$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json) Hash identifier: zkxB5KiFoaqe3NsHlkU3Xu1rxhsYIqr24VGDe8rW68k= Subject key identifier: 5A:3E:19:D2:62:99:E0:D1:F7:04:F4:C5:1F:F4:25:A8:72:0D:43:76 Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft Manifest number: 1D Signing time: Sat 07 Mar 2026 08:08:39 +0000 Manifest this update: Sat 07 Mar 2026 08:08:38 +0000 Manifest next update: Sat 14 Mar 2026 08:08:38 +0000 Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: wgCK2AtndyygYWlRMjoA6OeLSsLbLJrzEBPo3ae2Zgk=) 2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: Mar 7 08:08:38 2026 GMT Not After : Mar 14 08:08:38 2026 GMT Subject: CN=69abdd07-88ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:ea:d4:50:00:24:e4:f1:d9:b1:2f:7f:3a: 7e:fd:bf:c4:00:4f:44:b7:40:c4:9d:39:18:f0:29: 7e:97:eb:e3:f2:e8:9a:31:4a:6d:60:ff:70:0d:29: c6:e6:d2:1c:f4:32:14:cd:82:27:6f:8e:3f:e2:37: e4:9c:b9:6e:4a:f8:51:c1:dd:b6:11:39:cf:20:12: 31:15:4d:cc:56:04:8b:45:e6:40:de:05:49:dc:01: fd:5a:fc:00:da:f7:cd:a5:d5:55:5c:c5:5b:3e:e0: 7d:36:8f:5e:f6:71:d8:bb:e0:fd:b3:89:b3:58:52: 64:e9:a2:4d:40:d5:f4:59:08:11:27:f7:e8:cc:95: 81:57:49:25:93:5e:ea:03:59:53:fa:37:53:c5:18: 4d:9e:7f:fd:4e:6b:fd:8d:fd:bb:69:48:fa:95:44: 49:83:d6:07:e8:39:1b:81:4c:e2:e3:07:6a:eb:7f: 7e:f4:e3:f9:5b:26:11:3b:28:d6:59:da:8e:71:67: 9b:0d:8f:a0:5e:34:e2:87:27:75:5c:fd:e3:35:33: 68:f8:72:68:c7:a7:dd:0f:b6:63:ee:75:8b:39:22: 06:05:30:f5:66:ea:59:a1:31:99:b9:20:ed:ae:d8: d8:f7:38:d3:89:e6:57:05:3e:06:68:c1:63:3d:1d: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3E:19:D2:62:99:E0:D1:F7:04:F4:C5:1F:F4:25:A8:72:0D:43:76 X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:cb:c6:00:77:a5:f3:5e:72:a3:ac:46:03:3e:b7:14:8c: ee:56:5f:6d:22:b3:63:ab:34:7b:49:21:36:0d:94:cf:32:59: 9f:ba:0b:8a:3a:0a:e5:29:71:ac:37:54:81:ce:fb:55:70:46: 33:c5:53:7f:38:5c:42:60:ce:80:ab:d2:2d:36:63:fc:db:d6: 52:9b:a1:7e:30:d8:ad:d0:66:d8:4a:ec:10:47:9d:15:c3:a4: fd:c2:04:9e:6d:2d:47:de:15:d5:5c:76:dd:4a:da:36:3b:20: 87:c0:54:4c:91:39:a8:64:eb:08:75:17:97:4a:7d:a7:b8:a7: 1c:ac:1d:bd:22:54:df:5e:f4:5b:7d:db:9f:bc:75:bb:1f:5e: 6f:d8:57:4e:34:cb:86:ec:af:68:c3:81:65:45:f5:f3:83:89: a5:97:41:63:17:53:51:83:90:f3:d5:2c:f1:7c:c1:b0:a6:95: d2:01:8f:49:80:a4:46:57:2d:ab:d2:87:b5:e3:f7:25:75:c8: 05:bb:b3:bc:a6:60:5d:93:43:79:b1:ec:12:62:0f:cf:b3:bb: d6:b6:19:05:a4:ed:3f:97:40:82:a1:e7:65:e2:f5:51:f6:9f: 23:1e:c3:ce:70:39:2c:61:b4:60:b0:c9:b4:72:ac:fd:37:61: ab:f7:4d:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjAzMDcwODA4MzhaFw0yNjAzMTQwODA4MzhaMBgxFjAUBgNV BAMTDTY5YWJkZDA3LTg4ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3KurUUAAk5PHZsS9/On79v8QAT0S3QMSdORjwKX6X6+Py6JoxSm1g/3ANKcbm 0hz0MhTNgidvjj/iN+ScuW5K+FHB3bYROc8gEjEVTcxWBItF5kDeBUncAf1a/ADa 982l1VVcxVs+4H02j172cdi74P2zibNYUmTpok1A1fRZCBEn9+jMlYFXSSWTXuoD WVP6N1PFGE2ef/1Oa/2N/btpSPqVREmD1gfoORuBTOLjB2rrf3704/lbJhE7KNZZ 2o5xZ5sNj6BeNOKHJ3Vc/eM1M2j4cmjHp90PtmPudYs5IgYFMPVm6lmhMZm5IO2u 2Nj3ONOJ5lcFPgZowWM9HaF/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWj4Z0mKZ 4NH3BPTFH/QlqHINQ3YwHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QjA5L0YzMDJFNTM0RjRGRTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4 VWVLdzZ0V3BxdFBuQnZVWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqC8vGAHel815yo6xGAz63FIzuVl9tIrNjqzR7SSE2DZTPMlmfuguKOgrlKXGs N1SBzvtVcEYzxVN/OFxCYM6Aq9ItNmP829ZSm6F+MNit0GbYSuwQR50Vw6T9wgSe bS1H3hXVXHbdSto2OyCHwFRMkTmoZOsIdReXSn2nuKccrB29IlTfXvRbfdufvHW7 H15v2FdONMuG7K9ow4FlRfXzg4mll0FjF1NRg5Dz1SzxfMGwppXSAY9JgKRGVy2r 0oe14/cldcgFu7O8pmBdk0N5sewSYg/Ps7vWthkFpO0/l0CCoedl4vVR9p8jHsPO cDksYbRgsMm0cqz9N2Gr901L -----END CERTIFICATE-----Generated at Sat Mar 7 14:35:35 2026 by rpki-client