$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: rN/eWffzFiOpUXL0GEKaLToqq++X2ZlbN6/cjU06Etc= Subject key identifier: B6:B3:67:21:42:4D:C3:27:DD:44:E5:2E:5A:7B:4D:3B:85:1F:36:0F Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 06:13:10 +0000 Manifest this update: Wed 25 Mar 2026 06:13:09 +0000 Manifest next update: Wed 01 Apr 2026 06:13:09 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: Dk+Oj5eu0aNdzg4lNsPIDpDRe0c2OMkMYfEbu16R63w=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Mar 25 06:13:09 2026 GMT Not After : Apr 1 06:13:09 2026 GMT Subject: CN=69c37cf5-ff8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:2e:a6:08:e1:32:4f:8b:07:14:c0:9d:4c: 53:04:2d:a3:41:f2:78:10:55:c4:9a:02:01:08:63: a8:fa:a2:84:f5:82:76:a5:a9:8b:42:fc:78:75:b7: 5b:92:0c:58:8e:6a:f3:75:20:60:be:95:b4:7a:1f: 61:99:5e:f0:62:6f:8a:c0:6d:4f:aa:b6:14:60:63: 01:fb:b5:66:1b:cd:b6:6a:c2:34:80:92:73:6f:66: 07:18:17:43:d2:fe:2c:85:66:c3:a4:4e:ff:4c:b6: 87:c9:e8:77:dc:7f:58:e7:9b:fe:ce:9c:8e:e3:2a: fe:fd:5a:fd:85:49:64:a1:65:ca:e3:51:0c:7c:47: 12:02:f2:1e:7d:e7:59:84:cc:b8:2a:54:88:09:8c: c7:a3:f3:63:fe:d3:13:6e:9a:93:86:97:50:b1:6e: c7:67:7f:cc:f8:15:d3:29:bb:0f:33:4c:ac:05:e3: cf:6d:1c:9b:d5:56:a0:8c:47:61:68:d4:b1:45:1c: 4a:e5:81:16:5d:cf:3f:f0:c0:19:c7:50:8e:e3:cb: 32:bb:27:15:09:40:fb:cc:5d:cf:d1:1c:47:d6:c5: a0:f2:b3:66:9b:32:84:d1:9a:fd:03:33:5a:bc:d3: 18:b0:4b:8d:d7:77:db:9f:a7:d3:a1:90:60:41:14: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B3:67:21:42:4D:C3:27:DD:44:E5:2E:5A:7B:4D:3B:85:1F:36:0F X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:9a:d0:e0:09:20:03:cc:a5:be:05:44:2a:f8:50:81:97:5b: 26:d7:b7:0c:c0:ca:73:47:03:22:0a:11:13:9a:eb:03:d4:24: e0:c5:01:82:ed:0e:db:54:50:52:dd:ab:da:92:a9:14:bf:96: fb:bd:d2:49:79:0c:7e:11:9c:47:32:fb:ab:c7:8a:a3:a7:84: 90:29:95:26:3e:b0:21:ec:7c:c2:59:c2:a2:43:6f:ec:98:ae: 9d:58:6e:7f:7c:02:cb:eb:ea:15:a4:c8:4b:36:0e:97:a3:84: dc:db:e0:72:41:0b:ba:03:15:4a:a6:58:3c:83:92:fa:4c:b3: 2e:bc:06:6c:77:a7:ba:1f:30:cd:e9:a8:47:6c:e9:b7:dd:1b: 5e:22:e8:05:c0:56:72:26:a2:b2:b8:fd:c0:95:18:16:e0:44: e3:c5:ae:c0:0d:db:52:1e:3a:5b:b7:91:16:00:c3:a8:3b:f1: 33:c3:7f:ef:ef:29:ee:e3:28:3d:36:b0:fd:1c:cf:10:d5:64: 0a:dc:ed:b2:1b:46:33:64:9c:92:c7:04:e3:4b:61:45:c7:e6: 21:fd:8f:3b:c0:73:04:9d:27:ca:f4:26:ae:53:77:35:f4:2f: cd:45:57:5d:b8:df:e2:f2:fc:8f:4a:dc:e0:c6:43:d2:25:1a: a1:c7:d8:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNjAzMjUwNjEzMDlaFw0yNjA0MDEwNjEzMDlaMBgxFjAUBgNV BAMTDTY5YzM3Y2Y1LWZmOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrVS6mCOEyT4sHFMCdTFMELaNB8ngQVcSaAgEIY6j6ooT1gnalqYtC/Hh1t1uS DFiOavN1IGC+lbR6H2GZXvBib4rAbU+qthRgYwH7tWYbzbZqwjSAknNvZgcYF0PS /iyFZsOkTv9MtofJ6Hfcf1jnm/7OnI7jKv79Wv2FSWShZcrjUQx8RxIC8h5951mE zLgqVIgJjMej82P+0xNumpOGl1Cxbsdnf8z4FdMpuw8zTKwF489tHJvVVqCMR2Fo 1LFFHErlgRZdzz/wwBnHUI7jyzK7JxUJQPvMXc/RHEfWxaDys2abMoTRmv0DM1q8 0xiwS43Xd9ufp9OhkGBBFJoXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtrNnIUJN wyfdROUuWntNO4UfNg8wHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVH UnFyWnBZX1FKMUZycTlwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxmtDgCSADzKW+BUQq+FCBl1sm17cMwMpzRwMiChETmusD1CTgxQGC7Q7bVFBS 3avakqkUv5b7vdJJeQx+EZxHMvurx4qjp4SQKZUmPrAh7HzCWcKiQ2/smK6dWG5/ fALL6+oVpMhLNg6Xo4Tc2+ByQQu6AxVKplg8g5L6TLMuvAZsd6e6HzDN6ahHbOm3 3RteIugFwFZyJqKyuP3AlRgW4ETjxa7ADdtSHjpbt5EWAMOoO/Ezw3/v7ynu4yg9 NrD9HM8Q1WQK3O2yG0YzZJySxwTjS2FFx+Yh/Y87wHMEnSfK9CauU3c19C/NRVdd uN/i8vyPStzgxkPSJRqhx9gq -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:07 2026 by rpki-client