$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: aorQPS0ylIZdVRzBEB1WujRN+QDBL44t6LEqaXC1b+E= Subject key identifier: 05:5D:8B:1B:6F:4D:7F:91:47:3C:CE:C4:E1:43:D9:10:C2:69:6B:11 Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 07D8 Signing time: Sat 04 Apr 2026 21:08:15 +0000 Manifest this update: Sat 04 Apr 2026 21:08:14 +0000 Manifest next update: Sat 11 Apr 2026 21:08:14 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: LM9dUr3CjBpOdvWeKYszZJDQNVHrAoxRkO1oB5P/p3c=) 2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=) 3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: Apr 4 21:08:14 2026 GMT Not After : Apr 11 21:08:14 2026 GMT Subject: CN=69d17dbf-f466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:7f:e2:bf:77:7e:c0:e0:59:a0:38:41:db: fb:e6:fb:cd:f2:cd:38:92:54:1f:7e:8e:b8:64:60: 3f:93:64:53:0d:b7:7f:c5:8d:1d:85:a5:d9:45:15: 99:f6:55:c3:11:8a:3b:dc:7c:a3:91:ac:bf:37:3b: 78:54:3f:ad:1c:3e:53:4c:b0:16:27:4d:70:76:d3: 3a:db:74:03:85:13:0b:e6:ae:d2:4b:b2:0b:c4:03: eb:fa:58:eb:c8:83:5e:6d:41:bc:c4:83:ef:f0:9e: 82:8b:1e:95:b9:d3:57:3d:b3:99:08:56:c7:38:34: fc:dd:5b:d9:f6:4f:96:f9:d2:ba:b3:e4:51:da:9a: 3b:41:fe:ea:c3:5f:15:7d:d4:ac:f3:fe:41:b7:55: 14:34:6d:bb:81:b3:02:2d:2c:f6:19:f6:3b:74:77: da:8b:ab:3d:c1:b0:89:28:09:d2:04:05:df:8a:e4: a4:ed:9d:7b:32:bc:43:17:ad:4c:07:53:b5:92:96: 78:8d:0e:22:1e:48:73:26:dc:91:98:11:2c:62:d3: 6a:0e:e6:a8:0d:72:80:24:3f:93:b5:d6:28:ce:de: 98:3b:aa:6c:d9:46:74:3f:e3:a8:15:4b:49:c0:76: 24:c7:5d:c4:bf:2c:0b:ba:19:ec:a2:fa:cc:66:1b: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5D:8B:1B:6F:4D:7F:91:47:3C:CE:C4:E1:43:D9:10:C2:69:6B:11 X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d7:67:06:04:b5:83:04:6f:39:14:c0:e7:1d:6e:1f:fb:8b: 4b:61:a7:c1:07:9c:f4:d7:76:47:5a:90:12:f3:4c:a0:b6:63: 00:fe:17:81:3b:1e:08:17:67:69:27:55:04:4e:90:12:41:d2: 23:5d:c8:c4:d3:7a:72:bd:06:ae:49:27:9c:5e:f3:7f:3e:c8: 9f:c6:1a:2e:af:dc:6e:b1:de:57:01:a3:9b:d3:67:57:78:15: 78:eb:34:4e:ed:df:5f:28:85:f7:47:a4:ba:1f:1a:92:bc:bb: 72:2a:01:63:6d:5b:b4:77:16:e5:f4:5a:86:1c:2a:a2:65:0d: 9f:a0:f3:8b:17:37:c1:0a:14:de:2d:35:be:c5:b2:32:de:56: a3:f4:2d:6b:4f:3a:d1:21:2b:65:b6:62:eb:67:b9:77:8f:a7: a5:b8:9d:9b:46:83:a3:68:93:56:97:7a:3c:81:e9:70:f2:f7: 94:2c:87:29:cd:bd:7c:56:7c:ea:ac:43:70:b0:8f:e4:f6:74: e5:d9:b0:8e:5b:bd:82:dd:61:cb:62:4f:81:22:73:9f:6a:c6: ba:ea:2e:d4:44:1a:b3:b0:c7:59:9c:e5:b4:63:4b:ce:37:b3: b9:2b:67:9e:e5:0a:83:80:6b:20:7f:85:21:7e:3f:3a:f2:b4: 1a:04:e5:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjYwNDA0MjEwODE0WhcNMjYwNDExMjEwODE0WjAYMRYwFAYD VQQDEw02OWQxN2RiZi1mNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqo5/4r93fsDgWaA4Qdv75vvN8s04klQffo64ZGA/k2RTDbd/xY0dhaXZRRWZ 9lXDEYo73Hyjkay/Nzt4VD+tHD5TTLAWJ01wdtM623QDhRML5q7SS7ILxAPr+ljr yINebUG8xIPv8J6Cix6VudNXPbOZCFbHODT83VvZ9k+W+dK6s+RR2po7Qf7qw18V fdSs8/5Bt1UUNG27gbMCLSz2GfY7dHfai6s9wbCJKAnSBAXfiuSk7Z17MrxDF61M B1O1kpZ4jQ4iHkhzJtyRmBEsYtNqDuaoDXKAJD+TtdYozt6YO6ps2UZ0P+OoFUtJ wHYkx13EvywLuhnsovrMZhtv+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVdixtv TX+RRzzOxOFD2RDCaWsRMB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmddnBgS1gwRvORTA5x1uH/uLS2GnwQec9Nd2R1qQEvNMoLZjAP4XgTseCBdn aSdVBE6QEkHSI13IxNN6cr0GrkknnF7zfz7In8YaLq/cbrHeVwGjm9NnV3gVeOs0 Tu3fXyiF90ekuh8akry7cioBY21btHcW5fRahhwqomUNn6Dzixc3wQoU3i01vsWy Mt5Wo/Qta0860SErZbZi62e5d4+npbidm0aDo2iTVpd6PIHpcPL3lCyHKc29fFZ8 6qxDcLCP5PZ05dmwjlu9gt1hy2JPgSJzn2rGuuou1EQas7DHWZzltGNLzjezuStn nuUKg4BrIH+FIX4/OvK0GgTlLw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:27 2026 by rpki-client