$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json) Hash identifier: Zp0DJuqI3xjXvajyufqdB7i2TOyzcIJ6cVMgVKYmYzs= Subject key identifier: 21:21:3C:03:B1:5E:B9:7D:38:9D:BE:57:A9:0B:47:0D:6A:A2:0F:6D Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft Manifest number: 21 Signing time: Fri 17 Apr 2026 08:37:05 +0000 Manifest this update: Fri 17 Apr 2026 08:37:04 +0000 Manifest next update: Fri 24 Apr 2026 08:37:04 +0000 Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: maTX0qZPfOENLWJIX6vZ46Wg3QTBxLjHWr1+C/5GEww=) 2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Validity Not Before: Apr 17 08:37:04 2026 GMT Not After : Apr 24 08:37:04 2026 GMT Subject: CN=69e1f130-4191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:65:ec:15:55:9d:79:1d:98:8d:be:f2:d3: 47:d6:8f:f4:4e:45:b8:1d:ac:c0:53:e4:3a:5d:4f: b0:7e:d5:ee:dc:b6:48:44:11:8b:47:ad:19:45:c0: cb:a4:bc:91:65:aa:0e:bc:a8:5c:bf:21:e5:1e:32: a8:13:a4:a8:0b:06:94:38:df:c2:25:5f:83:07:93: 56:d9:b5:ff:d3:fd:0b:51:3a:35:b8:7c:04:d0:be: 41:29:ca:b7:96:1c:99:98:7d:f7:c1:3f:6c:8a:2b: 50:96:68:cf:53:c0:1b:80:40:5e:86:81:35:4a:1b: 93:f5:06:4c:9b:a6:21:f4:1e:0d:a6:48:00:2a:06: e4:c5:ec:4c:aa:25:93:91:68:f2:60:6e:26:0e:e5: 9c:df:86:01:fa:8c:07:38:f5:0c:eb:8f:66:65:0e: ea:8b:f4:93:0c:4c:9e:f7:3b:f1:69:05:69:ba:66: ba:32:28:0a:0e:1d:c4:58:0e:24:e2:00:9e:94:6a: 45:fe:f5:ec:a0:3c:04:69:4f:4d:c1:2b:1f:9c:58: 8b:a9:41:b4:9c:8e:aa:f4:6e:6c:6a:d1:02:a3:f0: f4:5f:25:11:96:80:ff:41:1a:a0:91:ee:dd:d0:9b: fb:0d:ef:e1:b8:cd:0c:49:50:86:9a:03:48:5b:0c: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:21:3C:03:B1:5E:B9:7D:38:9D:BE:57:A9:0B:47:0D:6A:A2:0F:6D X509v3 Authority Key Identifier: keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:c1:e2:c1:58:f9:4c:79:1a:cc:e6:df:87:7c:0d:e7:7d: 34:89:85:06:63:65:79:30:13:12:2c:4f:4a:c7:29:84:53:7e: 4e:5a:15:9b:67:30:c2:8d:ce:a9:72:8a:13:de:f1:a6:0a:6d: 62:92:7d:4a:f1:77:f1:04:26:9f:e4:37:b9:5c:ca:05:39:8a: bc:b7:fd:3d:22:f0:d0:20:39:10:80:91:a4:fa:05:1c:29:f3: 97:5d:62:32:0e:98:d9:50:05:6c:54:45:83:49:93:fe:a8:ac: 95:ac:56:aa:a7:17:f6:c8:4f:e7:8d:63:e9:46:26:8f:41:7b: ce:61:21:5d:13:37:6f:60:13:87:84:1c:ac:c5:d8:63:2b:a8: bc:f2:c8:1c:69:d5:19:58:c7:01:08:cc:8e:34:ed:94:2e:30: 66:9c:6b:93:98:8a:b3:e2:17:8d:86:43:61:78:e0:1d:90:3c: f1:d6:77:fa:92:3f:7d:6f:79:20:fc:64:73:e5:fb:13:08:8e: 73:1c:96:39:bd:8a:74:a7:fb:c8:ca:49:de:68:e8:b1:b2:46: d6:46:19:f5:87:c9:73:54:eb:19:2e:d1:cc:42:48:11:9e:62: 81:52:48:22:a0:4b:de:ac:99:62:81:cf:67:a9:57:4b:e1:34: 91:79:8b:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoOTdCNDQ2MjE2Mzc5ODU3NzAwQUQ2NUI5RkFGRUVDN0M5 MjJDMjJEODAeFw0yNjA0MTcwODM3MDRaFw0yNjA0MjQwODM3MDRaMBgxFjAUBgNV BAMTDTY5ZTFmMTMwLTQxOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUdWXsFVWdeR2Yjb7y00fWj/RORbgdrMBT5DpdT7B+1e7ctkhEEYtHrRlFwMuk vJFlqg68qFy/IeUeMqgTpKgLBpQ438IlX4MHk1bZtf/T/QtROjW4fATQvkEpyreW HJmYfffBP2yKK1CWaM9TwBuAQF6GgTVKG5P1BkybpiH0Hg2mSAAqBuTF7EyqJZOR aPJgbiYO5ZzfhgH6jAc49Qzrj2ZlDuqL9JMMTJ73O/FpBWm6ZroyKAoOHcRYDiTi AJ6UakX+9eygPARpT03BKx+cWIupQbScjqr0bmxq0QKj8PRfJRGWgP9BGqCR7t3Q m/sN7+G4zQxJUIaaA0hbDP8bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUISE8A7Fe uX04nb5XqQtHDWqiD20wHwYDVR0jBBgwFoAUl7RGIWN5hXcArWW5+v7sfJIsItgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzM5NjlCM0NBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhjQXJXVzUtdjdzZkpJc0l0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDdSR0lXTjVoWGNBcldXNS12N3NmSklzSXRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzM5NjlCM0NBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhj QXJXVzUtdjdzZkpJc0l0Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6JcHiwVj5THkazObfh3wN5300iYUGY2V5MBMSLE9KxymEU35OWhWbZzDCjc6p cooT3vGmCm1ikn1K8XfxBCaf5De5XMoFOYq8t/09IvDQIDkQgJGk+gUcKfOXXWIy DpjZUAVsVEWDSZP+qKyVrFaqpxf2yE/njWPpRiaPQXvOYSFdEzdvYBOHhBysxdhj K6i88sgcadUZWMcBCMyONO2ULjBmnGuTmIqz4heNhkNheOAdkDzx1nf6kj99b3kg /GRz5fsTCI5zHJY5vYp0p/vIykneaOixskbWRhn1h8lzVOsZLtHMQkgRnmKBUkgi oEverJligc9nqVdL4TSReYsQ -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:52 2026 by rpki-client