$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft File: B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json) Hash identifier: Xr8rNhGMZ1psT184HwzPHGjvLZSyDG2zeKtApTB7EWQ= Subject key identifier: 6D:AD:55:F7:22:C5:EC:8F:95:92:39:35:03:F2:D2:03:C6:EC:8F:F1 Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2 Certificate issuer: /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft Manifest number: 1A Signing time: Sun 05 Apr 2026 08:18:49 +0000 Manifest this update: Sun 05 Apr 2026 08:18:49 +0000 Manifest next update: Sun 12 Apr 2026 08:18:49 +0000 Files and hashes: 1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: 2EpZ+DHnrSXvdTmVUiYdQe4j0Uxp0Qy1LuCRIJwokvE=) 2: 964C388611F511F1B1F03794113D8C67.roa (hash: aDJ1T/8negVg13w36W/uf7MN9f6atZcUX+4QUHdvnVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2 Validity Not Before: Apr 5 08:18:49 2026 GMT Not After : Apr 12 08:18:49 2026 GMT Subject: CN=69d21ae9-a5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:05:b9:38:e5:9a:35:05:ea:2e:d4:e7:f5: 7c:50:9b:ae:6d:78:7c:5b:fb:f6:3b:12:77:7c:8f: 48:e1:bf:72:68:e5:c9:65:ed:a0:79:34:1d:b5:2b: 61:8d:95:30:5f:a0:68:a8:46:37:6c:17:ce:f1:1d: c6:5d:55:bf:a7:52:31:6d:60:f5:b6:91:e7:ab:ed: d9:62:a7:d1:64:51:61:c3:8f:53:3a:b5:e0:b6:a5: 4d:cf:0a:84:b7:8f:cf:54:22:24:3e:b8:15:07:9b: 34:21:ba:ab:1c:e4:a6:53:d2:53:3c:9e:6c:c8:b8: a3:d5:26:da:ab:64:3e:fa:24:a8:99:ab:90:43:1b: a4:43:2b:e7:99:af:21:86:28:f4:ee:61:6e:fe:ad: 5e:66:e0:5a:72:e6:92:94:08:62:a5:bb:56:75:81: 1f:04:ab:7d:43:cf:70:db:e2:84:a1:4b:19:fc:a9: 26:78:08:bb:e3:70:38:00:f7:e2:d7:14:6b:97:be: 61:37:39:38:be:1f:a2:86:dc:ad:51:3b:e1:7a:87: 9c:66:b1:ac:d9:96:9a:49:1b:10:d4:88:b0:24:a8: dc:67:56:17:fd:f8:67:11:12:63:ef:d6:cf:00:22: 73:eb:28:aa:1b:cf:77:21:6b:f8:4f:bb:d0:6a:4a: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AD:55:F7:22:C5:EC:8F:95:92:39:35:03:F2:D2:03:C6:EC:8F:F1 X509v3 Authority Key Identifier: keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4b:33:50:96:6c:00:19:8d:96:81:f0:fe:98:71:5a:ad:8a: 8d:1e:28:b5:19:b0:f7:53:2c:c4:39:ff:01:94:4c:85:46:57: b0:e8:59:b8:33:10:19:f1:11:47:f6:b1:ea:35:b0:de:10:6b: 52:50:e6:25:52:98:e5:10:d0:63:6f:4b:d1:d8:c2:20:f3:fd: 96:64:ac:da:72:c2:19:f2:0f:d0:44:02:cb:6c:be:43:60:b6: db:6f:ed:5b:f9:24:2f:39:76:08:d2:85:a5:da:fd:22:e8:d5: b5:a0:0d:1b:62:ad:81:39:4d:e4:a3:d3:24:e5:78:80:0a:21: 68:1b:e2:cb:aa:37:9c:c3:02:b4:0f:63:07:94:d9:7a:26:59: 28:38:f5:e2:48:da:54:48:db:1e:79:8f:6e:89:89:05:dd:01: 35:0d:5a:87:ac:17:af:b9:e4:ac:60:d8:e8:cf:40:be:88:82: 05:55:cd:e7:c4:dd:35:a8:ab:55:0f:16:2d:ad:6b:c1:aa:ea: 7e:dc:44:a0:17:0d:f0:0c:d7:42:19:3b:05:28:60:8a:ba:1d: 19:0f:3a:25:c3:b6:96:c2:05:ec:c7:be:c2:ae:df:f0:51:ea: 80:06:96:ea:bc:65:6b:4d:5a:00:db:25:aa:9f:eb:55:ea:b9: a6:c9:8d:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFRjExMC8GA1UEBRMoMDdCNDZFNENGM0ZFN0M4QzQ1MDIxOTE1ODAxQTZFNTNE QTIwQUNCMjAeFw0yNjA0MDUwODE4NDlaFw0yNjA0MTIwODE4NDlaMBgxFjAUBgNV BAMTDTY5ZDIxYWU5LWE1YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRXgW5OOWaNQXqLtTn9XxQm65teHxb+/Y7End8j0jhv3Jo5cll7aB5NB21K2GN lTBfoGioRjdsF87xHcZdVb+nUjFtYPW2keer7dlip9FkUWHDj1M6teC2pU3PCoS3 j89UIiQ+uBUHmzQhuqsc5KZT0lM8nmzIuKPVJtqrZD76JKiZq5BDG6RDK+eZryGG KPTuYW7+rV5m4Fpy5pKUCGKlu1Z1gR8Eq31Dz3Db4oShSxn8qSZ4CLvjcDgA9+LX FGuXvmE3OTi+H6KG3K1RO+F6h5xmsazZlppJGxDUiLAkqNxnVhf9+GcREmPv1s8A InPrKKobz3cha/hPu9BqSukLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUba1V9yLF 7I+Vkjk1A/LSA8bsj/EwHwYDVR0jBBgwFoAUB7RuTPP+fIxFAhkVgBpuU9ogrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEVGL0JENTcwRDhBMTFG NDExRjFBOERGQjI4RDExM0Q4QzY3L0I3UnVUUFAtZkl4RkFoa1ZnQnB1VTlvZ3JM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjdSdVRQUC1mSXhGQWhrVmdCcHVVOW9nckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEVGL0JENTcwRDhBMTFGNDExRjFBOERGQjI4RDExM0Q4QzY3L0I3UnVUUFAtZkl4 RkFoa1ZnQnB1VTlvZ3JMSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8SzNQlmwAGY2WgfD+mHFarYqNHii1GbD3UyzEOf8BlEyFRlew6Fm4MxAZ8RFH 9rHqNbDeEGtSUOYlUpjlENBjb0vR2MIg8/2WZKzacsIZ8g/QRALLbL5DYLbbb+1b +SQvOXYI0oWl2v0i6NW1oA0bYq2BOU3ko9Mk5XiACiFoG+LLqjecwwK0D2MHlNl6 JlkoOPXiSNpUSNseeY9uiYkF3QE1DVqHrBevueSsYNjoz0C+iIIFVc3nxN01qKtV DxYtrWvBqup+3ESgFw3wDNdCGTsFKGCKuh0ZDzolw7aWwgXsx77Crt/wUeqABpbq vGVrTVoA2yWqn+tV6rmmyY1x -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:14 2026 by rpki-client