$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: F/iE31afqJouQ17eRhdwMyPdmRRqgXxXjknnxpNvj7M= Subject key identifier: BA:81:A5:2D:8F:C5:BB:8E:0E:B6:7A:53:EF:C1:74:06:B3:ED:49:5E Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 019A Signing time: Fri 17 Apr 2026 04:00:22 +0000 Manifest this update: Fri 17 Apr 2026 04:00:21 +0000 Manifest next update: Fri 24 Apr 2026 04:00:21 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: fDVUD/NcVPJSpxzb01cLhO8gqsxaIWPKtiVjWohc0yQ=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: yPDy0xgT7qOMVChc0IeYdh84zKZ/Q4OPSOxME4uNSX8=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: MtMRVhbm/GKcyIVSZCGW9MQoyNNx6WEtE4Sni66kFt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Apr 17 04:00:21 2026 GMT Not After : Apr 24 04:00:21 2026 GMT Subject: CN=69e1b056-fd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:8b:95:33:34:f4:4a:5e:83:51:98:87:8b: 50:95:1c:8a:b4:0e:30:7f:a8:3d:a4:3a:f2:1a:70: d8:05:51:86:91:e6:59:ce:72:e7:0e:7c:b9:91:d7: cf:fd:db:94:4e:83:2c:f7:a4:51:81:5a:9b:cc:25: df:eb:43:65:2e:df:4e:70:d8:69:8d:69:c7:c7:61: ae:df:87:09:88:31:d0:99:ce:c1:f3:d6:56:a2:3c: af:87:c5:cd:c5:21:51:35:6d:cd:f8:22:a3:e5:7d: fb:39:bc:6f:34:31:af:67:0f:4e:94:0f:b4:18:84: 9f:47:43:73:4e:4a:dc:1e:f7:4f:36:a9:c3:19:9d: fb:86:e0:61:bb:2d:2e:7e:1e:e8:94:92:95:74:aa: bf:8b:ef:e9:df:56:01:f9:c4:12:93:22:62:ea:ec: b5:b5:44:ac:88:94:f2:b4:97:cc:23:63:f4:5e:a1: 48:db:36:d9:6f:c3:07:0c:63:b5:e5:50:ba:f5:42: c6:81:0a:5f:94:ca:c4:d3:c5:a7:17:42:26:81:ba: 1b:fd:54:70:03:49:22:6d:cf:db:cd:57:b5:1a:dc: 79:6d:25:d9:8c:29:2d:b4:a7:e3:e4:f0:b6:d0:09: fd:5b:89:d4:90:0b:1d:17:60:33:f4:4a:45:dc:59: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:81:A5:2D:8F:C5:BB:8E:0E:B6:7A:53:EF:C1:74:06:B3:ED:49:5E X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:dc:d0:b3:15:03:bc:7c:0d:1e:e4:fc:a2:20:b8:63:1b:b2: ed:57:fc:0d:3a:ff:e8:b2:b8:95:1e:61:6b:4b:2b:5f:a0:5d: 9a:5e:bc:30:81:e9:ab:4a:4a:07:85:48:9e:ee:50:32:f2:c9: 28:74:68:72:24:67:05:c5:d1:6b:26:b2:84:d3:39:91:64:03: eb:12:6a:73:31:2e:81:7a:16:38:3d:16:10:71:b9:b8:a1:10: b8:e7:45:25:88:ea:5e:13:14:82:c8:38:32:e2:d1:ad:91:12: 9a:a9:a1:aa:32:43:c3:6b:2d:bf:b2:6f:3c:a1:df:5d:a0:05: 43:f1:2e:e3:93:7d:3a:b9:f5:2a:00:98:76:76:d7:fd:e6:14: 89:c0:8b:9f:20:61:9c:16:79:06:6f:da:33:b5:18:df:fb:49: 8f:d3:6c:9d:76:67:b3:0f:8f:ec:4c:81:f1:31:c1:3d:ad:32: 43:cc:cf:fa:c5:a1:53:79:b3:12:ed:38:90:9c:20:d4:de:32: 7f:e3:ba:c4:8c:f5:d8:13:02:94:d6:d2:d0:90:9d:5f:1d:80: 76:4a:e5:e2:e5:4b:23:a1:de:bf:43:ae:66:03:8c:0e:a2:79: 56:18:37:a2:20:2c:e4:fc:e1:68:d3:7c:a3:53:75:23:e8:47: 5c:50:98:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjYwNDE3MDQwMDIxWhcNMjYwNDI0MDQwMDIxWjAYMRYwFAYD VQQDEw02OWUxYjA1Ni1mZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAeLlTM09Epeg1GYh4tQlRyKtA4wf6g9pDryGnDYBVGGkeZZznLnDny5kdfP /duUToMs96RRgVqbzCXf60NlLt9OcNhpjWnHx2Gu34cJiDHQmc7B89ZWojyvh8XN xSFRNW3N+CKj5X37ObxvNDGvZw9OlA+0GISfR0NzTkrcHvdPNqnDGZ37huBhuy0u fh7olJKVdKq/i+/p31YB+cQSkyJi6uy1tUSsiJTytJfMI2P0XqFI2zbZb8MHDGO1 5VC69ULGgQpflMrE08WnF0Imgbob/VRwA0kibc/bzVe1Gtx5bSXZjCkttKfj5PC2 0An9W4nUkAsdF2Az9EpF3FlRPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqBpS2P xbuODrZ6U+/BdAaz7UleMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAydzQsxUDvHwNHuT8oiC4Yxuy7Vf8DTr/6LK4lR5ha0srX6Bdml68MIHpq0pK B4VInu5QMvLJKHRociRnBcXRayayhNM5kWQD6xJqczEugXoWOD0WEHG5uKEQuOdF JYjqXhMUgsg4MuLRrZESmqmhqjJDw2stv7JvPKHfXaAFQ/Eu45N9Orn1KgCYdnbX /eYUicCLnyBhnBZ5Bm/aM7UY3/tJj9NsnXZnsw+P7EyB8THBPa0yQ8zP+sWhU3mz Eu04kJwg1N4yf+O6xIz12BMClNbS0JCdXx2Adkrl4uVLI6Hev0OuZgOMDqJ5Vhg3 oiAs5PzhaNN8o1N1I+hHXFCYkA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:06 2026 by rpki-client