$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: v3xqCi9bgFeQW3jIEEcRPMf7AFZp2nC7tsxnIia+kK0= Subject key identifier: 64:09:49:83:25:54:80:D7:0A:F2:62:9B:A2:FD:79:2C:D5:31:34:A9 Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 3539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 352C Signing time: Tue 24 Mar 2026 15:11:25 +0000 Manifest this update: Tue 24 Mar 2026 15:11:25 +0000 Manifest next update: Tue 31 Mar 2026 15:11:25 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: IPhn67XiWlrsjN+W1EJqeGh5UwRg664lvZ0JUeg6Sl4=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: 3sjWZooxRLY6I7soj41lsN2IJ+Dwn122aCRXMGhUs7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Mar 24 15:11:25 2026 GMT Not After : Mar 31 15:11:25 2026 GMT Subject: CN=69c2a99d-e0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:ce:bc:a4:ee:99:d1:a6:a6:0b:fd:7a:2d: e1:22:f7:f7:64:29:67:62:20:ce:3d:12:a6:ec:db: 55:79:2c:31:25:b4:f6:8f:46:ba:78:69:48:d8:04: a6:51:db:e3:71:ad:91:fa:4b:33:e6:24:53:ab:24: ea:43:57:b8:e0:16:3d:45:6d:72:bd:07:e9:27:89: 25:6b:81:0f:2a:ac:c0:9b:97:bf:8e:22:0c:da:41: 71:c4:cf:e1:ed:a6:eb:10:83:c5:b7:94:d4:eb:69: ca:8e:29:ea:3c:c9:94:ce:6f:ca:38:f4:27:df:e7: dd:26:40:85:49:47:a4:c4:3e:a8:db:f4:c8:da:9d: 59:2b:39:34:c6:bc:ca:b0:fe:3a:0d:75:bf:0f:14: ae:12:30:4f:1c:54:9f:9c:cb:27:2c:eb:f3:67:e3: b1:0f:1a:39:a0:ba:81:d1:73:7d:0c:26:af:dd:e7: 74:59:25:2c:2c:10:b5:9e:59:20:dd:90:0f:73:be: dc:b3:68:ec:f9:f4:ba:75:28:a9:83:a5:13:da:bb: f2:b9:4d:38:20:10:af:bf:03:85:30:03:06:09:55: 69:05:0a:d8:fa:af:d3:5d:97:d7:4b:9e:f1:d3:9a: f2:39:9f:44:0a:8a:40:8e:27:51:20:8d:e5:23:3a: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:09:49:83:25:54:80:D7:0A:F2:62:9B:A2:FD:79:2C:D5:31:34:A9 X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:38:19:df:79:a8:2c:36:d5:89:fa:ac:89:25:18:56:a1:42: 31:b0:22:94:9c:dd:db:a7:6a:43:80:7d:a0:3b:ee:de:82:36: 42:a2:fe:91:84:33:06:7c:45:b6:a5:c5:d8:2e:30:5d:36:92: 67:13:e8:ef:40:89:cf:03:43:1b:1f:f7:44:d6:2d:98:c3:6e: 2e:b1:cb:e8:36:23:a0:23:6a:1e:5e:8e:3a:09:47:74:20:17: ff:db:27:79:f5:ed:68:fe:31:07:18:43:d9:34:ea:6d:0f:f1: 33:0a:7f:82:9f:a6:64:5b:48:92:d8:5b:08:c5:90:f9:55:61: 4f:6e:38:61:c0:2e:2a:91:47:d7:75:9d:8a:2d:72:81:af:a8: b0:0a:27:b7:61:a1:cc:c9:2e:09:42:dc:78:12:06:25:ee:d9: 1e:16:79:d5:36:0c:eb:3a:a7:5e:aa:40:6e:cd:47:3f:df:bf: f1:5d:36:8d:15:69:8c:97:71:34:91:73:0c:cc:3d:66:b0:0c: 66:5d:6b:ff:8a:0f:da:83:99:2a:97:fd:f4:f7:81:be:d2:64: 0f:e5:21:1a:63:1e:15:47:b5:2c:d0:7a:1a:cf:a6:aa:28:4d: 51:20:58:14:a4:dd:37:62:8e:03:8d:8b:12:9a:22:68:fd:4d: 5e:09:0c:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjYwMzI0MTUxMTI1WhcNMjYwMzMxMTUxMTI1WjAYMRYwFAYD VQQDEw02OWMyYTk5ZC1lMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRrOvKTumdGmpgv9ei3hIvf3ZClnYiDOPRKm7NtVeSwxJbT2j0a6eGlI2ASm Udvjca2R+ksz5iRTqyTqQ1e44BY9RW1yvQfpJ4kla4EPKqzAm5e/jiIM2kFxxM/h 7abrEIPFt5TU62nKjinqPMmUzm/KOPQn3+fdJkCFSUekxD6o2/TI2p1ZKzk0xrzK sP46DXW/DxSuEjBPHFSfnMsnLOvzZ+OxDxo5oLqB0XN9DCav3ed0WSUsLBC1nlkg 3ZAPc77cs2js+fS6dSipg6UT2rvyuU04IBCvvwOFMAMGCVVpBQrY+q/TXZfXS57x 05ryOZ9ECopAjidRII3lIzpfaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQJSYMl VIDXCvJim6L9eSzVMTSpMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtTgZ33moLDbVifqsiSUYVqFCMbAilJzd26dqQ4B9oDvu3oI2QqL+kYQzBnxF tqXF2C4wXTaSZxPo70CJzwNDGx/3RNYtmMNuLrHL6DYjoCNqHl6OOglHdCAX/9sn efXtaP4xBxhD2TTqbQ/xMwp/gp+mZFtIkthbCMWQ+VVhT244YcAuKpFH13Wdii1y ga+osAont2GhzMkuCULceBIGJe7ZHhZ51TYM6zqnXqpAbs1HP9+/8V02jRVpjJdx NJFzDMw9ZrAMZl1r/4oP2oOZKpf99PeBvtJkD+UhGmMeFUe1LNB6Gs+mqihNUSBY FKTdN2KOA42LEpoiaP1NXgkM4g== -----END CERTIFICATE-----Generated at Thu Mar 26 06:38:21 2026 by rpki-client