$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: exhwkgftbu89u/vb2MBJX2SwC7OU//iriE2Nj0NfFDw= Subject key identifier: F6:8C:C3:0A:EA:04:F4:C5:FC:34:07:E7:0E:C2:06:8A:A7:B8:AF:C7 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 021B Signing time: Mon 02 Mar 2026 00:22:28 +0000 Manifest this update: Mon 02 Mar 2026 00:22:26 +0000 Manifest next update: Mon 09 Mar 2026 00:22:26 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: PEMXR1gk7bXNe4JauzUxlZRNCBSW1H+L1XN2CbBsbyA=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: Di35Q9995kx1IuvqHEyGEucKKTt6xTIdHGJOJuqtUmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Mar 2 00:22:26 2026 GMT Not After : Mar 9 00:22:26 2026 GMT Subject: CN=69a4d843-e140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fa:c6:5c:2c:7e:cb:f7:33:e4:79:cd:a1:b3: 21:63:41:3c:0c:64:97:07:d6:67:5e:84:47:e8:fa: cd:f3:da:0e:af:fd:bc:94:06:65:b4:f9:62:86:78: a4:d4:ee:cd:27:4a:d6:a0:5e:95:ab:4b:05:99:07: ec:cb:37:ce:f3:9b:7a:04:b5:2a:df:07:6c:9c:06: 5d:9a:16:9e:c8:fb:19:47:9a:7b:98:07:d8:8d:6f: 7a:80:5c:7e:fc:7a:f2:6b:8c:1c:b1:40:72:92:61: c0:a7:5f:d3:a7:5a:5b:97:c6:9c:73:c8:da:55:e4: 33:4c:d4:71:98:94:e9:13:4e:1b:28:4a:14:25:0d: 65:4e:8d:30:49:84:2a:28:b2:b2:f3:5d:ef:a7:f7: 52:28:fb:5d:9d:06:f4:94:93:5a:61:3b:65:88:ce: c6:ad:80:c6:be:e2:72:7d:6f:00:f1:95:a9:5f:bb: 2d:94:97:ea:21:57:24:c4:23:5b:1e:f5:41:23:6b: 3c:42:b4:ba:4d:27:56:94:42:6f:c9:05:02:d4:5a: 38:37:9b:2f:57:5b:37:14:46:dc:9a:98:65:aa:68: 26:0a:d7:ef:ba:f9:80:69:90:7f:33:74:6b:7f:84: 2c:00:73:7d:b8:80:4c:78:1e:2a:20:30:15:d9:de: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8C:C3:0A:EA:04:F4:C5:FC:34:07:E7:0E:C2:06:8A:A7:B8:AF:C7 X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c1:78:f3:6e:8a:15:1b:39:54:ea:83:09:d0:e4:fb:36:b9: 4d:d4:e9:90:b3:f9:9b:96:04:8a:79:ee:d5:92:e9:88:b9:26: 84:40:3c:ed:43:09:7c:60:65:44:00:34:36:71:99:a0:db:61: 25:73:d2:9d:ab:68:af:d0:9b:12:c1:a6:0a:8a:e2:b5:a7:f7: 49:33:b1:08:dd:94:10:0e:ab:4a:93:ee:37:59:62:ef:44:95: f6:f2:39:e6:40:0f:38:05:58:7f:96:e2:1f:4b:f0:6e:c2:85: da:7f:2f:03:3d:87:43:73:9c:23:be:b5:04:73:86:2f:0e:cf: f5:7d:87:95:b3:19:17:0a:be:6f:83:83:a1:b8:7a:de:bf:cd: 9f:ce:51:b2:21:df:4e:8e:2f:54:9a:27:5a:73:22:db:53:78: d7:65:e1:59:77:cd:9c:f7:2d:bd:9d:1a:0b:7d:e3:92:93:3e: 4a:ce:c9:a7:7c:f0:cf:f0:46:51:5b:d5:1d:13:f2:b5:e9:62: 70:a5:37:d3:13:77:50:9f:8d:0d:a3:17:15:95:65:e1:22:3c: a0:f9:b0:e4:1d:43:95:67:05:ea:e0:0d:fb:a9:79:7e:0a:36: fa:ac:a5:bf:4d:3b:0e:79:f5:b8:8a:7d:e1:1b:a3:a5:48:3d: 09:41:ac:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjYwMzAyMDAyMjI2WhcNMjYwMzA5MDAyMjI2WjAYMRYwFAYD VQQDEw02OWE0ZDg0My1lMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi/rGXCx+y/cz5HnNobMhY0E8DGSXB9ZnXoRH6PrN89oOr/28lAZltPlihnik 1O7NJ0rWoF6Vq0sFmQfsyzfO85t6BLUq3wdsnAZdmhaeyPsZR5p7mAfYjW96gFx+ /Hrya4wcsUBykmHAp1/Tp1pbl8acc8jaVeQzTNRxmJTpE04bKEoUJQ1lTo0wSYQq KLKy813vp/dSKPtdnQb0lJNaYTtliM7GrYDGvuJyfW8A8ZWpX7stlJfqIVckxCNb HvVBI2s8QrS6TSdWlEJvyQUC1Fo4N5svV1s3FEbcmphlqmgmCtfvuvmAaZB/M3Rr f4QsAHN9uIBMeB4qIDAV2d4e2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaMwwrq BPTF/DQH5w7CBoqnuK/HMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATcF4826KFRs5VOqDCdDk+za5TdTpkLP5m5YEinnu1ZLpiLkmhEA87UMJfGBl RAA0NnGZoNthJXPSnator9CbEsGmCoritaf3STOxCN2UEA6rSpPuN1li70SV9vI5 5kAPOAVYf5biH0vwbsKF2n8vAz2HQ3OcI761BHOGLw7P9X2HlbMZFwq+b4ODobh6 3r/Nn85RsiHfTo4vVJonWnMi21N412XhWXfNnPctvZ0aC33jkpM+Ss7Jp3zwz/BG UVvVHRPytelicKU30xN3UJ+NDaMXFZVl4SI8oPmw5B1DlWcF6uAN+6l5fgo2+qyl v007Dnn1uIp94RujpUg9CUGsqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:41 2026 by rpki-client