$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft File: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json) Hash identifier: twzeOYKiakYpAYF+LjwyevsSMrAR2XFq1Uj2mwwjHNc= Subject key identifier: 83:0C:5E:25:9C:A9:16:80:6B:07:6F:37:0D:2E:F3:9B:A8:FF:16:C7 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft Manifest number: 06C8 Signing time: Mon 20 Apr 2026 22:52:58 +0000 Manifest this update: Mon 20 Apr 2026 22:52:57 +0000 Manifest next update: Mon 27 Apr 2026 22:52:57 +0000 Files and hashes: 1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: VhAdO3Kabys4yv3XlVdOY08J2S5lacoPRr1U02PdBrQ=) 2: 8F8087960EC111F1B64CAA7C3D3D8C67.roa (hash: LK/rL/zltCjg/cuJM9IER3CTRe7bASCArvSQocjl9qA=) 3: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: /ZAwxNwF5BSvUQgJ+crVoivjTBV/Hb6oXXuT2EmJDAU=) 4: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: zwt4jimE5dzItIYvflW2AfnzB22khQhDre8vwGomnT0=) 5: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: VoQrlag/uQljqLBhje8W3GmSgopLeC8gQtggx3LOIyc=) 6: 3B4FFDCA227911F1A65F03CCA4833773.roa (hash: PUzmzuD5bHk7VFgIzT0roiBPsQW1af5ietmADY31t40=) 7: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: VI6voF68QQY7SFnSAbWa5lLgbR1RP7VeGAE4odGtXhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Apr 20 22:52:57 2026 GMT Not After : Apr 27 22:52:57 2026 GMT Subject: CN=69e6ae4a-5ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:c2:e2:5b:bf:36:a9:ab:90:9c:69:d5:3e: 06:49:f0:ef:cc:9b:ce:69:12:aa:1e:b5:67:29:a3: 45:4e:55:50:52:3c:f9:e2:c5:45:3b:3e:df:3b:5d: c7:34:1c:dd:34:83:7d:ce:86:12:71:9e:1d:92:ff: 1f:5e:51:ff:d1:ad:e9:d3:54:72:89:f2:be:cb:0d: 10:bf:5c:cb:a6:88:f6:d6:c9:6c:f6:ee:29:0f:c2: d5:c4:f0:f1:ad:80:d2:b0:2d:70:2a:81:4d:42:ea: fc:e8:2f:c8:a7:5a:2f:6d:23:a6:bd:82:69:b9:db: d9:d6:03:86:79:36:14:67:4e:bb:21:00:9b:19:d1: 8a:85:da:d3:4e:93:71:c0:f8:f7:bb:e2:91:9b:a0: 58:5c:cc:58:f4:20:ab:b9:00:f5:2c:84:79:4d:f9: 0b:df:8f:03:72:9b:65:b2:f8:50:5e:16:c8:e9:f7: b6:05:e1:7d:2b:2a:1b:0f:d3:5b:a8:18:5d:95:2a: c5:d5:9e:92:b9:25:ea:d2:41:8d:f0:75:c8:aa:4a: 02:b7:8a:ba:b1:ad:67:c4:ca:85:e9:57:43:b0:cb: 08:4c:c4:bb:b9:3f:46:5b:ca:47:6f:4f:aa:a5:44: 99:05:9d:e5:5b:10:ba:0b:35:0c:fb:bf:f9:1c:d7: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0C:5E:25:9C:A9:16:80:6B:07:6F:37:0D:2E:F3:9B:A8:FF:16:C7 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f4:4e:ad:55:13:ce:6c:cc:1d:62:55:16:59:41:8e:47:64: 81:b0:b2:30:c6:03:1d:2c:cf:03:ba:e2:c9:ea:78:be:ad:a0: 8b:b7:db:34:6e:21:38:2b:46:0e:96:a1:19:5f:5e:63:1a:4b: 90:5d:1d:a8:b8:db:84:2a:9c:fd:6a:d0:f3:e2:a8:06:78:8d: 16:37:27:79:d3:e9:69:e6:fb:67:b4:e1:1e:4d:32:4f:fd:07: 6e:b0:c1:4f:94:b2:e7:3f:cf:c7:e4:1f:21:d8:72:a2:98:9c: e5:c3:90:67:6a:2f:e1:26:06:62:97:b4:5a:d8:bd:5a:69:b5: 38:67:cf:08:f0:f7:83:20:f4:e0:4a:73:38:76:a8:2b:25:37: 67:00:07:93:d1:7b:a8:5f:49:96:a6:23:5b:b5:78:37:c1:11: ee:63:37:b2:7f:5c:31:17:80:d8:1e:51:98:70:8d:c7:6f:ba: 3a:d4:a1:70:a5:d3:88:ba:2f:a7:30:1e:da:ae:25:e6:21:3d: 87:85:14:2a:f9:8f:26:98:14:bf:57:7d:6f:9f:2e:34:3f:94: 6a:25:db:d4:c8:fb:4e:b0:3a:71:91:2b:81:0c:14:21:05:e3: bf:3c:d9:24:87:bc:0a:10:96:ff:8e:ed:76:8c:9d:c7:c3:29: 65:6e:d3:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwNDIwMjI1MjU3WhcNMjYwNDI3MjI1MjU3WjAYMRYwFAYD VQQDEw02OWU2YWU0YS01ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1/C4lu/NqmrkJxp1T4GSfDvzJvOaRKqHrVnKaNFTlVQUjz54sVFOz7fO13H NBzdNIN9zoYScZ4dkv8fXlH/0a3p01RyifK+yw0Qv1zLpoj21sls9u4pD8LVxPDx rYDSsC1wKoFNQur86C/Ip1ovbSOmvYJpudvZ1gOGeTYUZ067IQCbGdGKhdrTTpNx wPj3u+KRm6BYXMxY9CCruQD1LIR5TfkL348DcptlsvhQXhbI6fe2BeF9KyobD9Nb qBhdlSrF1Z6SuSXq0kGN8HXIqkoCt4q6sa1nxMqF6VdDsMsITMS7uT9GW8pHb0+q pUSZBZ3lWxC6CzUM+7/5HNfkSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMMXiWc qRaAawdvNw0u85uo/xbHMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi8yQ0IxRUVCQUY2NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RB Y0dvWVdET0RYMlhxUEhFQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfROrVUTzmzMHWJVFllBjkdkgbCyMMYDHSzPA7riyep4vq2gi7fbNG4hOCtG DpahGV9eYxpLkF0dqLjbhCqc/WrQ8+KoBniNFjcnedPpaeb7Z7ThHk0yT/0HbrDB T5Sy5z/Px+QfIdhyopic5cOQZ2ov4SYGYpe0Wti9Wmm1OGfPCPD3gyD04EpzOHao KyU3ZwAHk9F7qF9JlqYjW7V4N8ER7mM3sn9cMReA2B5RmHCNx2+6OtShcKXTiLov pzAe2q4l5iE9h4UUKvmPJpgUv1d9b58uND+UaiXb1Mj7TrA6cZErgQwUIQXjvzzZ JIe8ChCW/47tdoydx8MpZW7TYw== -----END CERTIFICATE-----Generated at Tue Apr 21 19:03:56 2026 by rpki-client