$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: IWCGd7wPhUyOMUzFNH/rKUf9mtgKTIs9S7RAgmz+lwc= Subject key identifier: D2:54:14:D3:1E:FB:83:E6:AB:F0:DD:8A:00:D3:02:4A:F7:FE:F5:E0 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 70 Signing time: Sun 05 Apr 2026 07:14:05 +0000 Manifest this update: Sun 05 Apr 2026 07:14:05 +0000 Manifest next update: Sun 12 Apr 2026 07:14:05 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: REZ4+kn1tKBG0fD8eaqORkbNn0ocTxhSr5Dy8hAaMAA=) 2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=) 3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Apr 5 07:14:05 2026 GMT Not After : Apr 12 07:14:05 2026 GMT Subject: CN=69d20bbd-8a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:59:1e:df:68:21:b5:70:c8:56:93:3a:28: 85:7c:f9:a9:a2:5c:5b:8b:46:f8:31:0e:62:6b:a7: ea:68:35:22:da:d1:4a:b6:f8:af:94:8b:92:fa:b3: 8b:4c:7c:dc:f8:27:44:ea:c3:6e:e2:0d:e6:9f:91: d8:5d:98:1c:70:28:8f:af:96:f5:1b:0b:43:b0:5d: dc:4e:84:aa:9c:84:a6:51:75:16:23:a8:04:7b:b8: c3:e5:e4:9f:13:57:53:d4:a1:05:3d:b6:f7:e1:d8: 51:c6:b6:a4:d1:c1:93:70:8a:6f:30:ff:e9:3d:58: c8:6b:cd:d8:49:d1:6e:15:94:a2:07:d4:0c:d8:7a: 54:34:14:8d:e4:a0:2c:92:a4:25:8c:34:53:80:c8: 93:1f:d7:20:73:79:37:f5:16:c2:f9:53:2d:c7:10: 25:05:4d:ed:57:9d:a5:3c:e2:6a:63:80:b5:b6:18: 4d:09:29:51:39:9e:04:82:a1:56:a3:ee:ab:47:02: a2:26:57:39:b7:6b:59:f1:86:35:97:44:3f:36:6c: 6d:ad:e8:04:ae:d4:c5:a8:6e:97:95:ca:f2:8e:a2: 1c:4b:58:54:83:85:cc:41:56:c7:d3:36:0b:5b:23: 20:81:c1:1d:3e:5a:d3:f7:ab:2e:be:61:a4:47:9c: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:14:D3:1E:FB:83:E6:AB:F0:DD:8A:00:D3:02:4A:F7:FE:F5:E0 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0d:eb:07:78:97:9f:45:b1:7b:66:aa:5c:22:df:f9:9f:bc: 9c:39:c8:65:ea:bb:c3:76:62:28:86:c3:f3:4a:b9:95:6e:47: 25:8a:9c:a0:0b:33:d2:b5:b1:e7:4e:d9:9c:dc:c7:4d:14:41: 2a:79:86:c7:82:01:d7:92:7c:02:b2:fd:2f:18:49:ec:c6:3a: 6c:bd:4d:17:69:1b:c4:ee:2e:ea:6b:a2:ee:7f:f7:aa:c2:b3: 7b:12:0b:22:c9:9f:ea:88:93:5e:3d:ed:b1:57:57:72:18:49: eb:e4:e3:3b:9e:47:85:c8:3c:f6:76:40:5e:f3:26:f4:61:8e: d6:2c:90:fa:77:b5:cd:98:48:42:23:f5:85:af:eb:fe:fa:b6: 59:4d:57:44:0a:61:03:43:40:63:e2:c8:f7:20:0b:2b:31:5e: d8:e0:4e:66:b6:32:c9:b9:a0:b7:09:aa:4d:7f:17:98:1f:f5: 74:04:93:db:e2:6a:be:fe:a1:c1:d6:07:52:49:5d:70:a4:13: 90:bf:87:2c:d3:f1:ce:c2:e3:ef:aa:c0:70:5b:e5:9b:0c:d2: b4:f7:c7:18:bb:89:c4:31:ce:af:26:3d:15:0e:1f:f2:38:3a: b5:4a:d5:e9:95:e7:06:a2:28:3d:62:67:0b:e6:65:14:0d:ca: 21:97:30:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNjA0MDUwNzE0MDVaFw0yNjA0MTIwNzE0MDVaMBgxFjAUBgNV BAMTDTY5ZDIwYmJkLThhM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzrlke32ghtXDIVpM6KIV8+amiXFuLRvgxDmJrp+poNSLa0Uq2+K+Ui5L6s4tM fNz4J0Tqw27iDeafkdhdmBxwKI+vlvUbC0OwXdxOhKqchKZRdRYjqAR7uMPl5J8T V1PUoQU9tvfh2FHGtqTRwZNwim8w/+k9WMhrzdhJ0W4VlKIH1AzYelQ0FI3koCyS pCWMNFOAyJMf1yBzeTf1FsL5Uy3HECUFTe1XnaU84mpjgLW2GE0JKVE5ngSCoVaj 7qtHAqImVzm3a1nxhjWXRD82bG2t6ASu1MWobpeVyvKOohxLWFSDhcxBVsfTNgtb IyCBwR0+WtP3qy6+YaRHnLXxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0lQU0x77 g+ar8N2KANMCSvf+9eAwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvDesHeJefRbF7ZqpcIt/5n7ycOchl6rvDdmIohsPzSrmVbkclipygCzPStbHn Ttmc3MdNFEEqeYbHggHXknwCsv0vGEnsxjpsvU0XaRvE7i7qa6Luf/eqwrN7Egsi yZ/qiJNePe2xV1dyGEnr5OM7nkeFyDz2dkBe8yb0YY7WLJD6d7XNmEhCI/WFr+v+ +rZZTVdECmEDQ0Bj4sj3IAsrMV7Y4E5mtjLJuaC3CapNfxeYH/V0BJPb4mq+/qHB 1gdSSV1wpBOQv4cs0/HOwuPvqsBwW+WbDNK098cYu4nEMc6vJj0VDh/yODq1StXp lecGoig9YmcL5mUUDcohlzDl -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:22 2026 by rpki-client