$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: zEZOjyq/ibKExKWvc5KgZtEz8i5IlX7uEheLTzi0I/E= Subject key identifier: C3:CF:48:22:C7:D0:01:09:80:31:4A:AB:35:DF:1F:C9:7B:4E:3F:5B Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0CD7 Signing time: Sat 04 Apr 2026 18:18:51 +0000 Manifest this update: Sat 04 Apr 2026 18:18:50 +0000 Manifest next update: Sat 11 Apr 2026 18:18:50 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: bPTXz8oMyl0DWkftjErcc2hz1z8WC3gqnCeYcTdCzvc=) 2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: XUOecCq3slx7jxCIgwHTqZiq4GEzwouLtwixym+eJh0=) 3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: rg8Y955WxI1CHsoZcacck1yNX2Zf22jTqGvHdCG8WmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Apr 4 18:18:50 2026 GMT Not After : Apr 11 18:18:50 2026 GMT Subject: CN=69d1560b-4873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:e4:34:f5:92:c8:ce:af:5a:9d:8a:2d:d1: d2:40:47:b3:ef:67:49:16:40:4f:de:43:6e:81:5e: b6:f2:eb:4b:06:c8:57:95:75:13:95:46:82:36:76: 9f:c8:8f:67:13:1e:a4:df:7b:9a:7f:ed:49:cd:b2: 2c:19:e9:ad:6b:b7:3e:d0:65:ae:e7:1c:12:e7:e4: 7e:46:38:e8:f3:8d:f8:43:75:53:73:0a:be:ed:90: b7:77:ff:7c:c1:56:93:0e:35:10:ec:2a:16:a4:86: 7b:fe:0e:0b:f2:e4:b8:74:5f:d6:15:02:75:44:28: 47:e3:06:8b:26:e7:eb:bb:d7:65:2e:18:37:6d:d8: 34:38:ba:de:38:e4:7f:2f:de:b7:a7:3d:8d:9e:e8: 4c:de:c1:45:97:35:27:b1:ec:4c:1c:d3:ce:6f:ab: 0e:ac:e9:3d:77:43:6d:33:d6:93:97:35:a6:99:fb: 6c:b5:5e:e4:2b:de:95:cc:d5:82:f6:3a:86:27:18: 80:7a:00:bd:73:58:29:6b:f6:2a:62:43:e8:3a:2b: 57:12:72:b3:4b:e0:20:5f:85:ae:17:2c:52:f1:b4: 10:7b:7b:78:d9:19:91:08:d2:c8:a1:cb:cd:af:be: 92:29:e9:be:c9:6d:66:0f:f0:0d:b6:63:4b:f1:6a: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CF:48:22:C7:D0:01:09:80:31:4A:AB:35:DF:1F:C9:7B:4E:3F:5B X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7e:15:aa:a2:a9:b3:65:7a:ac:c6:04:34:a5:96:6d:83:7f: 3c:03:40:9e:f8:a1:7a:44:7c:bf:7a:27:5d:4b:da:a0:3a:39: 07:0f:27:64:4b:1e:28:d9:ca:47:09:52:82:d7:3f:d3:77:df: fa:51:4a:ac:bd:23:23:e6:6b:ef:ec:73:fb:b4:d1:eb:9f:86: 68:c3:29:3c:93:60:fc:07:97:75:2d:b9:87:9a:44:16:53:24: a7:ff:eb:46:93:5d:7b:37:6c:81:89:43:29:49:38:09:2e:b7: 5b:7f:fe:05:8f:54:20:60:5e:2f:8a:69:f3:c2:b1:88:e9:63: 6a:ec:ba:a5:65:e1:06:c5:24:6c:f6:90:2d:89:ec:31:f0:1b: e9:5e:9f:65:05:ce:25:d4:9c:92:a7:6e:f0:4f:9c:85:c2:f2: c0:74:b5:c3:4b:1c:60:ee:0f:c0:2e:ac:b0:a1:80:cf:e0:76: f1:d9:89:32:cd:fa:93:a4:17:00:ba:33:e5:7b:10:d6:c1:70: 55:61:d7:1f:a4:90:86:31:54:86:00:a1:f0:a9:43:25:e6:54: aa:f1:5f:5a:eb:f2:4b:d1:01:1a:2a:7c:6c:30:2e:51:76:23: fe:a1:d8:ea:7f:b3:8a:ef:07:d7:8b:e4:3b:bf:69:f4:fe:1c: a2:91:9e:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjYwNDA0MTgxODUwWhcNMjYwNDExMTgxODUwWjAYMRYwFAYD VQQDEw02OWQxNTYwYi00ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqPkNPWSyM6vWp2KLdHSQEez72dJFkBP3kNugV628utLBshXlXUTlUaCNnaf yI9nEx6k33uaf+1JzbIsGemta7c+0GWu5xwS5+R+Rjjo8434Q3VTcwq+7ZC3d/98 wVaTDjUQ7CoWpIZ7/g4L8uS4dF/WFQJ1RChH4waLJufru9dlLhg3bdg0OLreOOR/ L963pz2NnuhM3sFFlzUnsexMHNPOb6sOrOk9d0NtM9aTlzWmmftstV7kK96VzNWC 9jqGJxiAegC9c1gpa/YqYkPoOitXEnKzS+AgX4WuFyxS8bQQe3t42RmRCNLIocvN r76SKem+yW1mD/ANtmNL8WqZ2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPPSCLH 0AEJgDFKqzXfH8l7Tj9bMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYH4VqqKps2V6rMYENKWWbYN/PANAnvihekR8v3onXUvaoDo5Bw8nZEseKNnK RwlSgtc/03ff+lFKrL0jI+Zr7+xz+7TR65+GaMMpPJNg/AeXdS25h5pEFlMkp//r RpNdezdsgYlDKUk4CS63W3/+BY9UIGBeL4pp88KxiOljauy6pWXhBsUkbPaQLYns MfAb6V6fZQXOJdSckqdu8E+chcLywHS1w0scYO4PwC6ssKGAz+B28dmJMs36k6QX ALoz5XsQ1sFwVWHXH6SQhjFUhgCh8KlDJeZUqvFfWuvyS9EBGip8bDAuUXYj/qHY 6n+ziu8H14vkO79p9P4copGeSw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:37:03 2026 by rpki-client