$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: Xq36gnHDxdG0g3L8AD0qMzrIu86XEjWlhekD5LhlFLI= Subject key identifier: EA:4F:B5:FB:27:E7:BF:1C:70:7C:8E:55:7C:FB:9B:15:CD:3A:43:0D Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 0867 Signing time: Sun 01 Mar 2026 23:44:43 +0000 Manifest this update: Sun 01 Mar 2026 23:44:42 +0000 Manifest next update: Sun 08 Mar 2026 23:44:42 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: xiLx4P5R+J/NwHm1EBAksOFtWsOSxAEI3suIHxUo9mY=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: cGT1GtukriCvrd1Pi2qRMUlR6UU6oh7XqqypKNl1qDY=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: jZ81Tdfx/+nsLOQTxl8GU75vMdax+UmYLl8rBqC2vqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Mar 1 23:44:42 2026 GMT Not After : Mar 8 23:44:42 2026 GMT Subject: CN=69a4cf6b-8032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:7f:fa:69:c0:3d:b0:d8:a7:4a:c5:9e:88: 91:c9:dd:c8:2c:f5:03:52:cf:96:96:1e:db:9f:05: db:57:19:98:be:51:a0:44:4e:d6:32:67:8b:a7:6d: bb:06:9c:42:74:45:46:ca:24:58:e2:db:95:b2:08: 56:ca:01:c3:b4:90:90:c0:90:5a:b6:d5:ac:01:6f: c7:56:88:9f:75:f4:0c:e0:ce:d0:c0:97:cb:b1:49: 56:ae:b9:f7:95:83:46:a6:6d:84:33:2f:93:ee:db: 83:d6:f4:d8:41:ee:9d:6e:22:80:b0:37:d4:d0:e7: f3:9d:2a:a2:dd:bd:6e:7a:e3:28:35:0e:6e:df:81: f4:25:91:8c:5b:20:3a:8a:15:29:75:1a:a4:a5:23: 6e:de:3f:92:db:79:a6:74:50:92:93:ff:5e:6c:40: 88:a4:0a:54:df:ac:58:9e:76:1f:86:92:3e:e2:5e: f1:78:23:3a:76:0f:b1:89:6a:83:14:67:bd:4c:c7: 94:f2:08:56:75:50:c0:8e:f1:7e:28:1e:23:b9:ce: 3a:84:98:fa:ea:00:eb:3f:a4:c8:86:1b:05:ca:4c: 1c:44:8d:64:e4:c1:9c:bf:04:a5:12:a9:75:08:de: 16:bc:4a:38:1b:c1:07:86:fc:cb:be:88:28:1d:d7: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:B5:FB:27:E7:BF:1C:70:7C:8E:55:7C:FB:9B:15:CD:3A:43:0D X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:41:60:6e:58:c8:76:3a:32:5c:c5:e7:31:aa:f7:64:d6:8b: 5c:11:c5:39:1e:29:7d:7a:15:61:19:34:26:89:7f:5c:8f:67: bf:4c:cc:e4:87:e0:6b:4b:41:05:b9:76:76:29:be:9e:af:08: e4:51:14:c4:c6:33:08:a2:43:da:d7:66:a3:ef:eb:99:c6:ed: fe:a3:eb:80:40:ce:ec:c6:38:13:56:3a:4c:53:4d:85:f1:35: 65:fc:bd:76:e0:0e:16:7d:8b:df:6d:ae:35:c0:b6:68:4f:b2: 63:a1:96:60:c2:cf:b3:c9:b3:eb:18:45:5d:3d:da:bc:de:78: b8:f8:34:e9:79:8b:69:cc:75:97:c5:f9:22:80:ef:18:ce:97: 7f:c8:f2:5c:31:ba:9f:36:63:52:9b:1f:78:2b:8c:34:5b:a7: 75:4c:1c:84:a5:e1:bc:f0:72:3d:b0:03:1e:27:8d:f1:ad:d2: b2:11:40:43:31:ce:63:5c:3a:25:c2:22:3b:d9:41:73:58:9a: d0:84:e2:47:0e:6a:e4:2a:c1:1b:3f:b7:f3:a8:4a:1f:b1:02: f5:b1:76:dd:cb:a5:fd:af:c5:ef:ce:f3:7d:c4:95:9e:b5:c8: 9c:87:d2:27:12:3a:69:88:73:3e:3f:41:28:8b:4d:14:1d:3e: 6e:3a:32:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjYwMzAxMjM0NDQyWhcNMjYwMzA4MjM0NDQyWjAYMRYwFAYD VQQDEw02OWE0Y2Y2Yi04MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaR/+mnAPbDYp0rFnoiRyd3ILPUDUs+Wlh7bnwXbVxmYvlGgRE7WMmeLp227 BpxCdEVGyiRY4tuVsghWygHDtJCQwJBattWsAW/HVoifdfQM4M7QwJfLsUlWrrn3 lYNGpm2EMy+T7tuD1vTYQe6dbiKAsDfU0OfznSqi3b1ueuMoNQ5u34H0JZGMWyA6 ihUpdRqkpSNu3j+S23mmdFCSk/9ebECIpApU36xYnnYfhpI+4l7xeCM6dg+xiWqD FGe9TMeU8ghWdVDAjvF+KB4juc46hJj66gDrP6TIhhsFykwcRI1k5MGcvwSlEql1 CN4WvEo4G8EHhvzLvogoHddJswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpPtfsn 578ccHyOVXz7mxXNOkMNMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzkFgbljIdjoyXMXnMar3ZNaLXBHFOR4pfXoVYRk0Jol/XI9nv0zM5Ifga0tB Bbl2dim+nq8I5FEUxMYzCKJD2tdmo+/rmcbt/qPrgEDO7MY4E1Y6TFNNhfE1Zfy9 duAOFn2L322uNcC2aE+yY6GWYMLPs8mz6xhFXT3avN54uPg06XmLacx1l8X5IoDv GM6Xf8jyXDG6nzZjUpsfeCuMNFundUwchKXhvPByPbADHieN8a3SshFAQzHOY1w6 JcIiO9lBc1ia0ITiRw5q5CrBGz+386hKH7EC9bF23cul/a/F787zfcSVnrXInIfS JxI6aYhzPj9BKItNFB0+bjoyKw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:47 2026 by rpki-client