$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json) Hash identifier: s37lLNFp/cNk/1LtDaUMXjpSo8BifZZdj8RILLT27iQ= Subject key identifier: 01:15:B1:57:F4:B1:87:8C:F8:4F:67:9A:47:A0:61:CA:3D:31:13:19 Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft Manifest number: FB Signing time: Wed 25 Mar 2026 05:28:21 +0000 Manifest this update: Wed 25 Mar 2026 05:28:21 +0000 Manifest next update: Wed 01 Apr 2026 05:28:21 +0000 Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: C9s2WrMs6hEfVAYgl1DKtn1JV0axTHUewvuc5HaqLJ8=) 2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Validity Not Before: Mar 25 05:28:21 2026 GMT Not After : Apr 1 05:28:21 2026 GMT Subject: CN=69c37275-42b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:92:61:48:3a:f9:5f:64:15:dd:a2:3d:56: a5:7c:71:b2:62:06:5b:45:1d:e7:bb:a1:ac:9d:32: 5c:89:92:b8:ee:a1:bd:cc:ba:9d:b4:29:94:28:95: 4f:ca:32:7c:51:43:92:d6:0d:00:61:56:03:79:fa: 43:bb:53:4a:3a:08:bc:c6:86:f7:94:7d:96:b5:7e: 9c:e7:bd:1b:6c:59:a8:3b:65:56:a3:77:4f:da:44: 0c:dd:39:b8:a1:54:0a:1d:5e:7f:1f:40:5e:0f:2e: e9:85:f0:8f:59:fb:a2:94:eb:c8:8d:42:aa:45:bc: aa:83:36:b9:ba:58:f5:6f:24:48:11:eb:3d:49:05: 07:a1:30:d2:ae:a7:08:54:4d:5d:02:4f:70:94:b8: db:4c:b9:3d:56:fb:0d:14:04:5c:67:16:6a:8e:1a: aa:36:7b:08:e2:66:b5:8a:bd:eb:b3:5c:7b:b6:b1: d5:5b:03:e8:11:07:a7:73:07:7b:74:3e:69:ee:7d: e8:f3:5f:ec:0b:47:4b:f5:d6:d5:9a:ac:da:31:98: 5e:f0:2e:02:c9:9d:27:34:81:1b:c9:c5:0a:2c:c4: 7f:13:02:d0:95:4d:e9:fc:a0:6a:60:6b:af:e8:18: b2:51:5d:1c:b3:6b:a7:05:22:40:57:49:1c:de:d5: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:15:B1:57:F4:B1:87:8C:F8:4F:67:9A:47:A0:61:CA:3D:31:13:19 X509v3 Authority Key Identifier: keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:78:0e:45:32:9e:22:e0:ac:8c:0f:a1:7f:74:dc:2d:dd:46: d9:8b:c7:99:94:55:75:17:fb:64:08:3b:0b:3e:a0:2c:ac:9c: 7f:5b:5e:41:41:d4:20:d4:98:ed:ab:a9:c2:cf:ce:e7:ef:46: 32:80:44:f1:4c:bb:a5:18:48:88:92:89:f1:9c:ae:7d:1d:c3: 82:d7:2e:cc:50:25:5b:69:0d:d2:83:c4:18:77:92:72:83:82: af:af:af:a9:4d:91:9b:62:f6:3c:dd:84:71:ed:57:02:7f:60: ed:ef:03:4e:d0:6c:28:f5:35:df:5f:b9:b1:47:c9:69:94:51: ee:80:1e:92:1a:b0:43:eb:1a:fb:27:a1:f3:c3:65:e2:45:a6: 93:68:bc:c8:6e:82:9f:4c:6c:66:e8:9c:e3:23:bc:bc:8b:ea: 98:f6:db:46:b1:14:a5:b5:cd:22:2d:6b:d9:ae:d1:47:93:62: ed:2c:8b:46:6e:d8:ae:c3:77:88:29:e0:21:85:5e:09:4c:9a: 90:87:94:32:ab:28:eb:d4:48:65:af:ab:d0:a2:6b:47:3b:d8: a1:4e:96:05:95:a7:48:72:c9:78:6d:d3:75:04:25:b8:0c:85: 63:b0:08:f6:55:e1:94:a2:68:63:70:63:da:1c:05:be:7b:78: c5:67:b2:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC NjcxRjg2RjMwHhcNMjYwMzI1MDUyODIxWhcNMjYwNDAxMDUyODIxWjAYMRYwFAYD VQQDEw02OWMzNzI3NS00MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMaSYUg6+V9kFd2iPValfHGyYgZbRR3nu6GsnTJciZK47qG9zLqdtCmUKJVP yjJ8UUOS1g0AYVYDefpDu1NKOgi8xob3lH2WtX6c570bbFmoO2VWo3dP2kQM3Tm4 oVQKHV5/H0BeDy7phfCPWfuilOvIjUKqRbyqgza5ulj1byRIEes9SQUHoTDSrqcI VE1dAk9wlLjbTLk9VvsNFARcZxZqjhqqNnsI4ma1ir3rs1x7trHVWwPoEQencwd7 dD5p7n3o81/sC0dL9dbVmqzaMZhe8C4CyZ0nNIEbycUKLMR/EwLQlU3p/KBqYGuv 6BiyUV0cs2unBSJAV0kc3tVfbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEVsVf0 sYeM+E9nmkegYco9MRMZMB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9FOTY0ODlBRUFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhB dkpua1cxbDFUX2UyY2Zodk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXgORTKeIuCsjA+hf3TcLd1G2YvHmZRVdRf7ZAg7Cz6gLKycf1teQUHUINSY 7aupws/O5+9GMoBE8Uy7pRhIiJKJ8ZyufR3DgtcuzFAlW2kN0oPEGHeScoOCr6+v qU2Rm2L2PN2Ece1XAn9g7e8DTtBsKPU131+5sUfJaZRR7oAekhqwQ+sa+yeh88Nl 4kWmk2i8yG6Cn0xsZuic4yO8vIvqmPbbRrEUpbXNIi1r2a7RR5Ni7SyLRm7YrsN3 iCngIYVeCUyakIeUMqso69RIZa+r0KJrRzvYoU6WBZWnSHLJeG3TdQQluAyFY7AI 9lXhlKJoY3Bj2hwFvnt4xWeyTA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:09:18 2026 by rpki-client