$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: OeESreket9TeZzOMzWj2TysMcbCKqOsA66S1WQK5W6Q= Subject key identifier: 45:2C:D9:38:1D:DE:B1:71:12:09:3A:24:9A:FE:2A:3C:79:C8:48:B0 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 35EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 358C Signing time: Mon 20 Apr 2026 14:22:45 +0000 Manifest this update: Mon 20 Apr 2026 14:22:45 +0000 Manifest next update: Mon 27 Apr 2026 14:22:45 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: blNZCOLG/6yK+AAS7LHQ288H5qxtkowlDEsFUMveMgc=) 2: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: HkNBHfCCxWQ28dFsr4VLP9uYL5uGGo+V0spZFxOBLiI=) 3: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xJWTRRKyuZjkvrJwtVub0K0nYQi/ZGucKzB1ISqRPw4=) 4: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: XAFPiyCkUajmfqGSLHpWXaC7zQuAH4W6AGpUVOedZk4=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: l7WAwvcZVKlat81bCLOlMjC2QBKLBCvz0UaEYCXONlg=) 6: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: kkJ4rjLr4UzQN8c3HU8Z5z8wwvFPs1puIf6qJX6ykA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13804 (0x35ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Apr 20 14:22:45 2026 GMT Not After : Apr 27 14:22:45 2026 GMT Subject: CN=69e636b5-0233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:b4:e8:3e:c9:a5:3f:15:fb:a3:55:8e:a4: f3:10:a6:db:8f:fe:fc:2b:13:dd:fd:f3:c9:58:96: cf:aa:43:72:35:16:bf:fe:86:84:d2:f1:61:3b:5e: 66:a9:46:f0:84:c7:d2:d4:a7:5b:ef:73:99:86:ba: 45:8a:f4:65:6a:c2:db:dc:b9:f7:5f:74:33:ac:08: ea:de:57:63:07:82:7b:19:78:97:54:6b:3c:a9:78: 58:f7:2c:ee:0a:f5:7a:c2:45:1c:4e:0a:5e:3e:1f: d5:d4:19:d6:0b:9d:91:a8:e2:65:f7:b6:af:ec:78: 04:d2:92:23:24:a5:88:51:13:13:97:bb:76:75:04: 5f:0a:8d:97:9c:35:e3:c0:03:f9:9c:38:b2:aa:58: 6d:12:ad:c5:f0:d9:4c:cc:e5:0d:89:19:51:8f:1d: d1:ff:5e:61:77:fe:88:f9:f6:77:d2:6c:56:01:98: 85:52:89:d6:67:43:b1:9e:4f:87:a2:b0:00:1a:8d: 64:62:0d:42:76:3f:3e:16:f1:8f:c3:48:18:42:8c: 78:8f:e1:17:d9:71:36:d7:1a:cd:1b:7b:4c:9a:57: ae:76:85:68:73:1c:96:0f:e6:fb:31:4b:cb:a5:65: f8:a7:59:f5:1a:48:21:0b:54:12:6d:0f:09:78:31: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:D9:38:1D:DE:B1:71:12:09:3A:24:9A:FE:2A:3C:79:C8:48:B0 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:1c:b1:4b:d9:be:c3:e2:d8:28:53:9d:77:2d:96:e8:e2:d1: 89:89:af:29:13:91:f8:40:7e:9c:bd:41:0c:29:40:5e:3d:50: 22:bc:f1:54:74:78:16:1f:ef:6f:71:74:ae:a7:4b:aa:94:e4: ea:51:bd:f2:90:04:02:27:89:fb:5b:cc:d7:89:01:71:c6:d4: 9f:22:79:9e:48:59:dd:01:6a:1c:4c:14:bb:64:ab:ab:7e:1d: 71:62:21:e7:3a:78:c9:43:35:ba:c0:b3:02:f9:4f:e5:94:18: 31:e2:bf:74:cb:b7:c3:f3:b1:a1:f1:54:08:58:5d:75:b7:78: a2:07:23:ee:34:22:30:55:7d:a6:7c:fc:6a:0e:28:3f:b6:34: 76:1d:6a:43:c8:bf:45:c8:6e:af:68:16:78:2a:d6:4a:2d:c3: 63:4d:d2:f9:1e:8f:a7:b9:2b:5a:6b:4a:c8:c5:08:6a:6a:be: 61:64:8c:93:5d:48:d3:be:5c:73:f4:d4:ca:53:33:28:98:52: 67:c6:0c:45:ed:59:b5:2b:22:3f:58:6a:0e:6d:45:7e:cc:43: be:93:e9:a8:06:7f:fb:0e:cc:3d:f0:74:87:a5:16:57:00:dc: ed:69:4d:49:5c:f8:3d:e8:5c:1f:8b:35:ff:96:3d:31:1b:ac: ae:c6:2d:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjYwNDIwMTQyMjQ1WhcNMjYwNDI3MTQyMjQ1WjAYMRYwFAYD VQQDEw02OWU2MzZiNS0wMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzq06D7JpT8V+6NVjqTzEKbbj/78KxPd/fPJWJbPqkNyNRa//oaE0vFhO15m qUbwhMfS1Kdb73OZhrpFivRlasLb3Ln3X3QzrAjq3ldjB4J7GXiXVGs8qXhY9yzu CvV6wkUcTgpePh/V1BnWC52RqOJl97av7HgE0pIjJKWIURMTl7t2dQRfCo2XnDXj wAP5nDiyqlhtEq3F8NlMzOUNiRlRjx3R/15hd/6I+fZ30mxWAZiFUonWZ0Oxnk+H orAAGo1kYg1Cdj8+FvGPw0gYQox4j+EX2XE21xrNG3tMmleudoVocxyWD+b7MUvL pWX4p1n1GkghC1QSbQ8JeDHnGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUs2Tgd 3rFxEgk6JJr+Kjx5yEiwMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvxyxS9m+w+LYKFOddy2W6OLRiYmvKROR+EB+nL1BDClAXj1QIrzxVHR4Fh/v b3F0rqdLqpTk6lG98pAEAieJ+1vM14kBccbUnyJ5nkhZ3QFqHEwUu2Srq34dcWIh 5zp4yUM1usCzAvlP5ZQYMeK/dMu3w/OxofFUCFhddbd4ogcj7jQiMFV9pnz8ag4o P7Y0dh1qQ8i/Rchur2gWeCrWSi3DY03S+R6Pp7krWmtKyMUIamq+YWSMk11I075c c/TUylMzKJhSZ8YMRe1ZtSsiP1hqDm1FfsxDvpPpqAZ/+w7MPfB0h6UWVwDc7WlN SVz4PehcH4s1/5Y9MRusrsYt/Q== -----END CERTIFICATE-----Generated at Wed Apr 22 04:09:40 2026 by rpki-client