$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: UvGHOPTZw1CuVmUGRpqEFPRmyioLT/YBLzdCgdnp5a8= Subject key identifier: E0:6F:2B:AF:DA:F3:8B:16:80:4B:46:F6:B9:3C:AA:2C:4B:BD:A7:D5 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0B86 Signing time: Sun 01 Mar 2026 22:46:00 +0000 Manifest this update: Sun 01 Mar 2026 22:45:59 +0000 Manifest next update: Sun 08 Mar 2026 22:45:59 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: ibIZTIsJ6RetXVqBnlkIwnYqLaKZLGPPs2VkXfaVclg=) 2: B7F0310EBCB911F08FEDBF33C4F9AE02.roa (hash: AnWWiSu/AyXW3zWoSGDHg33nSWzvyHM237MaOeK3Yfs=) 3: F090EF3ABCB911F092467C34C4F9AE02.roa (hash: zERcCxGrm12iEeXzlucEgAhmorvERgMvKDJv1r7AOWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Mar 1 22:45:59 2026 GMT Not After : Mar 8 22:45:59 2026 GMT Subject: CN=69a4c1a8-91c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:6d:8d:c9:3d:b9:42:a1:d3:71:d9:52:b7: 7c:45:ff:9f:33:81:cb:0b:23:33:d9:cd:fe:fd:57: 68:8f:72:05:80:06:7f:93:eb:cc:d5:0a:71:b1:03: 47:07:10:c5:94:9a:14:28:e3:76:9c:a8:95:2e:a0: fb:5d:bb:27:b8:f9:63:ab:f9:7f:ce:a0:18:54:21: e2:74:f1:a8:2b:2a:f8:19:b4:de:96:17:51:82:c8: 27:9e:4f:a3:8d:06:bc:af:8a:21:59:d6:52:4b:b9: a0:5b:b2:8a:d9:3b:78:11:96:4e:d9:7b:43:17:2e: ad:7a:51:19:16:f3:f4:b9:56:81:b5:98:e7:36:65: a6:58:23:46:c1:df:24:d5:43:a6:ac:f7:60:01:47: 77:e4:bf:89:8e:2c:5b:ff:f2:6e:9d:00:3b:48:c4: d2:2c:77:c9:fd:eb:b6:aa:7b:e9:6d:5f:62:eb:d9: a5:ba:dd:af:69:b8:35:2d:76:5a:af:79:71:26:ac: bd:5c:f4:20:18:33:6f:b5:b3:00:a2:95:8b:f8:a8: 7d:8d:63:b9:4b:b0:55:6e:4a:c7:6f:9c:57:0f:9d: 25:6d:72:2b:1f:85:25:e7:e8:b3:ae:f5:be:23:78: b3:80:93:f1:17:22:af:44:1f:3a:5a:14:9a:5c:97: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6F:2B:AF:DA:F3:8B:16:80:4B:46:F6:B9:3C:AA:2C:4B:BD:A7:D5 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:06:cc:dc:37:38:93:f0:88:b5:71:cc:de:7b:f3:66:fe:4f: 22:3a:6e:33:87:9a:23:09:59:21:4d:43:ef:60:7a:b2:c6:0c: e8:35:88:04:a6:ba:ec:0d:d1:54:b3:77:4c:e3:11:bd:64:43: 67:ad:4e:33:89:b8:98:3e:4b:eb:3b:83:9e:b6:10:54:c4:f4: f1:c7:ed:cf:62:34:15:14:1e:3d:b9:8d:27:1d:88:bf:0d:3b: f8:b8:fe:49:ee:f1:43:e9:45:6e:df:f5:ab:77:90:52:e3:2f: 3d:50:7d:0c:b6:b6:8e:43:e1:d7:ac:38:c1:1b:25:e8:40:44: aa:46:60:f8:cb:78:80:6d:be:4d:60:b4:9b:a0:91:a2:db:ff: 75:d8:4e:6d:5b:8b:dc:c3:c9:77:f3:1f:6e:36:a3:50:f6:98: 78:41:c7:14:66:df:4a:7a:d3:bd:61:f6:d0:a8:49:da:39:c1: 83:c0:46:d7:12:d4:dc:1b:57:f7:67:1a:22:96:51:01:cd:d8: f9:aa:cf:24:54:e0:d7:df:aa:cc:b8:db:01:8c:a0:c1:43:fd: 3c:d5:29:fd:3e:e6:e5:e2:dd:b6:60:94:d6:72:0e:4a:aa:d8: 4f:10:0e:cb:79:63:2f:60:40:27:8e:e9:d3:2f:54:04:47:6d: 21:a3:70:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjYwMzAxMjI0NTU5WhcNMjYwMzA4MjI0NTU5WjAYMRYwFAYD VQQDEw02OWE0YzFhOC05MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzptjck9uUKh03HZUrd8Rf+fM4HLCyMz2c3+/Vdoj3IFgAZ/k+vM1QpxsQNH BxDFlJoUKON2nKiVLqD7XbsnuPljq/l/zqAYVCHidPGoKyr4GbTelhdRgsgnnk+j jQa8r4ohWdZSS7mgW7KK2Tt4EZZO2XtDFy6telEZFvP0uVaBtZjnNmWmWCNGwd8k 1UOmrPdgAUd35L+Jjixb//JunQA7SMTSLHfJ/eu2qnvpbV9i69mlut2vabg1LXZa r3lxJqy9XPQgGDNvtbMAopWL+Kh9jWO5S7BVbkrHb5xXD50lbXIrH4Ul5+izrvW+ I3izgJPxFyKvRB86WhSaXJc/jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBvK6/a 84sWgEtG9rk8qixLvafVMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQbM3Dc4k/CItXHM3nvzZv5PIjpuM4eaIwlZIU1D72B6ssYM6DWIBKa67A3R VLN3TOMRvWRDZ61OM4m4mD5L6zuDnrYQVMT08cftz2I0FRQePbmNJx2Ivw07+Lj+ Se7xQ+lFbt/1q3eQUuMvPVB9DLa2jkPh16w4wRsl6EBEqkZg+Mt4gG2+TWC0m6CR otv/ddhObVuL3MPJd/MfbjajUPaYeEHHFGbfSnrTvWH20KhJ2jnBg8BG1xLU3BtX 92caIpZRAc3Y+arPJFTg19+qzLjbAYygwUP9PNUp/T7m5eLdtmCU1nIOSqrYTxAO y3ljL2BAJ47p0y9UBEdtIaNw8A== -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:38 2026 by rpki-client