$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: vjC+hHyA4X9FbJPGzBHpc6iu8waZh5yjRakg9c3XcNs= Subject key identifier: F5:88:21:C3:D5:84:70:61:9E:7F:1F:1F:52:44:23:A9:B3:8D:A8:9E Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 03C8 Signing time: Sat 21 Mar 2026 00:07:31 +0000 Manifest this update: Sat 21 Mar 2026 00:07:31 +0000 Manifest next update: Sat 28 Mar 2026 00:07:31 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: gkpSE0nZDAyCmBkAD9st+RF3Wg6lcyy8HvdMc0X0AAQ=) 2: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: xMR/9VLxhNzTjgVdcqeCpKtEJ++jbZKm5f1wzo+8kac=) 3: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 7LRK+KcwEOnWS3ymmi8vjxn0ffhWtnXXLkl7lUy8srI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Mar 21 00:07:31 2026 GMT Not After : Mar 28 00:07:31 2026 GMT Subject: CN=69bde143-08cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:6b:16:5e:f7:3b:fb:12:e2:bc:e4:1c:cf: bc:7f:50:c1:c1:b5:5c:7d:da:29:5b:62:ef:97:aa: 3d:57:79:b6:08:90:00:a4:bf:9f:29:42:0d:6d:3b: 2e:ff:02:8a:75:bc:cc:ec:ca:16:54:3c:6e:99:16: ca:40:bd:bf:75:ee:c3:11:2d:40:bb:59:71:dd:eb: a2:b8:b0:36:a3:fe:c2:01:0d:77:5d:2e:51:89:ae: 44:54:ce:cc:a6:d1:c9:8f:ab:95:68:1c:68:a2:9e: 4c:19:c8:8e:a9:9e:0a:c0:64:56:c4:d5:15:10:bf: 3a:9a:33:3d:9e:2f:82:13:32:a4:17:8e:dc:69:e0: 4d:47:62:b0:6b:88:83:c1:61:94:b0:ec:20:8d:40: 6a:ef:8f:8a:c0:44:2e:58:c3:40:62:d1:c3:6b:26: d9:2d:aa:94:98:10:46:b6:e5:7d:83:33:bf:c8:13: d2:42:17:2f:89:ce:d5:e5:cc:14:f8:f7:78:7c:36: f4:b6:a6:2b:46:70:c5:88:ff:5d:9e:94:4d:b0:1a: 1d:ea:ec:35:bc:53:17:36:1e:28:b3:59:f8:4b:e7: d7:a7:fa:43:b4:33:74:1c:9a:c0:96:1c:36:b3:84: dd:c3:1d:2a:06:26:89:6e:20:cb:cf:1d:9f:3e:ef: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:88:21:C3:D5:84:70:61:9E:7F:1F:1F:52:44:23:A9:B3:8D:A8:9E X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c0:62:61:ee:d9:fc:d6:3b:63:19:36:4c:20:44:eb:f5:f4: 82:f2:50:b7:15:2e:3a:f7:0f:7d:09:df:c6:6f:69:c1:eb:78: d5:bc:7b:46:5c:e9:28:36:c1:7b:bc:00:4b:fb:c4:2c:c5:2d: 5c:ec:5a:36:6d:32:e0:6b:f1:dd:32:78:56:af:ff:2c:13:c6: 08:fd:82:d4:31:40:ef:c3:30:1f:25:6f:e9:1e:14:61:38:df: 65:2c:0b:5e:9a:66:1a:95:bd:76:d1:f1:32:a9:d3:69:a7:c3: c0:51:fe:6d:3d:7b:f1:00:20:d9:a2:03:1b:d2:17:45:1d:27: ce:39:f5:78:81:70:4c:2f:1b:3c:b8:2e:e2:ca:f7:ae:82:78: 2d:54:29:9a:57:25:8d:c2:60:5a:a9:2e:c6:a9:2f:58:f2:33: ea:8e:1e:a7:30:b2:cf:b0:c5:d9:21:89:aa:0d:fa:e2:46:ea: b4:d8:40:8e:0f:63:43:aa:8c:e6:8f:93:d1:89:8b:8a:fc:d9: e3:e2:ba:4f:96:de:85:62:64:b1:5f:eb:df:f6:ea:49:00:bf: 3c:68:24:3b:b1:40:14:90:20:45:36:d3:04:fb:d1:13:14:b7: 92:09:87:f4:19:bb:6c:8f:3e:d7:c4:68:13:20:06:0d:75:a3: 4c:bb:4a:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjYwMzIxMDAwNzMxWhcNMjYwMzI4MDAwNzMxWjAYMRYwFAYD VQQDEw02OWJkZTE0My0wOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oNrFl73O/sS4rzkHM+8f1DBwbVcfdopW2Lvl6o9V3m2CJAApL+fKUINbTsu /wKKdbzM7MoWVDxumRbKQL2/de7DES1Au1lx3euiuLA2o/7CAQ13XS5Ria5EVM7M ptHJj6uVaBxoop5MGciOqZ4KwGRWxNUVEL86mjM9ni+CEzKkF47caeBNR2Kwa4iD wWGUsOwgjUBq74+KwEQuWMNAYtHDaybZLaqUmBBGtuV9gzO/yBPSQhcvic7V5cwU +Pd4fDb0tqYrRnDFiP9dnpRNsBod6uw1vFMXNh4os1n4S+fXp/pDtDN0HJrAlhw2 s4Tdwx0qBiaJbiDLzx2fPu+oGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWIIcPV hHBhnn8fH1JEI6mzjaieMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArsBiYe7Z/NY7Yxk2TCBE6/X0gvJQtxUuOvcPfQnfxm9pwet41bx7RlzpKDbB e7wAS/vELMUtXOxaNm0y4Gvx3TJ4Vq//LBPGCP2C1DFA78MwHyVv6R4UYTjfZSwL XppmGpW9dtHxMqnTaafDwFH+bT178QAg2aIDG9IXRR0nzjn1eIFwTC8bPLgu4sr3 roJ4LVQpmlcljcJgWqkuxqkvWPIz6o4epzCyz7DF2SGJqg364kbqtNhAjg9jQ6qM 5o+T0YmLivzZ4+K6T5behWJksV/r3/bqSQC/PGgkO7FAFJAgRTbTBPvRExS3kgmH 9Bm7bI8+18RoEyAGDXWjTLtKww== -----END CERTIFICATE-----Generated at Sun Mar 22 00:09:03 2026 by rpki-client