$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: k+RaKQq1vTZQIlN+gjdTcaaCBTwEOqugCe3ABX+B/8U= Subject key identifier: 45:6D:C5:3C:75:61:54:00:CF:CE:7D:26:D7:C4:22:70:1B:69:E5:BB Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 0108 Signing time: Sun 05 Apr 2026 05:32:14 +0000 Manifest this update: Sun 05 Apr 2026 05:32:13 +0000 Manifest next update: Sun 12 Apr 2026 05:32:13 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: MCjrcMOeBLKOYkYdsaPJnTBudyI2WWIxf/j/FPTTAo0=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: kXIL4LSVHjTAmVfJOU7g+OrmcpQ5rxALmYlyD25Zr5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Apr 5 05:32:13 2026 GMT Not After : Apr 12 05:32:13 2026 GMT Subject: CN=69d1f3de-3dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:71:cf:67:ce:ba:1f:fb:1f:6c:8a:12:c8: f2:e0:6b:b1:26:a8:5d:58:c9:ea:04:75:b3:8b:44: ef:ae:60:b1:b7:40:cc:89:36:39:b6:e8:0a:9e:2f: 04:0b:d3:fb:1b:df:52:02:5c:41:9b:ba:14:6a:c6: 0a:09:ed:a5:3d:f6:d4:6d:b7:2f:5b:7b:8b:e3:84: ed:1e:a1:14:af:86:c8:22:d9:cf:5b:6c:3c:61:3b: 50:8a:57:dc:78:5c:a9:63:3d:89:dc:3a:50:9f:9d: 03:81:44:56:d6:ce:d4:41:ac:c4:8a:f6:fc:73:9e: 46:10:f3:84:54:eb:83:e7:6c:dc:3e:5b:8b:86:33: c0:5d:f0:82:77:5b:eb:9d:a4:8f:1a:85:03:8b:14: bd:34:bf:2c:04:64:71:51:cf:4e:b3:0d:aa:97:48: fa:ec:d4:d0:5b:f5:11:31:83:2f:2a:61:cc:e5:f1: e6:de:a0:ea:b9:29:09:b2:51:bd:90:86:33:71:1f: ef:96:69:f0:05:72:fc:06:c3:08:c0:a3:ac:36:c3: a5:16:f4:14:e9:ac:6a:26:42:fe:b8:ad:f8:75:5f: f3:04:45:99:04:54:51:66:7a:80:1e:d1:2f:da:40: 3f:52:a4:39:b5:e1:ea:7c:f1:14:fc:14:f1:33:89: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:C5:3C:75:61:54:00:CF:CE:7D:26:D7:C4:22:70:1B:69:E5:BB X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:65:73:04:f7:2f:85:49:b0:c6:6b:d7:c6:9f:f3:97:98:9c: 08:54:e0:31:91:c2:62:57:68:29:d1:01:76:00:c3:91:a1:1b: 55:a7:5e:ae:e1:53:a3:e5:8c:9d:64:75:dc:69:d4:d9:1f:0c: 64:27:0b:f9:83:d5:42:9c:c4:50:d4:b0:3b:eb:03:6f:a2:62: e6:50:c4:b3:c5:9b:0c:a6:87:d2:d6:02:71:25:30:d1:4e:45: e8:9b:9a:29:36:4b:a6:7d:7b:d9:48:6b:c3:b0:58:3d:1d:93: 9a:0f:2f:04:e5:f7:4c:aa:b8:5a:71:c3:f2:c7:bb:05:ce:c5: ab:45:27:9a:72:c4:1e:8b:74:44:2b:fd:51:35:b2:39:76:b5: 94:f2:b5:f9:1f:7d:60:21:50:1c:8e:fa:bc:03:41:64:2a:38: 7b:11:09:36:10:0b:da:92:e7:74:96:94:75:20:9c:70:4b:bc: 67:49:4b:e2:1d:1d:53:33:3a:cc:88:83:d7:97:2f:ab:58:25: a9:a2:e2:3a:08:73:30:55:42:81:6a:80:d7:19:2f:4a:67:bc: ac:40:6e:6d:be:86:03:d7:30:06:64:b7:ed:91:5c:51:e3:91: 6a:0f:96:cc:63:5c:8d:be:f0:13:dd:ae:9f:a5:6e:e0:4a:5b: cc:27:c3:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4 OUM1ODcyQTQwHhcNMjYwNDA1MDUzMjEzWhcNMjYwNDEyMDUzMjEzWjAYMRYwFAYD VQQDEw02OWQxZjNkZS0zZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPRxz2fOuh/7H2yKEsjy4GuxJqhdWMnqBHWzi0TvrmCxt0DMiTY5tugKni8E C9P7G99SAlxBm7oUasYKCe2lPfbUbbcvW3uL44TtHqEUr4bIItnPW2w8YTtQilfc eFypYz2J3DpQn50DgURW1s7UQazEivb8c55GEPOEVOuD52zcPluLhjPAXfCCd1vr naSPGoUDixS9NL8sBGRxUc9Osw2ql0j67NTQW/URMYMvKmHM5fHm3qDquSkJslG9 kIYzcR/vlmnwBXL8BsMIwKOsNsOlFvQU6axqJkL+uK34dV/zBEWZBFRRZnqAHtEv 2kA/UqQ5teHqfPEU/BTxM4kFgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVtxTx1 YVQAz859JtfEInAbaeW7MB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha Rk1mbUtGM3B4V2FKeFljcVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACmVzBPcvhUmwxmvXxp/zl5icCFTgMZHCYldoKdEBdgDDkaEbVaderuFTo+WM nWR13GnU2R8MZCcL+YPVQpzEUNSwO+sDb6Ji5lDEs8WbDKaH0tYCcSUw0U5F6Jua KTZLpn172Uhrw7BYPR2Tmg8vBOX3TKq4WnHD8se7Bc7Fq0UnmnLEHot0RCv9UTWy OXa1lPK1+R99YCFQHI76vANBZCo4exEJNhAL2pLndJaUdSCccEu8Z0lL4h0dUzM6 zIiD15cvq1glqaLiOghzMFVCgWqA1xkvSme8rEBubb6GA9cwBmS37ZFcUeORag+W zGNcjb7wE92un6Vu4EpbzCfDRQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:33 2026 by rpki-client