$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: Xd+OOUyS6yL3kzBSENgdVBpldP+zf4EUZIAKAJaRzh0= Subject key identifier: 0F:4C:B9:D2:21:99:F6:98:2A:9F:FB:4B:0D:34:89:1A:75:3F:14:CB Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 09A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 099C Signing time: Tue 24 Mar 2026 19:45:46 +0000 Manifest this update: Tue 24 Mar 2026 19:45:45 +0000 Manifest next update: Tue 31 Mar 2026 19:45:45 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: CA42o3xxWkrHvC7O8uGRXrfcY0tjdYqJIyi3uyOtWC8=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: CDcLRqPOlIl7GGhyIqwucsiXiEcpvCH7QLIogd4pmBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2470 (0x9a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Mar 24 19:45:45 2026 GMT Not After : Mar 31 19:45:45 2026 GMT Subject: CN=69c2e9e9-b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:c5:cc:4a:06:08:e6:67:27:0b:9f:44:bd: 45:35:eb:f3:7d:68:d0:5a:3c:76:f9:18:e1:29:9a: 3a:6e:3a:fa:f9:fa:38:7e:22:5c:68:7c:84:26:a0: d6:82:dc:35:42:37:4a:82:2e:c8:b2:f7:2c:05:1d: 40:93:08:a3:56:37:e8:6f:91:cc:81:51:ba:29:c3: 67:92:d0:db:d8:bd:ba:4d:61:68:2f:77:80:f9:f9: eb:cc:d8:bd:4a:9e:10:bc:d0:93:d3:23:34:da:06: cf:e9:e5:21:d6:68:2c:c9:bc:bc:48:d1:da:44:df: c8:eb:0d:e1:62:6f:e4:aa:16:ea:4e:b9:fb:2f:6a: 15:4b:2f:7a:96:de:fc:55:8e:29:cb:a2:b9:6c:74: 34:fa:1a:34:60:c8:94:f8:c5:40:92:fb:29:a7:fd: e1:cf:8e:b0:3e:66:c6:51:ef:13:51:8e:5c:2f:b6: f5:f5:fc:17:89:1e:c8:39:ad:8e:35:e6:e4:e8:5e: 33:85:10:4e:92:73:1f:fd:43:42:0f:c8:a7:06:28: 12:ec:a8:82:73:ed:b7:99:b6:92:6c:02:5e:3d:05: 78:30:b0:23:a4:e9:a5:15:ec:49:74:40:77:7a:5a: dd:c4:97:d3:2f:dc:f3:6b:f2:26:24:d5:1c:7a:61: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:B9:D2:21:99:F6:98:2A:9F:FB:4B:0D:34:89:1A:75:3F:14:CB X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:51:82:ce:5a:46:fb:d0:23:04:ce:39:dc:e5:be:91:82:98: 19:a1:c1:e1:f7:0a:1a:48:1d:ca:c2:cf:be:7d:48:7d:76:6f: ff:96:1c:7c:75:c8:0a:4c:81:53:6a:5d:3a:ac:b4:31:c0:c0: 27:14:3d:85:e5:f5:51:95:7f:44:f5:d9:f8:75:bc:d1:0c:8b: 2d:c6:36:8e:3c:96:f3:86:1d:87:66:78:62:c6:18:2e:97:70: a3:84:cb:12:d9:8b:09:c2:88:c9:bc:53:06:47:4b:fd:72:ae: 87:b5:ca:5a:47:05:3d:0a:99:33:cd:fa:8c:fc:2f:26:8a:b3: fd:36:18:45:85:4a:49:0f:08:55:cc:6d:53:b9:73:53:3a:04: b4:e2:2d:fb:17:90:23:6d:4d:06:4a:0b:92:41:7c:ba:e9:1e: e8:e4:02:75:6d:b2:2a:91:ce:65:af:1c:60:5c:b2:b2:01:dc: d6:79:85:9f:70:b1:79:31:b2:d6:25:6c:18:38:8a:e3:4b:d9: ce:78:b1:67:ba:ee:a3:1c:ef:cb:cf:c6:ec:22:45:29:60:36: d6:7a:40:f5:b9:70:37:43:fd:f2:1b:b8:50:29:f3:4f:d2:70: 82:6d:8d:95:86:16:a8:0e:6d:40:e2:58:29:57:b4:b7:08:46: 97:4b:7b:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjYwMzI0MTk0NTQ1WhcNMjYwMzMxMTk0NTQ1WjAYMRYwFAYD VQQDEw02OWMyZTllOS1iOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsvFzEoGCOZnJwufRL1FNevzfWjQWjx2+RjhKZo6bjr6+fo4fiJcaHyEJqDW gtw1QjdKgi7IsvcsBR1AkwijVjfob5HMgVG6KcNnktDb2L26TWFoL3eA+fnrzNi9 Sp4QvNCT0yM02gbP6eUh1mgsyby8SNHaRN/I6w3hYm/kqhbqTrn7L2oVSy96lt78 VY4py6K5bHQ0+ho0YMiU+MVAkvspp/3hz46wPmbGUe8TUY5cL7b19fwXiR7IOa2O Nebk6F4zhRBOknMf/UNCD8inBigS7KiCc+23mbaSbAJePQV4MLAjpOmlFexJdEB3 elrdxJfTL9zza/ImJNUcemFHiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9MudIh mfaYKp/7Sw00iRp1PxTLMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAllGCzlpG+9AjBM453OW+kYKYGaHB4fcKGkgdysLPvn1IfXZv/5YcfHXICkyB U2pdOqy0McDAJxQ9heX1UZV/RPXZ+HW80QyLLcY2jjyW84Ydh2Z4YsYYLpdwo4TL EtmLCcKIybxTBkdL/XKuh7XKWkcFPQqZM836jPwvJoqz/TYYRYVKSQ8IVcxtU7lz UzoEtOIt+xeQI21NBkoLkkF8uuke6OQCdW2yKpHOZa8cYFyysgHc1nmFn3CxeTGy 1iVsGDiK40vZznixZ7ruoxzvy8/G7CJFKWA21npA9blwN0P98hu4UCnzT9Jwgm2N lYYWqA5tQOJYKVe0twhGl0t7LA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:21 2026 by rpki-client