$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: kpRjCwln6ZWLEM+bkXd34aXDQi2WsRoeXGxTJBvEaoU= Subject key identifier: 4F:63:D1:14:DE:97:3E:AB:24:35:BC:EB:22:47:41:21:E5:2D:EC:1C Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 356C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3547 Signing time: Sat 04 Apr 2026 15:12:37 +0000 Manifest this update: Sat 04 Apr 2026 15:12:36 +0000 Manifest next update: Sat 11 Apr 2026 15:12:36 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: j62Ph2gEiWzFAJgjI7HbLJqvv+rZ7m8SFz9YEmNOv+s=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 7bGtPyBGoN1SwqVRrEUHmbCfJdOGkrb5JuyAmWIVvAA=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: 2hfGsNVUmbO2vvpF424TRAk1BpXknhQcicom2XdbcDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13676 (0x356c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Apr 4 15:12:36 2026 GMT Not After : Apr 11 15:12:36 2026 GMT Subject: CN=69d12a65-98aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:3a:d7:03:35:da:7c:3a:4c:7d:0c:07:25: 92:dd:26:45:32:a5:7c:d7:d6:ed:7e:8f:12:35:97: 3f:15:95:cb:ed:fd:9d:00:33:b7:93:b5:42:74:81: d3:07:5e:d1:1c:b5:b1:7f:ae:a3:38:4d:76:cd:2c: 90:cc:58:16:81:e2:cd:69:1a:69:ff:c5:6e:c5:d3: 98:37:37:83:fc:b4:1b:a4:0a:10:4d:1b:ea:d4:92: 0a:a0:96:52:f9:65:01:e8:6a:5f:5a:09:3b:a0:51: 6f:c8:be:f2:33:7c:8c:53:d7:af:5b:97:b7:75:59: b4:fa:64:78:f0:30:ba:2c:b7:fe:72:45:7a:fa:a0: bf:2e:5e:ca:e1:75:b4:f4:5c:c2:5f:1d:93:83:23: 3d:bf:e8:97:30:22:c6:6f:25:3b:bd:09:6d:af:4d: a5:2a:75:25:5c:71:96:f3:92:00:09:b4:e5:3e:f3: fc:6d:ce:12:32:aa:cb:c5:d4:41:9c:12:af:b2:cd: 50:06:0a:6c:45:55:42:cd:e6:81:1d:e9:b3:cd:cb: 22:e8:de:c3:76:af:ab:9b:e7:de:ef:ac:fd:df:c4: 47:4f:07:f7:6d:57:d5:c8:9f:ce:7b:9a:a8:c5:df: 26:fc:6b:95:1d:21:46:7d:b5:a0:1e:c8:ba:d5:8d: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:D1:14:DE:97:3E:AB:24:35:BC:EB:22:47:41:21:E5:2D:EC:1C X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:55:2f:ea:9f:80:75:74:03:95:bd:76:21:1c:a1:f1:df:27: a2:79:94:7f:48:84:a0:26:01:df:f4:e1:47:dd:32:82:6a:49: b9:a5:b7:50:0a:fb:95:c3:27:56:30:8d:03:0c:9a:7f:09:a1: fe:46:cb:69:57:17:39:4f:53:de:01:d2:63:6e:1b:7d:a2:3a: f3:9b:13:67:86:dc:9f:1a:c3:61:3a:d3:71:33:99:0c:bb:8b: 61:1b:04:0d:62:5b:23:96:fa:1b:ee:29:fe:9c:e4:62:c3:bd: 33:9f:fa:0f:ea:79:f7:2d:97:6c:63:4f:07:19:87:f8:37:92: bc:9c:7e:3b:f2:c2:fd:14:f3:ef:78:ea:f6:36:c3:ab:b3:92: 0f:11:e1:74:04:73:9e:1c:a1:84:ae:2e:ac:ff:07:19:5c:a4: e0:a1:11:44:b3:4e:cc:8f:e3:e4:3e:93:ef:e7:c7:d9:f3:39: 98:b7:fd:8d:a0:d6:2e:5d:83:ad:21:35:1e:b4:31:2c:e7:c5: 96:ab:ed:02:26:de:09:42:4d:d3:cd:4c:fa:e7:8b:30:93:c4: c4:3b:dc:53:db:b5:23:51:a9:67:e2:95:ef:8a:eb:de:b9:b7: ca:1d:18:db:71:29:8f:4e:c1:8c:c2:19:c6:94:39:39:75:2f: 4d:13:e6:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjYwNDA0MTUxMjM2WhcNMjYwNDExMTUxMjM2WjAYMRYwFAYD VQQDEw02OWQxMmE2NS05OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiE61wM12nw6TH0MByWS3SZFMqV819btfo8SNZc/FZXL7f2dADO3k7VCdIHT B17RHLWxf66jOE12zSyQzFgWgeLNaRpp/8VuxdOYNzeD/LQbpAoQTRvq1JIKoJZS +WUB6GpfWgk7oFFvyL7yM3yMU9evW5e3dVm0+mR48DC6LLf+ckV6+qC/Ll7K4XW0 9FzCXx2TgyM9v+iXMCLGbyU7vQltr02lKnUlXHGW85IACbTlPvP8bc4SMqrLxdRB nBKvss1QBgpsRVVCzeaBHemzzcsi6N7Ddq+rm+fe76z938RHTwf3bVfVyJ/Oe5qo xd8m/GuVHSFGfbWgHsi61Y1rOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9j0RTe lz6rJDW86yJHQSHlLewcMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADlUv6p+AdXQDlb12IRyh8d8nonmUf0iEoCYB3/ThR90ygmpJuaW3UAr7lcMn VjCNAwyafwmh/kbLaVcXOU9T3gHSY24bfaI685sTZ4bcnxrDYTrTcTOZDLuLYRsE DWJbI5b6G+4p/pzkYsO9M5/6D+p59y2XbGNPBxmH+DeSvJx+O/LC/RTz73jq9jbD q7OSDxHhdARznhyhhK4urP8HGVyk4KERRLNOzI/j5D6T7+fH2fM5mLf9jaDWLl2D rSE1HrQxLOfFlqvtAibeCUJN081M+ueLMJPExDvcU9u1I1GpZ+KV74rr3rm3yh0Y 23Epj07BjMIZxpQ5OXUvTRPmLA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:01 2026 by rpki-client