$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json) Hash identifier: gHiy7ckKRVpcZUCj+IgJppZmP4uBSVWvZInsEesAcB4= Subject key identifier: B8:2F:2B:49:A7:61:B4:D9:AB:C1:3A:6A:37:9E:DB:62:58:64:89:83 Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2BD6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft Manifest number: 2B86 Signing time: Sat 28 Mar 2026 15:32:09 +0000 Manifest this update: Sat 28 Mar 2026 15:32:08 +0000 Manifest next update: Sat 04 Apr 2026 15:32:08 +0000 Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: TZ+Msap4dQxDnmuS3TFa0WG09eqM96bJl3qdpPerFtU=) 2: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: lwhgxQ+LgrJn47zyUAnLsM4ouCqlk1HX6qTOZMFb/HM=) 3: E8573BE8F1C111F098487417396F56BC.roa (hash: F0Fv187N1RGFhEEbx/oMjZ1udUPLSoWgSQeuKM9bGms=) 4: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: Eo31vAFnAsF5u9q6EjT+7W+u7j0+BA8u4cDp5rL/syM=) 5: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: BXRFGNYuity9lTYV79AbAsykkMdd6+n6EZ7PrTkQhsk=) 6: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: KdnM+2nBmwCpA+MGMHO0Bl1xzd46blXEMYh3gkA7MWA=) 7: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: 80yPdyzDWGKZGoqPlrkXe6z7oxzuh7a6qYo6nHURbRI=) 8: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: e0sKc/3PzukaFrJycUXB6K4Zrj8DGKsFURALFcSQcVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 15:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11222 (0x2bd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Mar 28 15:32:08 2026 GMT Not After : Apr 4 15:32:08 2026 GMT Subject: CN=69c7f479-b23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:fc:7f:8e:84:4e:42:4d:f4:67:6c:7c:5c: e9:9c:61:29:b0:b0:49:ce:d0:91:5d:cb:49:93:8a: 8c:a2:d3:91:0c:d6:46:94:59:b6:a8:77:db:ac:d1: 0d:1b:f2:86:74:15:ed:ce:c9:a8:c1:f0:67:3b:05: 22:fc:7e:bf:d3:da:7d:36:2b:df:a9:63:55:2e:dc: b7:94:f0:f6:4b:a4:29:dc:e5:4e:6c:d3:57:1a:d3: 7c:8c:3d:f3:e3:08:90:a3:c3:17:d9:fa:52:3c:93: 14:d2:9e:60:43:5c:f5:a7:95:03:fc:ee:4e:eb:cf: ee:5d:49:59:7d:ed:7a:4c:fe:95:80:4f:1d:f7:31: 7e:7c:2b:d4:9d:03:ab:cb:42:15:f7:36:30:1f:0e: 47:90:af:e1:c1:5e:3d:c4:9f:d7:af:59:31:cc:09: 4e:6f:39:bd:09:ea:fa:b3:52:7e:46:42:c0:cc:93: d6:bb:a8:7c:a3:17:0b:a0:c3:12:cb:71:51:7c:6d: 80:42:11:7f:c3:ce:f4:19:23:36:7f:19:64:00:e2: 65:76:59:1e:33:a6:d0:03:23:82:f3:06:79:6c:07: 31:49:c2:a8:17:79:d8:94:69:ee:0c:24:16:4e:ae: c8:a8:d6:15:f8:d7:6a:13:1c:fc:3f:bf:c3:41:8f: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:2B:49:A7:61:B4:D9:AB:C1:3A:6A:37:9E:DB:62:58:64:89:83 X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a2:b4:47:4f:d9:91:85:08:7c:3f:9c:6a:c5:45:0b:87:c6: 2d:35:4f:1b:3b:b2:f1:47:c1:bd:aa:e0:00:4b:f8:54:4c:05: fa:de:2b:7b:0b:ec:bf:37:7d:26:57:42:2f:73:19:ca:55:12: 03:44:37:b9:c5:6b:b3:89:5d:9a:37:55:78:be:43:a3:48:a5: d9:6a:2c:91:02:d7:a2:c5:5c:0f:8b:41:db:d0:bc:3b:35:65: 22:fb:cb:41:71:af:47:ae:36:cd:75:2d:5c:06:b2:13:47:d7: e4:e9:23:2e:84:6c:41:f3:be:ed:0a:52:3f:85:ab:28:f9:52: 93:43:6a:15:e3:af:d4:16:10:42:58:e4:ee:71:89:12:d7:f3: 8a:26:75:12:9d:5d:e7:1b:dd:e5:0f:8c:a8:03:30:4b:a7:de: 25:cd:34:60:d3:dc:f5:db:d4:7c:85:69:95:08:db:f3:14:a2: 45:ca:37:ff:d6:87:70:d7:a2:29:47:f7:6d:51:52:e4:02:61: ad:46:72:b7:10:75:c0:56:09:c2:d6:57:69:86:7b:fa:03:c5: 10:c5:4b:74:76:81:3d:78:fa:83:3b:98:82:8d:a7:2f:ae:44: ee:9b:07:63:19:71:3b:a3:35:a1:5c:6c:73:9b:2a:d0:f6:b8: cf:b2:e2:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjYwMzI4MTUzMjA4WhcNMjYwNDA0MTUzMjA4WjAYMRYwFAYD VQQDEw02OWM3ZjQ3OS1iMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV78f46ETkJN9GdsfFzpnGEpsLBJztCRXctJk4qMotORDNZGlFm2qHfbrNEN G/KGdBXtzsmowfBnOwUi/H6/09p9NivfqWNVLty3lPD2S6Qp3OVObNNXGtN8jD3z 4wiQo8MX2fpSPJMU0p5gQ1z1p5UD/O5O68/uXUlZfe16TP6VgE8d9zF+fCvUnQOr y0IV9zYwHw5HkK/hwV49xJ/Xr1kxzAlObzm9Cer6s1J+RkLAzJPWu6h8oxcLoMMS y3FRfG2AQhF/w870GSM2fxlkAOJldlkeM6bQAyOC8wZ5bAcxScKoF3nYlGnuDCQW Tq7IqNYV+NdqExz8P7/DQY8YowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgvK0mn YbTZq8E6ajee22JYZImDMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ M09XUTk4U0pCM2xoLUNxVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaaK0R0/ZkYUIfD+casVFC4fGLTVPGzuy8UfBvargAEv4VEwF+t4rewvsvzd9 JldCL3MZylUSA0Q3ucVrs4ldmjdVeL5Do0il2WoskQLXosVcD4tB29C8OzVlIvvL QXGvR642zXUtXAayE0fX5OkjLoRsQfO+7QpSP4WrKPlSk0NqFeOv1BYQQljk7nGJ EtfziiZ1Ep1d5xvd5Q+MqAMwS6feJc00YNPc9dvUfIVplQjb8xSiRco3/9aHcNei KUf3bVFS5AJhrUZytxB1wFYJwtZXaYZ7+gPFEMVLdHaBPXj6gzuYgo2nL65E7psH YxlxO6M1oVxsc5sq0Pa4z7Li7g== -----END CERTIFICATE-----Generated at Sun Mar 29 19:23:13 2026 by rpki-client