$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json) Hash identifier: Qa4vOZ6jyLj+jOvax5bKQzFoB8LK2WZCSAF2x2lyMnM= Subject key identifier: B8:EE:26:2B:A1:E3:B6:7A:B4:5D:14:01:92:A1:19:A2:B3:EB:14:8F Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft Manifest number: 1A Signing time: Sun 01 Mar 2026 10:26:57 +0000 Manifest this update: Sun 01 Mar 2026 10:26:56 +0000 Manifest next update: Sun 08 Mar 2026 10:26:56 +0000 Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: lev+tOYxjD4ximkLryicLJnF3BPceIslAkJ3D/q91Kw=) 2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: Mar 1 10:26:56 2026 GMT Not After : Mar 8 10:26:56 2026 GMT Subject: CN=69a41470-f825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:11:10:94:15:b8:00:43:03:81:ed:f0:94: f3:9d:6f:73:59:0f:20:43:0d:e7:8e:4d:c5:43:c0: 90:b4:c4:c7:68:05:74:bf:a5:5c:7a:78:21:f4:b5: ba:8a:00:b8:be:9e:91:83:e6:e6:03:c1:d1:04:2d: fe:aa:0a:16:44:8f:a2:50:b5:4f:87:49:c7:dd:19: bf:f2:17:eb:c1:48:80:a4:d0:3c:1f:44:16:13:a4: ea:af:b1:4e:34:e8:55:e4:6b:80:1b:ca:fb:02:71: 0f:76:3d:d9:80:c0:46:43:b2:60:ea:5a:be:23:76: 00:85:77:28:d9:83:8b:61:55:95:65:03:ca:4e:6e: 33:04:10:e2:94:e8:b6:6d:af:cb:1b:92:57:0f:c8: 8c:76:00:ef:7f:18:a4:0a:95:0f:2d:5b:22:8d:58: 85:db:35:83:a4:a8:87:77:b6:45:75:57:03:74:8b: 9a:97:ef:9d:d1:85:41:6f:ef:28:6d:d5:bd:be:f3: 5c:89:66:cc:5b:67:93:5c:8c:9a:70:eb:54:6d:82: 9a:73:aa:45:12:60:a9:f2:c1:89:68:7a:2a:2c:fc: 29:2b:85:ee:c9:9a:8d:b6:6c:a9:a5:93:05:15:58: ff:c3:29:00:cf:3a:43:bf:f1:ef:9c:a3:c5:05:1e: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EE:26:2B:A1:E3:B6:7A:B4:5D:14:01:92:A1:19:A2:B3:EB:14:8F X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b1:96:e7:cf:5e:9c:42:1b:bf:61:c4:76:df:9a:63:06:f7: 68:80:00:44:4b:87:d9:0d:9f:ca:c8:8c:ca:ed:bf:8b:2e:ec: bc:07:d0:56:d6:b7:af:fe:71:07:4c:da:70:48:82:87:44:af: 8c:7b:10:bd:35:a2:6f:08:a4:da:d8:19:0f:2b:a2:7d:64:36: 3b:e7:d2:d2:b6:30:2f:63:0f:bc:67:0c:66:6c:3f:da:90:d2: 4e:0e:c6:96:91:1c:1f:24:d5:50:8e:a0:10:39:2c:27:cc:89: 7d:62:d1:87:ab:16:af:b4:9a:f1:9c:ce:8d:87:4d:6e:11:4f: b1:d1:33:76:e8:e1:56:ca:b7:9e:ab:70:27:2b:e7:dc:82:71: 16:8a:3e:97:c5:bc:c0:7f:a1:94:e4:c1:31:19:95:0f:66:33: cd:39:e7:6c:bf:2a:43:47:2a:f7:93:09:3a:92:95:d1:ee:0c: fa:9f:84:b2:a3:3f:1f:7a:58:66:0f:3e:6f:40:96:dd:9c:18: 44:37:eb:15:25:19:39:5f:4d:5e:c4:bd:fb:02:f4:58:34:58: 83:3e:55:c7:92:3b:17:a4:fb:e6:ef:bb:ad:f0:0c:38:85:21: 44:19:c5:8c:00:c0:a1:50:79:e0:da:78:4e:f2:73:f1:63:aa: 30:a6:11:19 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjAzMDExMDI2NTZaFw0yNjAzMDgxMDI2NTZaMBgxFjAUBgNV BAMTDTY5YTQxNDcwLWY4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsmxEQlBW4AEMDge3wlPOdb3NZDyBDDeeOTcVDwJC0xMdoBXS/pVx6eCH0tbqK ALi+npGD5uYDwdEELf6qChZEj6JQtU+HScfdGb/yF+vBSICk0DwfRBYTpOqvsU40 6FXka4AbyvsCcQ92PdmAwEZDsmDqWr4jdgCFdyjZg4thVZVlA8pObjMEEOKU6LZt r8sbklcPyIx2AO9/GKQKlQ8tWyKNWIXbNYOkqId3tkV1VwN0i5qX753RhUFv7yht 1b2+81yJZsxbZ5NcjJpw61RtgppzqkUSYKnywYloeios/Ckrhe7Jmo22bKmlkwUV WP/DKQDPOkO/8e+co8UFHra5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuO4mK6Hj tnq0XRQBkqEZorPrFI8wHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QjA5L0YzMDJFNTM0RjRGRTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4 VWVLdzZ0V3BxdFBuQnZVWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5sZbnz16cQhu/YcR235pjBvdogABES4fZDZ/KyIzK7b+LLuy8B9BW1rev/nEH TNpwSIKHRK+MexC9NaJvCKTa2BkPK6J9ZDY759LStjAvYw+8ZwxmbD/akNJODsaW kRwfJNVQjqAQOSwnzIl9YtGHqxavtJrxnM6Nh01uEU+x0TN26OFWyreeq3AnK+fc gnEWij6XxbzAf6GU5MExGZUPZjPNOedsvypDRyr3kwk6kpXR7gz6n4Syoz8felhm Dz5vQJbdnBhEN+sVJRk5X01exL37AvRYNFiDPlXHkjsXpPvm77ut8Aw4hSFEGcWM AMChUHng2nhO8nPxY6owphEZ -----END CERTIFICATE-----Generated at Mon Mar 2 01:52:49 2026 by rpki-client