$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: 77Xzy4ewYefjKegunN5cjnoOuPBOizg9gFM57dlb/mM= Subject key identifier: 1A:46:AE:60:FA:CF:7A:50:F8:8C:07:71:F1:08:CE:67:21:2A:53:24 Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 02:36:05 +0000 Manifest this update: Mon 02 Mar 2026 02:36:03 +0000 Manifest next update: Mon 09 Mar 2026 02:36:03 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: vzJCzZLS6KdP0PIlFuIpHL+d4gSw8t8HCK3CO84fBCM=) 2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: SHU1IW+sGBKNuhm5nQ8FmAnlaTsiFtzoH114y5IAowI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Mar 2 02:36:03 2026 GMT Not After : Mar 9 02:36:03 2026 GMT Subject: CN=69a4f795-af76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:23:72:58:a6:c2:d1:e1:1b:25:2c:00:af: ab:96:da:f7:ee:1c:af:cd:ab:4c:78:d0:ab:43:cf: ef:76:ba:27:10:a5:30:c8:25:ea:55:ed:08:29:d0: ee:17:52:da:17:3c:d3:22:1b:05:d7:c0:2d:cc:eb: 67:a0:57:20:d3:cb:39:16:27:1f:df:a8:60:77:96: 81:21:7d:ca:0b:56:c6:03:05:97:1e:ea:53:91:29: 99:0d:4e:3b:d9:a9:d1:eb:7a:be:f1:32:34:14:92: d1:99:5d:1c:91:f8:e4:cd:c3:03:29:83:b1:e7:e4: 91:3c:8d:92:09:60:e4:74:67:16:31:a6:d3:04:02: 88:c1:88:e9:58:c9:bc:02:05:1b:0d:c4:1d:c3:ab: 44:57:58:f8:d4:f7:4e:73:a9:43:6e:8e:e2:98:d1: 65:36:24:e1:16:e1:42:a1:15:3c:db:c1:63:f0:32: 44:ad:ed:3e:88:60:49:0e:1c:21:63:63:46:b7:b8: a7:60:70:0e:9c:16:9c:44:83:1e:bb:c9:c3:48:1c: 65:6e:e1:a5:8e:ba:33:81:bf:04:9f:f2:61:5a:92: 63:47:7f:b1:71:ff:9a:8c:41:89:39:0c:69:2c:fe: 41:8b:bc:24:d1:e7:8c:ab:77:77:96:f4:da:a0:22: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:46:AE:60:FA:CF:7A:50:F8:8C:07:71:F1:08:CE:67:21:2A:53:24 X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:28:ae:81:ff:cc:ee:b6:9e:b6:78:1b:8d:62:99:15:43:ff: 9b:0e:3d:5c:c8:99:99:75:f5:4b:3b:ca:e9:68:fd:82:dd:d1: a1:65:01:e9:5b:03:a8:4c:b9:ff:8b:a3:70:16:0a:6e:cb:ef: 12:66:2a:29:17:e3:0a:ae:a7:11:49:c8:0b:be:f4:c7:56:d5: a4:de:ae:db:4e:0a:6e:27:6a:a9:6d:e1:c0:b7:a7:24:99:fe: 18:94:ab:be:e1:80:50:b1:0a:8a:c3:13:a2:13:bd:7a:9b:a8: 3f:23:f8:cd:20:14:dc:e9:50:d2:5d:01:cd:b8:ee:d1:a3:ab: c8:a9:c5:46:7d:4e:9b:06:a3:cc:14:9c:a3:f0:60:ab:ee:4a: 20:36:5b:3a:bf:1b:f3:e8:c4:af:34:1d:8c:85:d2:da:e2:34: db:c0:18:c5:d5:f9:91:a6:d4:9f:7d:80:a6:a6:70:87:e3:3f: 2d:a8:fb:30:8b:95:1c:95:40:9d:24:cc:03:bd:d3:aa:ee:65: c8:68:52:37:48:45:34:86:21:b3:6e:a0:4c:c8:ff:73:a8:f3: c7:80:b9:83:ab:94:29:ce:31:31:a4:db:32:71:91:95:be:23: 16:95:b8:58:71:11:b5:f0:c2:a1:a6:c3:96:1a:0e:bb:9d:6f: 3e:9b:f7:86 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNjAzMDIwMjM2MDNaFw0yNjAzMDkwMjM2MDNaMBgxFjAUBgNV BAMTDTY5YTRmNzk1LWFmNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbOiNyWKbC0eEbJSwAr6uW2vfuHK/Nq0x40KtDz+92uicQpTDIJepV7Qgp0O4X UtoXPNMiGwXXwC3M62egVyDTyzkWJx/fqGB3loEhfcoLVsYDBZce6lORKZkNTjvZ qdHrer7xMjQUktGZXRyR+OTNwwMpg7Hn5JE8jZIJYOR0ZxYxptMEAojBiOlYybwC BRsNxB3Dq0RXWPjU905zqUNujuKY0WU2JOEW4UKhFTzbwWPwMkSt7T6IYEkOHCFj Y0a3uKdgcA6cFpxEgx67ycNIHGVu4aWOujOBvwSf8mFakmNHf7Fx/5qMQYk5DGks /kGLvCTR54yrd3eW9NqgItpLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGkauYPrP elD4jAdx8QjOZyEqUyQwHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDCKK6B/8zutp62eBuNYpkVQ/+bDj1cyJmZdfVLO8rpaP2C3dGhZQHpWwOoTLn/ i6NwFgpuy+8SZiopF+MKrqcRScgLvvTHVtWk3q7bTgpuJ2qpbeHAt6ckmf4YlKu+ 4YBQsQqKwxOiE716m6g/I/jNIBTc6VDSXQHNuO7Ro6vIqcVGfU6bBqPMFJyj8GCr 7kogNls6vxvz6MSvNB2MhdLa4jTbwBjF1fmRptSffYCmpnCH4z8tqPswi5UclUCd JMwDvdOq7mXIaFI3SEU0hiGzbqBMyP9zqPPHgLmDq5QpzjExpNsycZGVviMWlbhY cRG18MKhpsOWGg67nW8+m/eG -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:08 2026 by rpki-client