$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: MzEV7Nt/Z3YldyPbBv+fHp9UQbhrKaLx4Wz7tkbOA7g= Subject key identifier: E5:58:97:CA:C3:60:71:EC:94:C7:BD:1F:1E:D4:D0:9B:43:5E:67:04 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0468 Signing time: Sat 04 Apr 2026 23:55:07 +0000 Manifest this update: Sat 04 Apr 2026 23:55:06 +0000 Manifest next update: Sat 11 Apr 2026 23:55:06 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: gGBdN2KZoZxNq2VQbBJtpsKw8izJ5RKmMw7PIHHXI/s=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Apr 4 23:55:06 2026 GMT Not After : Apr 11 23:55:06 2026 GMT Subject: CN=69d1a4db-0d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:55:80:18:8c:cf:1d:7d:1c:9e:66:05:24: 48:c3:4e:ac:2a:8c:e6:0d:0a:e4:3d:fd:33:d1:07: a4:42:2c:1a:e8:c4:b1:c0:c8:92:ba:5d:f0:32:84: 65:d9:cc:a1:61:77:a7:a1:92:e8:4a:fb:71:8c:4a: 51:62:aa:8d:d3:3d:56:b7:a8:cb:98:c2:c3:ef:d6: 84:7b:0d:82:4d:4d:49:3c:5f:88:fe:76:59:33:d7: ba:df:3e:5a:da:d6:9f:ce:e8:43:83:fe:f9:9a:14: 98:41:0a:df:1a:87:b3:4b:18:d2:fe:75:20:49:5a: 6f:15:c7:48:36:d0:22:4f:fa:f6:a7:4c:17:18:5f: 96:51:3c:9d:dd:d8:32:85:8a:2f:6c:2b:60:07:e5: f6:90:08:bd:ba:1f:8a:f2:13:bb:f3:6d:8f:b2:8e: b7:48:21:11:7f:50:05:12:5e:a4:1f:fa:2e:29:fb: b6:9f:fc:15:a0:5c:37:71:52:58:e9:de:36:26:9f: b5:97:6c:60:d9:d9:5e:cf:aa:7e:6a:97:65:e1:a0: a9:bb:ef:97:b5:06:92:80:cb:57:9d:ba:e5:d2:3f: fa:c4:c6:97:09:d2:76:a4:d1:4c:28:52:c0:67:aa: e4:49:c4:fa:39:7c:b6:6a:cd:fc:60:9b:21:ec:c6: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:97:CA:C3:60:71:EC:94:C7:BD:1F:1E:D4:D0:9B:43:5E:67:04 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:54:8f:a4:6e:71:27:2e:53:d1:63:35:fb:85:1f:c2:ec: 64:a8:b6:8f:65:80:55:9b:52:79:a6:85:08:f2:ce:f7:01:4e: 3e:84:79:09:5c:dd:26:46:4b:bc:7c:7a:c4:c2:95:6e:4e:4e: 17:76:95:d7:58:50:0a:b7:95:4b:fa:dd:d1:b0:44:42:cc:fd: 6c:d7:ea:4b:b2:cf:c5:47:78:a5:f2:b7:17:30:34:36:f0:c8: 0a:e9:51:c8:df:38:a4:a2:09:d3:a5:1e:c7:4e:63:a1:cf:4d: e0:fb:d9:d3:9d:d4:ed:78:67:b7:b5:d6:e1:b2:f3:44:bb:13: cc:5b:f7:de:bf:a2:1f:fd:ef:5f:01:ba:dc:6d:1d:3c:05:c3: 61:22:95:c0:f3:9d:88:4b:54:03:1e:ca:a8:af:7d:bb:50:34: 58:f1:28:69:ab:ce:33:d7:41:2a:bd:c0:28:3f:2c:19:a4:6b: f8:5d:ec:e0:c5:09:41:cf:50:21:f3:8c:d1:6f:26:bb:77:3e: fb:64:e6:f9:7c:ed:02:a8:58:f2:b7:79:de:95:44:6c:2d:dd: 9d:37:7c:64:a2:5f:c9:28:88:91:2c:3a:d0:68:98:e8:2f:de: ce:64:12:e3:fa:f0:24:a1:ed:bc:9e:6f:13:b8:b3:05:41:71: ca:79:a7:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwNDA0MjM1NTA2WhcNMjYwNDExMjM1NTA2WjAYMRYwFAYD VQQDEw02OWQxYTRkYi0wZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQxVgBiMzx19HJ5mBSRIw06sKozmDQrkPf0z0QekQiwa6MSxwMiSul3wMoRl 2cyhYXenoZLoSvtxjEpRYqqN0z1Wt6jLmMLD79aEew2CTU1JPF+I/nZZM9e63z5a 2tafzuhDg/75mhSYQQrfGoezSxjS/nUgSVpvFcdINtAiT/r2p0wXGF+WUTyd3dgy hYovbCtgB+X2kAi9uh+K8hO7822Pso63SCERf1AFEl6kH/ouKfu2n/wVoFw3cVJY 6d42Jp+1l2xg2dlez6p+apdl4aCpu++XtQaSgMtXnbrl0j/6xMaXCdJ2pNFMKFLA Z6rkScT6OXy2as38YJsh7Mai3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVYl8rD YHHslMe9Hx7U0JtDXmcEMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSlUj6RucScuU9FjNfuFH8LsZKi2j2WAVZtSeaaFCPLO9wFOPoR5CVzdJkZL vHx6xMKVbk5OF3aV11hQCreVS/rd0bBEQsz9bNfqS7LPxUd4pfK3FzA0NvDICulR yN84pKIJ06Uex05joc9N4PvZ053U7Xhnt7XW4bLzRLsTzFv33r+iH/3vXwG63G0d PAXDYSKVwPOdiEtUAx7KqK99u1A0WPEoaavOM9dBKr3AKD8sGaRr+F3s4MUJQc9Q IfOM0W8mu3c++2Tm+XztAqhY8rd53pVEbC3dnTd8ZKJfySiIkSw60GiY6C/ezmQS 4/rwJKHtvJ5vE7izBUFxynmnIg== -----END CERTIFICATE-----Generated at Sun Apr 5 23:50:06 2026 by rpki-client