$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: psVo65jiVJKCs7yhrl+C1c+jtkdVyK8pwyi+nnQ1guo= Subject key identifier: 5A:70:DF:31:84:CA:C8:D2:80:42:CA:46:89:5E:A2:3F:55:A6:F2:10 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: F5 Signing time: Sat 04 Apr 2026 14:28:16 +0000 Manifest this update: Sat 04 Apr 2026 14:28:16 +0000 Manifest next update: Sat 11 Apr 2026 14:28:16 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: JvQ+VgLls2NaIlwlnHHh8xwOO3oku8x1fa+7Eu0GbxI=) 2: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: F9kzLS7p92HyECYzd+gu+WPkfZ5MMIAg8YgWcb7OD+A=) 3: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aWovwb/XvB9GCwrFHdnkc0vXtORNJSBEV1rN72Z1NuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Apr 4 14:28:16 2026 GMT Not After : Apr 11 14:28:16 2026 GMT Subject: CN=69d12000-b937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:d7:c4:97:03:17:df:3a:b0:28:73:80:05: 67:81:53:26:09:6e:32:3c:1d:1d:36:74:df:a7:17: c2:93:be:f1:71:1c:9b:ef:c3:06:bb:0c:ea:7e:40: 65:72:c5:c2:2a:e9:7c:62:ae:81:78:ba:92:6c:7f: 36:8b:22:af:7a:ad:5b:d0:bc:d8:98:79:60:ec:9a: ca:4e:d3:f6:4a:26:51:f6:4d:82:93:cd:6e:92:1e: fb:09:4a:00:30:43:2e:b1:d9:c4:cd:a4:49:33:c9: 02:cb:1f:e0:28:3c:d9:86:2c:25:cd:95:48:64:34: 72:c4:3e:cf:1f:ca:2e:a0:0e:e8:87:ab:e2:d1:7c: 81:85:0b:10:ea:ac:b6:70:5f:3c:00:08:9a:b7:29: 60:b3:38:29:e3:3c:73:f7:9f:5f:35:94:26:14:f8: 5b:0a:cf:7e:26:ed:0c:25:2b:25:20:7b:93:dc:fc: 77:61:2a:0d:cb:61:dc:28:e2:35:6a:5e:4d:fd:77: 8f:d2:87:28:2d:60:d7:c0:dd:36:c5:b5:8f:4d:03: 48:29:53:14:b7:3d:43:9b:94:e7:2a:8a:42:f4:0e: 91:00:57:4c:29:d3:18:d1:2a:c7:75:e9:ff:19:6e: 3b:1c:93:07:1d:41:ed:73:8e:d9:0b:09:a6:ce:a1: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:DF:31:84:CA:C8:D2:80:42:CA:46:89:5E:A2:3F:55:A6:F2:10 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c6:65:0b:33:c1:43:36:6c:71:4e:12:76:ba:04:38:e5:83: 1b:f3:73:21:e8:96:74:0f:a6:aa:b0:90:98:39:50:30:81:60: 97:07:6e:6a:12:6d:9e:98:d2:ea:02:4c:70:fe:8c:28:c8:b7: 62:33:a4:a2:bc:88:8d:8b:ac:1b:2d:4e:f4:d2:db:16:6e:86: c7:ec:49:0e:4a:a9:65:1e:be:7f:ec:50:b4:4e:e7:b0:30:c4: 40:ee:20:a3:e0:99:5d:5d:f0:e7:3d:fb:0c:22:91:7f:7d:fe: 27:1a:e8:d8:0c:e3:27:0e:c8:9a:ec:df:f4:e9:21:fc:cc:b1: 44:ad:55:64:a5:9b:36:13:01:40:31:a2:67:8c:51:51:17:14: 32:45:e2:5d:1b:a8:ee:65:2b:10:cb:e6:e7:0e:94:c5:ac:6e: c7:22:43:e1:3f:ce:55:7e:9b:20:15:94:cb:77:de:38:92:13: 02:46:52:b5:7e:8b:bc:8a:8f:17:85:dd:b7:73:a0:3e:db:27: 43:0b:68:32:01:e0:2d:c7:86:18:28:3a:b2:13:6a:74:bc:41: 36:92:fd:a3:10:3f:20:e9:a1:3e:ec:ef:57:49:03:79:9d:a1: aa:d9:d4:90:b9:81:7b:4f:bd:b5:5a:78:2a:88:46:b9:ce:00: 97:43:12:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjYwNDA0MTQyODE2WhcNMjYwNDExMTQyODE2WjAYMRYwFAYD VQQDEw02OWQxMjAwMC1iOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV3XxJcDF986sChzgAVngVMmCW4yPB0dNnTfpxfCk77xcRyb78MGuwzqfkBl csXCKul8Yq6BeLqSbH82iyKveq1b0LzYmHlg7JrKTtP2SiZR9k2Ck81ukh77CUoA MEMusdnEzaRJM8kCyx/gKDzZhiwlzZVIZDRyxD7PH8ouoA7oh6vi0XyBhQsQ6qy2 cF88AAiatylgszgp4zxz959fNZQmFPhbCs9+Ju0MJSslIHuT3Px3YSoNy2HcKOI1 al5N/XeP0ocoLWDXwN02xbWPTQNIKVMUtz1Dm5TnKopC9A6RAFdMKdMY0SrHden/ GW47HJMHHUHtc47ZCwmmzqF8/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpw3zGE ysjSgELKRoleoj9VpvIQMB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKcZlCzPBQzZscU4SdroEOOWDG/NzIeiWdA+mqrCQmDlQMIFglwduahJtnpjS 6gJMcP6MKMi3YjOkoryIjYusGy1O9NLbFm6Gx+xJDkqpZR6+f+xQtE7nsDDEQO4g o+CZXV3w5z37DCKRf33+Jxro2AzjJw7Imuzf9Okh/MyxRK1VZKWbNhMBQDGiZ4xR URcUMkXiXRuo7mUrEMvm5w6UxaxuxyJD4T/OVX6bIBWUy3feOJITAkZStX6LvIqP F4Xdt3OgPtsnQwtoMgHgLceGGCg6shNqdLxBNpL9oxA/IOmhPuzvV0kDeZ2hqtnU kLmBe0+9tVp4KohGuc4Al0MSVA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:33:56 2026 by rpki-client