$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: IX/ppUpNnFSRYV0gBe8tYyda40ITR3iVIwXpG0mcfTE= Subject key identifier: 5C:7F:89:0E:F3:EF:67:E4:4D:05:2C:2E:16:50:9A:5A:3D:6F:90:9E Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 0723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 0713 Signing time: Thu 16 Apr 2026 21:49:35 +0000 Manifest this update: Thu 16 Apr 2026 21:49:35 +0000 Manifest next update: Thu 23 Apr 2026 21:49:35 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: VaHh13L7sKuH0mlFNXkKGfYWHTt4QKKg7jVVd9dUWTw=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: /AM3ICsq+B9hMRWxpvgU5BLZWpbh0PqnpIfMtm/oIKs=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: RyoNO0UOtNcS3c+nyhtDBK5mJ/TanAuhtJDLZYBhoj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Apr 16 21:49:35 2026 GMT Not After : Apr 23 21:49:35 2026 GMT Subject: CN=69e1596f-1695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:69:a1:7d:64:ca:37:f0:64:56:7b:47:c3: 85:d8:e3:4a:2e:b3:20:c1:9b:4b:be:7d:32:cb:10: 76:74:c6:59:b6:16:05:3a:48:07:93:16:3d:ef:cf: eb:9d:73:16:85:29:94:a2:30:8f:70:1a:5b:79:a5: fb:3c:d1:0f:7e:42:7b:10:a2:60:08:7d:bc:a3:91: ff:59:ca:93:6f:f5:78:16:1f:4b:c1:ac:bc:9d:ea: 4c:15:48:59:c4:54:de:99:5a:02:63:0f:e8:c4:c7: 96:0f:78:c6:21:91:7a:29:b2:26:07:02:7c:b2:f9: ad:52:55:9d:62:77:48:5b:95:aa:96:32:8c:77:f3: 76:6a:11:36:be:f9:90:cd:77:d0:9f:49:a0:51:3f: b6:88:b8:26:c7:bf:33:af:80:57:6d:41:39:07:e7: e2:2d:2a:72:ae:b2:80:a5:93:72:24:d8:a6:e8:51: fe:e7:a8:a6:66:4f:f6:e2:31:fa:35:4c:d3:20:e6: f4:ab:da:4d:ce:43:6d:49:fd:e3:af:1b:40:b9:0f: b2:cd:2e:e5:4c:b9:aa:c5:46:bf:08:d0:78:c0:5c: 1e:3c:75:ee:13:06:cd:8a:2d:2c:2d:a0:48:e3:63: cf:b6:66:0d:dc:d4:85:90:58:24:c8:f1:70:8b:4d: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7F:89:0E:F3:EF:67:E4:4D:05:2C:2E:16:50:9A:5A:3D:6F:90:9E X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:15:6b:af:72:b8:a1:99:ee:9f:75:7e:6a:3b:78:b8:b3:a2: 17:a1:d6:45:c8:a5:04:da:a1:6b:db:f2:02:3d:61:98:3e:5f: 4f:25:c8:05:b4:08:66:95:7b:b1:26:e3:bd:b3:ad:bc:02:fc: 45:79:08:92:ad:33:2e:97:ee:fe:9e:ca:e2:08:5b:bb:0e:50: 18:e9:ad:83:75:be:9a:94:b7:0c:34:01:5b:03:90:12:d3:c2: 29:0f:3e:bc:38:ea:4b:32:fe:b2:4e:13:8f:3b:44:dd:97:af: 8b:44:00:09:1e:db:93:fc:16:c6:4b:72:26:9d:c6:fc:2f:e6: 92:7a:e3:76:aa:61:d3:8e:d1:7d:18:59:79:b6:51:a5:1f:c7: 98:3a:09:2c:d7:c2:b0:49:bd:24:e1:5b:51:0b:70:4b:b2:1d: 22:30:b5:4b:41:01:51:a0:d8:6a:18:48:ee:82:4d:fe:24:fc: fe:6a:d0:85:22:3e:fb:58:0e:5a:52:9d:8a:78:b7:24:a6:69: 9a:cf:14:3f:c4:72:75:4c:3a:09:54:9e:8c:12:66:5e:27:60: b7:3b:b9:76:1b:b9:ff:28:c6:7f:be:8c:1f:3f:b2:96:ea:b8: 62:33:9b:dd:b0:35:48:7c:69:96:3d:6b:c0:64:11:2f:19:7a: c6:ce:ec:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjYwNDE2MjE0OTM1WhcNMjYwNDIzMjE0OTM1WjAYMRYwFAYD VQQDEw02OWUxNTk2Zi0xNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArExpoX1kyjfwZFZ7R8OF2ONKLrMgwZtLvn0yyxB2dMZZthYFOkgHkxY978/r nXMWhSmUojCPcBpbeaX7PNEPfkJ7EKJgCH28o5H/WcqTb/V4Fh9Lway8nepMFUhZ xFTemVoCYw/oxMeWD3jGIZF6KbImBwJ8svmtUlWdYndIW5WqljKMd/N2ahE2vvmQ zXfQn0mgUT+2iLgmx78zr4BXbUE5B+fiLSpyrrKApZNyJNim6FH+56imZk/24jH6 NUzTIOb0q9pNzkNtSf3jrxtAuQ+yzS7lTLmqxUa/CNB4wFwePHXuEwbNii0sLaBI 42PPtmYN3NSFkFgkyPFwi00lSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFx/iQ7z 72fkTQUsLhZQmlo9b5CeMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZBVrr3K4oZnun3V+ajt4uLOiF6HWRcilBNqha9vyAj1hmD5fTyXIBbQIZpV7 sSbjvbOtvAL8RXkIkq0zLpfu/p7K4ghbuw5QGOmtg3W+mpS3DDQBWwOQEtPCKQ8+ vDjqSzL+sk4TjztE3Zevi0QACR7bk/wWxktyJp3G/C/mknrjdqph047RfRhZebZR pR/HmDoJLNfCsEm9JOFbUQtwS7IdIjC1S0EBUaDYahhI7oJN/iT8/mrQhSI++1gO WlKdini3JKZpms8UP8RydUw6CVSejBJmXidgtzu5dhu5/yjGf76MHz+yluq4YjOb 3bA1SHxplj1rwGQRLxl6xs7s3w== -----END CERTIFICATE-----Generated at Fri Apr 17 06:44:45 2026 by rpki-client