:22:09:0d:8c:52:de:b9:43: 50:99:c2:87:a7:67:d4:74:33:32:1b:a9:42:b7:a6:cc:88:7e: 13:d8:a8:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjYwNDA1MDYwNzU5WhcNMjYwNDEyMDYwNzU5WjAYMRYwFAYD VQQDEw02OWQxZmMzZi0xNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2oMTTdcXHqRUnB4Dj8L5fYjSp5jOFsDGdIorwCfs9/fOBxylE1mcQaQRW71 M+fe3IhNTyrc4TWwXmu9GgpoA7jR7SUFGEUnKsPwFtrh680+FQPlWBZlYMAJimJQ EhI5dkyUkzi6exbK9sUYztUqFXLFx3hkf0RqsavQm6h4E+hq1jppp6fuLe4enmt0 BYmzh+elm/I0Ime6Wdn47cBQgjOvmKMI99aHoWvc26sTreI0t2XXKsmZKWX7mUXk FQbqH6kE9brcvJQ1kcf6ENJdgr+NDJSstRC1/pSZDCyqceNWbWwuPHlrwtIK2ZDl AjCfKb4N/Y+KzZADCaQ6tvbDhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSxqbVu bdTn7Nt3UIKZwS22DqsEMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgH2CHOmFHKT0EZwylN0lGj4EaJ8vgtKKpxHYzB87GXs2TDwYXIBhe8s9Qg6b H3pgwnJcNcijo1OUeaVE/pW32ZJ0jau3Vz5EoaTd/7wee84TeaMMpq/bVkPnylVx Ud27riXkqmpIdaRNJB7hLMi4PHEpx/M/m3sWCHxQ+pZVq/7gFe0E7Zf7PP5fSPCx OvO+KhxPOvfnb8nTXBdgA7VTeKz1HCj4u/BkCfVqTjr7sGW4rNuH/2snZhMf1pBF L27H08qjYWnWxkE1NFOIPjfLDLSCfToDpZ2fPQegeTsxZnE/jiIJDYxS3rlDUJnC h6dn1HQzMhupQremzIh+E9ioIw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:04 2026 by rpki-client