$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: MNVGyW3EVBGYjqMbzEpQ4W4Dp/zVq6ag/jXoWfAwZYg= Subject key identifier: 5E:6C:C5:B5:03:3C:75:E1:7C:38:97:EC:9A:2F:ED:8A:59:EB:31:7E Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 0682 Signing time: Sun 01 Mar 2026 22:38:09 +0000 Manifest this update: Sun 01 Mar 2026 22:38:09 +0000 Manifest next update: Sun 08 Mar 2026 22:38:09 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: NxZEQnKjBcouJ3AeeqV67vSqPtAhFMcA56WYFHeFtRQ=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Mar 1 22:38:09 2026 GMT Not After : Mar 8 22:38:09 2026 GMT Subject: CN=69a4bfd1-3ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:14:5b:af:e4:99:8c:82:d2:9e:50:c4:8e:03: 7d:b8:1b:6a:0f:a5:7f:ac:01:a2:59:4b:d3:c3:b8: d3:fe:ff:61:ba:bc:93:1f:35:81:38:c5:1e:c5:96: 0d:f5:01:d9:2d:5b:d8:50:18:9c:c7:86:d8:53:73: a8:02:60:ff:63:28:f1:fa:10:d9:40:10:2e:b1:e8: 69:a1:45:46:1b:5a:a8:54:d3:1a:cf:2e:e6:c4:80: d7:c0:26:dc:88:71:e4:2b:4b:6f:fc:0c:b1:f8:c5: 3a:6c:65:3f:98:b8:aa:2f:e5:0a:d0:7f:75:4f:f6: 9f:7b:1a:d6:59:86:27:7f:ce:28:d5:dc:a5:a9:da: 76:29:93:0f:e0:e4:60:6a:10:ce:fd:51:5b:d4:46: 6a:02:0c:ba:32:21:81:ce:d4:a9:9d:64:09:9f:9b: af:f7:55:ab:9a:f5:3e:23:30:d2:68:77:a3:da:79: b2:8b:20:1a:f1:7a:8e:5f:f0:82:d4:12:b1:9a:d7: 8f:15:5f:68:cf:c4:cf:d1:bd:05:ec:c5:23:a3:60: f5:3a:6a:e4:40:3d:52:15:8e:f9:4a:42:51:63:24: 43:1a:7e:2f:65:b3:08:a5:8e:91:42:4d:ee:3d:84: aa:09:28:73:e9:79:92:3b:e0:09:a2:dd:a5:91:18: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6C:C5:B5:03:3C:75:E1:7C:38:97:EC:9A:2F:ED:8A:59:EB:31:7E X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:68:85:d3:c9:dd:c8:c6:94:e9:45:7f:73:d7:40:80:6b:2b: 88:0c:54:8b:c6:09:f3:d3:dd:12:d8:43:30:bb:50:1f:b7:df: 6c:66:ab:76:52:7a:4e:fc:94:4d:f5:cd:bc:37:4a:5a:71:6c: 07:7e:66:bc:48:5f:55:52:df:d9:3c:c3:e1:3a:11:fa:8c:d5: 9b:12:c6:27:70:ae:fe:f6:e1:7f:7a:57:64:a2:7c:80:b9:57: 71:7d:83:a2:a0:b3:78:8e:85:d6:20:f4:cb:0e:23:a3:05:88: 83:a7:fe:60:07:28:9d:1d:88:77:fc:6c:86:fc:b0:50:c8:84: 54:e4:06:b3:ea:db:6e:67:18:7f:19:79:03:7a:d3:55:60:c5: cc:54:22:a9:68:9c:fb:77:4e:62:19:9a:3b:5e:16:ef:46:91: ef:cc:0e:ff:00:f6:1f:29:d0:7c:16:c1:0a:94:ef:2a:e6:43: 6c:a0:e3:31:c6:c0:f1:12:84:01:4b:8e:15:9e:7e:e0:76:73: b0:d1:cc:bd:c9:e3:64:04:c2:e8:0b:cd:2d:b9:5d:0a:7d:2a: fd:30:e3:bc:48:76:3e:01:f4:bc:1d:0a:c5:84:96:13:46:b2: a1:90:2d:be:3e:77:52:b2:58:e6:a2:01:bf:f8:87:06:30:9b: f2:37:f7:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjYwMzAxMjIzODA5WhcNMjYwMzA4MjIzODA5WjAYMRYwFAYD VQQDEw02OWE0YmZkMS0zYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BRbr+SZjILSnlDEjgN9uBtqD6V/rAGiWUvTw7jT/v9huryTHzWBOMUexZYN 9QHZLVvYUBicx4bYU3OoAmD/Yyjx+hDZQBAusehpoUVGG1qoVNMazy7mxIDXwCbc iHHkK0tv/Ayx+MU6bGU/mLiqL+UK0H91T/afexrWWYYnf84o1dylqdp2KZMP4ORg ahDO/VFb1EZqAgy6MiGBztSpnWQJn5uv91WrmvU+IzDSaHej2nmyiyAa8XqOX/CC 1BKxmtePFV9oz8TP0b0F7MUjo2D1OmrkQD1SFY75SkJRYyRDGn4vZbMIpY6RQk3u PYSqCShz6XmSO+AJot2lkRgk+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5sxbUD PHXhfDiX7Jov7YpZ6zF+MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbGiF08ndyMaU6UV/c9dAgGsriAxUi8YJ89PdEthDMLtQH7ffbGardlJ6TvyU TfXNvDdKWnFsB35mvEhfVVLf2TzD4ToR+ozVmxLGJ3Cu/vbhf3pXZKJ8gLlXcX2D oqCzeI6F1iD0yw4jowWIg6f+YAconR2Id/xshvywUMiEVOQGs+rbbmcYfxl5A3rT VWDFzFQiqWic+3dOYhmaO14W70aR78wO/wD2HynQfBbBCpTvKuZDbKDjMcbA8RKE AUuOFZ5+4HZzsNHMvcnjZATC6AvNLbldCn0q/TDjvEh2PgH0vB0KxYSWE0ayoZAt vj53UrJY5qIBv/iHBjCb8jf33w== -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:46 2026 by rpki-client