$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: B7EeMXsuSiXrokHEeAKQ4m3VUtT77Q1UJIEJTS3+WOA= Subject key identifier: A2:E6:F7:28:86:CB:8B:12:D8:9D:7A:6A:40:DC:5D:DB:F7:30:43:75 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 98 Signing time: Wed 25 Mar 2026 06:40:53 +0000 Manifest this update: Wed 25 Mar 2026 06:40:53 +0000 Manifest next update: Wed 01 Apr 2026 06:40:53 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: 5Kmh46gN8yjmb+KOGB7rO5cT3mSpdZ3Yu+aeVQPB/50=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Mar 25 06:40:53 2026 GMT Not After : Apr 1 06:40:53 2026 GMT Subject: CN=69c38375-cd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:a0:31:e5:6d:04:43:8e:be:eb:49:30:1c: 52:63:1a:4a:40:2f:36:3d:3c:66:98:54:b4:06:fa: be:1e:6f:fc:e7:70:7f:dc:66:7a:58:92:be:e5:51: b1:d0:67:e1:6d:14:da:46:33:15:3e:5b:97:02:3c: 9f:48:4c:df:76:75:e4:09:04:52:ef:cc:26:57:7b: b9:cb:eb:bd:cc:7d:1d:25:1c:e7:54:bf:6d:7e:50: f2:0a:a1:4e:95:96:ef:0a:1c:d9:25:68:dd:c0:55: ee:1c:73:a1:b4:23:c9:e4:af:a1:0f:15:66:be:89: 40:51:ab:cc:61:c4:98:fe:a1:80:2b:06:a0:db:c9: ff:0a:10:84:a7:8b:1b:e2:05:a6:2f:0e:23:2d:70: 12:7c:d1:b4:cb:c7:3b:87:c0:5f:b9:ce:b6:52:25: 78:9e:01:20:c7:8c:d7:e3:09:68:58:13:0c:ff:69: 56:73:90:b3:36:2d:1d:70:af:ac:d1:8e:47:0f:df: 07:ba:4e:84:66:4b:6d:7d:bb:1b:b3:cc:5f:55:87: ab:76:4d:44:34:d7:c0:f3:e9:c9:93:59:3b:a4:80: 86:d1:02:2a:dd:45:cb:5c:28:f3:87:a8:62:ab:e2: 12:b0:03:ad:16:63:f3:14:07:ac:b8:4c:76:33:7a: bc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E6:F7:28:86:CB:8B:12:D8:9D:7A:6A:40:DC:5D:DB:F7:30:43:75 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:51:cf:ee:29:70:f7:ef:2d:e7:48:df:c8:85:a3:be:e6:9c: a7:a6:6d:50:e9:81:c0:47:da:e4:d0:c6:f1:6c:22:16:3b:66: a3:af:dc:52:28:aa:58:b2:b7:6e:ae:c5:12:79:dd:69:43:f3: d1:74:07:ee:0d:ca:e2:b7:fc:77:9a:73:4b:55:bd:17:f5:d6: 4d:89:d8:f4:2c:bf:a6:3f:fb:05:ab:df:85:73:4a:c6:3b:f6: 8e:c2:9f:46:a7:c4:6f:89:4b:11:51:db:e0:0b:bf:05:53:ac: 9e:62:37:cb:ae:51:d9:0b:89:b0:4a:d2:d5:39:51:c3:5c:9b: 3c:a8:a5:e4:8d:c2:f6:5a:55:f2:59:70:43:8c:1b:9a:5b:b5: c6:b6:8e:0c:c7:a3:dc:9d:09:0d:c3:8e:85:55:18:72:2e:5f: c0:ce:0a:42:30:5d:97:82:b9:75:f1:ac:24:8c:5b:86:5b:c1: 49:85:42:6a:cb:90:9b:4c:d4:bc:38:d9:e1:04:d0:95:64:67: 51:a1:ed:0d:45:3d:b0:91:a2:ee:65:4e:bb:3e:0d:d2:5e:2b: 81:1d:6d:0f:f0:a6:62:d4:d8:fe:21:2c:15:cd:66:77:bc:7e: 08:59:4c:ef:e6:69:bd:5f:50:d8:9a:34:e3:1a:0e:65:f7:f8: d2:08:af:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5QzIxMTAvBgNVBAUTKDc0RENFQUE4NTA2QTJCMzI3Rjg3QTQyRDA3NDFBQzM2 RUVERUVCNDkwHhcNMjYwMzI1MDY0MDUzWhcNMjYwNDAxMDY0MDUzWjAYMRYwFAYD VQQDEw02OWMzODM3NS1jZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6OgMeVtBEOOvutJMBxSYxpKQC82PTxmmFS0Bvq+Hm/853B/3GZ6WJK+5VGx 0GfhbRTaRjMVPluXAjyfSEzfdnXkCQRS78wmV3u5y+u9zH0dJRznVL9tflDyCqFO lZbvChzZJWjdwFXuHHOhtCPJ5K+hDxVmvolAUavMYcSY/qGAKwag28n/ChCEp4sb 4gWmLw4jLXASfNG0y8c7h8Bfuc62UiV4ngEgx4zX4wloWBMM/2lWc5CzNi0dcK+s 0Y5HD98Huk6EZkttfbsbs8xfVYerdk1ENNfA8+nJk1k7pICG0QIq3UXLXCjzh6hi q+ISsAOtFmPzFAesuEx2M3q8GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLm9yiG y4sS2J16akDcXdv3MEN1MB8GA1UdIwQYMBaAFHTc6qhQaisyf4ekLQdBrDbu3utJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDlDMi9FM0EzREVFNjQ4 QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6Sl9oNlF0QjBHc051N2U2 MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDlDMi9FM0EzREVFNjQ4QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6 Sl9oNlF0QjBHc051N2U2MGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH1HP7ilw9+8t50jfyIWjvuacp6ZtUOmBwEfa5NDG8WwiFjtmo6/cUiiqWLK3 bq7FEnndaUPz0XQH7g3K4rf8d5pzS1W9F/XWTYnY9Cy/pj/7BavfhXNKxjv2jsKf RqfEb4lLEVHb4Au/BVOsnmI3y65R2QuJsErS1TlRw1ybPKil5I3C9lpV8llwQ4wb mlu1xraODMej3J0JDcOOhVUYci5fwM4KQjBdl4K5dfGsJIxbhlvBSYVCasuQm0zU vDjZ4QTQlWRnUaHtDUU9sJGi7mVOuz4N0l4rgR1tD/CmYtTY/iEsFc1md7x+CFlM 7+ZpvV9Q2Jo04xoOZff40givRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:41:16 2026 by rpki-client