$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: 6q/2XCfTnHC1uAej9ZaOxZMh4a0NJtJi4Ir+vubMjGw= Subject key identifier: EC:32:97:24:C8:9D:7D:43:BB:4D:31:0B:F3:58:54:03:BE:08:7E:68 Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 3A Signing time: Tue 03 Mar 2026 06:26:34 +0000 Manifest this update: Tue 03 Mar 2026 06:26:33 +0000 Manifest next update: Tue 10 Mar 2026 06:26:33 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: NnKtDcMgTs+ywA+ip03hv/Iyj4wZKmG3JU6QU6mM3wU=) 2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: SHU1IW+sGBKNuhm5nQ8FmAnlaTsiFtzoH114y5IAowI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Mar 3 06:26:33 2026 GMT Not After : Mar 10 06:26:33 2026 GMT Subject: CN=69a67f1a-67d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:2a:c3:61:fa:52:92:90:7f:69:55:b5:14: 59:51:ad:17:64:91:73:67:db:96:7c:ab:47:cf:34: 59:09:b2:65:8f:3e:40:0e:fe:53:92:8f:1b:52:2f: 5d:69:03:f8:21:5b:a8:85:9b:3e:06:c9:43:3f:de: 1a:e4:8b:09:07:9a:20:33:07:95:bf:ee:24:e4:c2: 14:51:e9:16:42:33:18:e5:bd:c2:18:89:eb:bc:c4: 2d:e8:e5:94:97:dc:a3:61:5e:7f:eb:61:d1:c5:78: a8:f7:5d:8c:97:10:8d:cd:8f:2a:db:95:16:0f:fc: d0:95:b3:08:c1:71:77:a7:2d:cb:9e:37:19:b5:7c: 89:8a:fe:99:f0:43:ef:10:8f:72:18:0e:93:bb:52: f7:3d:46:9f:3f:5d:a2:7d:89:04:b7:fe:55:fa:d0: 83:6e:5d:67:67:e8:8e:f1:9f:fb:97:35:83:85:aa: ad:cb:d0:41:63:5e:58:83:14:c6:94:bb:9e:69:90: ff:8f:c5:15:cf:c8:c0:95:0a:2e:98:74:1b:43:f2: 9f:47:b2:52:51:60:ff:29:54:fd:e5:39:a9:f9:e4: 41:cd:c3:75:53:22:61:17:39:01:09:83:ba:2d:ac: 43:57:e9:cb:c8:69:b8:ac:82:c7:5f:3a:51:a5:ba: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:97:24:C8:9D:7D:43:BB:4D:31:0B:F3:58:54:03:BE:08:7E:68 X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:83:0a:24:6a:9e:88:d8:c5:a3:59:cd:ec:1b:ee:fd:15: d9:99:2a:fc:00:17:60:ee:32:27:83:e2:ff:f9:e1:bb:91:5b: 98:2f:44:75:a9:9a:6e:7f:3a:1d:e5:9a:e1:9f:06:8e:6c:13: 6c:17:5b:0a:9b:60:3c:9f:cb:38:b0:bf:00:75:37:83:2f:6b: 05:3a:75:b1:ec:5e:12:76:3e:45:34:81:4f:f1:3d:7f:bc:39: 7a:b1:be:07:ac:21:c9:36:8e:3f:a1:f3:cc:b7:85:4f:70:34: 19:50:ad:f7:d7:16:22:26:48:65:2e:d3:6f:7b:66:ce:5a:0f: d3:48:f0:31:9e:fc:d1:60:e4:f2:36:5e:97:7c:ae:ff:44:8e: 7c:1d:ad:08:c4:f3:51:7f:6d:1c:a2:1b:bf:00:a4:25:b6:dc: a6:20:27:9c:bc:ce:e0:02:94:05:64:21:f8:55:a5:aa:3f:30: d9:44:c4:b4:3d:3c:07:39:cf:ad:a5:99:5a:f5:7e:e1:d2:86: 80:f3:55:48:fb:29:3a:5f:29:22:f2:ba:b6:67:b4:57:23:1e: a8:a9:7e:f7:aa:db:2f:b2:84:79:fd:4f:bd:f8:21:95:cd:fa: 0c:3f:92:03:2d:9c:c9:5d:d2:51:af:5f:30:18:ba:fc:88:c9: 58:86:26:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNjAzMDMwNjI2MzNaFw0yNjAzMTAwNjI2MzNaMBgxFjAUBgNV BAMTDTY5YTY3ZjFhLTY3ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd4yrDYfpSkpB/aVW1FFlRrRdkkXNn25Z8q0fPNFkJsmWPPkAO/lOSjxtSL11p A/ghW6iFmz4GyUM/3hrkiwkHmiAzB5W/7iTkwhRR6RZCMxjlvcIYieu8xC3o5ZSX 3KNhXn/rYdHFeKj3XYyXEI3NjyrblRYP/NCVswjBcXenLcueNxm1fImK/pnwQ+8Q j3IYDpO7Uvc9Rp8/XaJ9iQS3/lX60INuXWdn6I7xn/uXNYOFqq3L0EFjXliDFMaU u55pkP+PxRXPyMCVCi6YdBtD8p9HslJRYP8pVP3lOan55EHNw3VTImEXOQEJg7ot rENX6cvIabisgsdfOlGluhzdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7DKXJMid fUO7TTEL81hUA74IfmgwHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAr1oMKJGqeiNjFo1nN7Bvu/RXZmSr8ABdg7jIng+L/+eG7kVuYL0R1qZpufzod 5ZrhnwaObBNsF1sKm2A8n8s4sL8AdTeDL2sFOnWx7F4Sdj5FNIFP8T1/vDl6sb4H rCHJNo4/ofPMt4VPcDQZUK331xYiJkhlLtNve2bOWg/TSPAxnvzRYOTyNl6XfK7/ RI58Ha0IxPNRf20cohu/AKQlttymICecvM7gApQFZCH4VaWqPzDZRMS0PTwHOc+t pZla9X7h0oaA81VI+yk6Xyki8rq2Z7RXIx6oqX73qtsvsoR5/U+9+CGVzfoMP5ID LZzJXdJRr18wGLr8iMlYhiaf -----END CERTIFICATE-----Generated at Wed Mar 4 08:19:27 2026 by rpki-client