$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: VnRxUilVSv9P7adcwgoRJLe91N9A171V+2/ikGBvO7k= Subject key identifier: B9:B6:C3:02:2B:BE:8E:E7:9B:C3:12:D7:8D:C0:65:DF:94:7D:46:E9 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0EA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0E9C Signing time: Sat 04 Apr 2026 17:36:20 +0000 Manifest this update: Sat 04 Apr 2026 17:36:20 +0000 Manifest next update: Sat 11 Apr 2026 17:36:20 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: XJpsALm/lbeHdF0IqMt0rUENKW8PB/qnRvds8O8fM9I=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: 0rmIo24F/xivDkmp1ouEx05UaGse9AnbJguTIYYgkf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3751 (0xea7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Apr 4 17:36:20 2026 GMT Not After : Apr 11 17:36:20 2026 GMT Subject: CN=69d14c14-a27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:9c:25:76:d5:5e:67:25:4c:ab:f5:ad:46: b9:f2:2e:d8:cc:c9:a4:51:4e:58:db:77:39:b5:4f: be:18:e1:bd:a3:c7:fb:b8:1b:4e:28:05:e5:f8:35: 5f:e4:3b:73:bb:66:32:17:7f:8e:8f:63:8a:e4:26: e9:b7:cf:b0:d9:26:41:30:ba:29:7a:1d:2b:86:d4: 3d:48:b3:69:f0:24:6a:4f:21:97:a6:5b:5d:e7:f1: 8e:34:7c:7b:35:f7:4e:4e:88:66:e4:ea:fa:8a:dc: 5d:11:39:c9:57:97:9f:e7:d3:3e:28:24:be:23:74: d3:f3:e3:37:1e:d6:af:d2:5e:b4:76:3a:4b:65:ed: 88:d6:99:84:ca:31:91:51:80:2e:ff:1c:73:3a:9e: ad:e6:cc:40:38:7a:d6:49:22:08:44:c3:71:13:ca: b3:1b:d6:d5:47:ec:32:0c:e3:a4:ea:20:59:25:18: 05:ea:b8:32:f5:03:b1:7b:5b:b1:14:64:c8:aa:cb: 6c:a2:8c:c7:7d:61:7c:3b:94:aa:0c:a5:1f:7e:32: fa:99:b7:d2:ba:b9:09:69:ec:1b:81:c7:b3:39:3f: 95:d6:db:b7:25:27:0e:fe:37:ed:41:f7:e4:55:01: 4c:b0:a6:0e:9e:ce:8e:f3:39:e5:b5:67:20:56:81: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B6:C3:02:2B:BE:8E:E7:9B:C3:12:D7:8D:C0:65:DF:94:7D:46:E9 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:54:d1:bb:95:a8:f1:ba:9d:7b:c2:1c:6c:39:93:eb:02:71: f4:d7:12:3d:a0:76:c8:33:6e:87:ef:7d:82:cd:ee:7b:ae:25: cc:0c:83:cc:dc:be:e7:04:93:64:2b:be:49:c6:75:ea:0d:8a: a8:4c:6f:9e:0e:14:05:c0:28:aa:58:b3:8a:a4:d1:1d:20:a0: f5:dd:ef:c9:f5:5f:3c:c1:7b:07:dc:ba:f4:9f:c3:c5:2a:cb: fd:36:14:f6:43:5f:b5:4f:26:13:50:ce:fc:0e:9e:24:ce:30: 24:81:66:5a:05:14:d4:56:18:66:76:07:67:f7:6c:94:1b:fa: 8c:9c:5e:ab:db:e4:78:e9:6c:d0:06:a9:a0:5b:16:a9:ec:03: db:48:3b:12:54:fe:9e:41:5c:5f:58:dc:b4:ed:c7:d7:b9:99: e4:de:20:f3:6f:87:c9:68:3a:97:b9:a0:8e:31:97:ab:47:cc: 36:db:70:3e:77:2f:ae:2c:e7:4d:3c:ad:a7:39:b6:f7:a5:1f: 85:33:ac:6c:9e:74:f1:b2:30:79:f7:c0:33:4f:4e:0e:0d:13: 55:c4:62:49:1e:c2:6f:48:b9:f3:af:88:87:0d:79:77:44:d0: ba:d2:eb:05:6e:89:8f:56:37:de:4c:fc:94:44:af:85:af:8c: cb:9c:9c:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjYwNDA0MTczNjIwWhcNMjYwNDExMTczNjIwWjAYMRYwFAYD VQQDEw02OWQxNGMxNC1hMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/ScJXbVXmclTKv1rUa58i7YzMmkUU5Y23c5tU++GOG9o8f7uBtOKAXl+DVf 5Dtzu2YyF3+Oj2OK5Cbpt8+w2SZBMLopeh0rhtQ9SLNp8CRqTyGXpltd5/GONHx7 NfdOTohm5Or6itxdETnJV5ef59M+KCS+I3TT8+M3Htav0l60djpLZe2I1pmEyjGR UYAu/xxzOp6t5sxAOHrWSSIIRMNxE8qzG9bVR+wyDOOk6iBZJRgF6rgy9QOxe1ux FGTIqstsoozHfWF8O5SqDKUffjL6mbfSurkJaewbgcezOT+V1tu3JScO/jftQffk VQFMsKYOns6O8znltWcgVoHR7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLm2wwIr vo7nm8MS143AZd+UfUbpMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFTRu5Wo8bqde8IcbDmT6wJx9NcSPaB2yDNuh+99gs3ue64lzAyDzNy+5wST ZCu+ScZ16g2KqExvng4UBcAoqliziqTRHSCg9d3vyfVfPMF7B9y69J/DxSrL/TYU 9kNftU8mE1DO/A6eJM4wJIFmWgUU1FYYZnYHZ/dslBv6jJxeq9vkeOls0AapoFsW qewD20g7ElT+nkFcX1jctO3H17mZ5N4g82+HyWg6l7mgjjGXq0fMNttwPncvrizn TTytpzm296UfhTOsbJ508bIweffAM09ODg0TVcRiSR7Cb0i586+Ihw15d0TQutLr BW6Jj1Y33kz8lESvha+My5ycbw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:34 2026 by rpki-client