$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: WRQkjKrecUpVVV5sYHV6vm+AF1sltKCiThxGnMMRRkU= Subject key identifier: 41:2C:72:D9:25:1A:60:58:D2:49:7B:23:C1:67:91:C6:8E:A4:AF:EC Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0EC6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0EB9 Signing time: Mon 02 Mar 2026 17:40:24 +0000 Manifest this update: Mon 02 Mar 2026 17:40:24 +0000 Manifest next update: Mon 09 Mar 2026 17:40:24 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: 1z4aXjFZDTrdhBoMwGlJGEXyFNPBQAOQGq6+s5k+Y2M=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: JeKAJdqbPEiYDYAJ1XzRDXMOefEFjZmJoWdofrNUX9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 17:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3782 (0xec6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: Mar 2 17:40:24 2026 GMT Not After : Mar 9 17:40:24 2026 GMT Subject: CN=69a5cb88-64ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:a9:5b:86:85:d5:db:1c:a4:ef:01:c9:39: 9a:2f:75:b3:ec:a6:db:c0:61:2c:d3:4a:1e:57:91: b8:64:a5:d0:25:bf:81:a5:08:f7:ce:33:88:a6:7f: 5f:71:a3:e7:f3:44:e2:56:e9:c1:a0:89:31:97:82: 59:03:8c:33:ab:86:82:14:c3:47:74:48:d9:3a:f7: db:db:4c:cc:1a:74:ea:58:f3:ea:28:bb:8c:e0:94: 99:9d:c6:bd:82:69:90:a6:61:87:49:5c:fa:a4:17: d9:9e:97:de:0a:54:36:7d:3a:7a:c5:6b:4f:1e:a8: d4:f2:ab:50:d2:37:49:85:98:fb:cf:2e:33:3b:d2: 12:8e:30:f7:a9:ea:fe:2d:1e:44:86:fb:3d:9c:96: a1:d7:45:f4:3c:a5:fd:7f:ef:b4:1e:70:62:99:e7: bc:88:82:01:f8:28:e8:e2:b3:e7:0f:52:62:3e:87: cf:80:af:c8:e8:ee:03:e3:2a:8a:65:58:07:8b:aa: 77:de:22:8d:d8:e1:9c:88:f5:6a:90:31:b9:73:21: 9b:aa:9f:1f:c0:cc:e0:32:6c:c8:25:8d:35:d5:05: c7:60:a8:15:7b:41:75:2c:cf:e6:e3:ed:b2:2a:65: 86:32:c8:8f:37:f2:f5:48:33:72:16:38:fa:ec:2f: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2C:72:D9:25:1A:60:58:D2:49:7B:23:C1:67:91:C6:8E:A4:AF:EC X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e0:1d:3e:ea:b8:c0:31:0c:da:49:0d:5a:b0:0c:85:b2:36: d7:d2:ba:3a:02:e3:06:29:a3:52:46:c3:ef:f0:b1:6f:66:e3: 2d:63:14:f0:85:68:66:db:94:fe:9e:ea:b9:0c:a7:07:9e:d6: 26:ca:b3:e5:95:71:52:9b:d0:a8:c3:1b:75:58:ca:c7:9f:d4: 91:ac:72:00:72:98:ca:42:ad:e5:6f:b4:cd:9a:be:a6:09:e0: 49:a0:2f:9b:f7:3d:93:00:7e:f7:30:ad:9c:3b:81:d9:c8:d9: 46:be:15:56:18:20:82:8b:8b:b2:2d:12:01:38:57:57:a7:a0: c4:b7:fd:19:8b:52:f2:d3:47:84:c3:4f:72:88:87:84:93:14: f8:df:66:43:7c:8e:91:54:ed:b3:93:18:96:6e:fe:0b:61:5c: a9:db:7b:e0:95:cb:d7:33:eb:b1:5f:f4:2f:d2:2b:ae:63:ee: e3:ab:94:ee:f0:6a:d4:95:2f:b0:09:21:40:13:ca:41:c2:a9: 3b:38:e0:48:cb:78:b9:e9:ea:19:3e:cb:89:87:88:3a:6f:e6: c5:77:ff:00:c6:ef:4f:82:de:09:18:51:27:7e:ba:4b:c2:88: 2c:77:81:71:86:2c:56:e0:4c:dc:57:6c:5f:3c:68:68:7b:92: 73:64:d5:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjYwMzAyMTc0MDI0WhcNMjYwMzA5MTc0MDI0WjAYMRYwFAYD VQQDEw02OWE1Y2I4OC02NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj8CpW4aF1dscpO8ByTmaL3Wz7KbbwGEs00oeV5G4ZKXQJb+BpQj3zjOIpn9f caPn80TiVunBoIkxl4JZA4wzq4aCFMNHdEjZOvfb20zMGnTqWPPqKLuM4JSZnca9 gmmQpmGHSVz6pBfZnpfeClQ2fTp6xWtPHqjU8qtQ0jdJhZj7zy4zO9ISjjD3qer+ LR5Ehvs9nJah10X0PKX9f++0HnBimee8iIIB+Cjo4rPnD1JiPofPgK/I6O4D4yqK ZVgHi6p33iKN2OGciPVqkDG5cyGbqp8fwMzgMmzIJY011QXHYKgVe0F1LM/m4+2y KmWGMsiPN/L1SDNyFjj67C/RkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEsctkl GmBY0kl7I8FnkcaOpK/sMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMeAdPuq4wDEM2kkNWrAMhbI219K6OgLjBimjUkbD7/Cxb2bjLWMU8IVoZtuU /p7quQynB57WJsqz5ZVxUpvQqMMbdVjKx5/UkaxyAHKYykKt5W+0zZq+pgngSaAv m/c9kwB+9zCtnDuB2cjZRr4VVhgggouLsi0SAThXV6egxLf9GYtS8tNHhMNPcoiH hJMU+N9mQ3yOkVTts5MYlm7+C2Fcqdt74JXL1zPrsV/0L9IrrmPu46uU7vBq1JUv sAkhQBPKQcKpOzjgSMt4uenqGT7LiYeIOm/mxXf/AMbvT4LeCRhRJ366S8KILHeB cYYsVuBM3FdsXzxoaHuSc2TVkw== -----END CERTIFICATE-----Generated at Wed Mar 4 08:20:30 2026 by rpki-client