$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: fz07I2jzeBRMGLH0e32S+L+gQcs6y3i7fNFI0sA8FW8= Subject key identifier: 07:A0:CE:40:A5:9A:DE:0A:52:E3:B1:7C:8A:27:17:6D:9B:0C:3A:33 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0CD6 Signing time: Tue 24 Mar 2026 18:11:35 +0000 Manifest this update: Tue 24 Mar 2026 18:11:35 +0000 Manifest next update: Tue 31 Mar 2026 18:11:35 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: X/2dFAA/bGjRbO9n2JFNWPdSHRBVbDbnGu8sPvQGkas=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: fUY5HB4r5+RIwAfPCkMPyTU4vay6oYcoCDFz1+akttk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: Mar 24 18:11:35 2026 GMT Not After : Mar 31 18:11:35 2026 GMT Subject: CN=69c2d3d7-c809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:4f:47:7a:da:9f:ed:29:ea:33:9d:21:c5: 4f:17:0b:b4:6d:59:2f:92:6d:13:68:ed:65:c5:94: 96:ff:39:03:ae:c6:76:76:8e:fc:9e:a7:23:4e:1c: 2e:d1:78:10:56:3d:f0:33:15:e3:7e:e1:1b:73:8f: b4:65:44:f0:c8:46:36:67:a3:9c:86:f6:1e:28:cd: d6:08:27:f4:1c:b2:fb:fb:b9:8d:12:2a:7e:de:71: 31:18:1b:fa:02:cd:f6:43:61:92:9f:48:e4:f3:49: 27:05:c1:03:86:34:75:18:67:09:aa:f5:20:55:61: 34:aa:0c:16:6f:2a:1a:0a:c7:e1:48:06:16:d0:5f: 70:0b:18:c8:ef:5b:df:af:b7:d8:f3:21:5a:f3:88: 1d:44:6e:80:76:ca:02:56:96:40:b9:b2:9e:4a:54: ad:62:bf:bf:cb:29:5b:c8:bd:80:4d:16:97:90:8e: 37:c7:6e:98:8d:b5:b0:5f:5e:b1:7b:84:4b:1c:5e: fa:44:2f:1b:da:b7:f5:08:1d:b3:03:e6:85:dc:b5: d0:5f:f6:8b:04:bb:e2:a2:f8:ab:f2:7c:1f:05:44: 41:ec:e9:b5:03:09:f7:71:ed:22:17:a8:fa:7b:73: e0:01:2e:86:d3:0a:9f:bc:8e:30:3e:ba:a8:5e:20: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A0:CE:40:A5:9A:DE:0A:52:E3:B1:7C:8A:27:17:6D:9B:0C:3A:33 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:5c:23:c7:84:9d:4e:fd:0d:ca:a4:04:34:75:6c:a4:01: 5d:f8:8f:0a:1f:b5:06:d9:29:a8:c4:51:18:43:49:31:2b:67: c4:bf:00:4b:ed:ff:e4:bd:ce:bc:f5:63:79:61:6e:24:dd:5f: c7:87:96:62:e9:04:c0:dc:91:4f:da:a8:0c:a2:d8:8a:f0:34: 4e:c7:c1:e5:9a:d5:98:d1:0e:b4:19:f0:a4:7a:90:17:09:ab: 89:9b:8c:6c:91:15:5e:68:5e:82:a0:43:2b:44:e6:2a:ff:1c: ee:e5:8d:d6:85:46:3b:ae:db:47:11:a8:67:41:86:a2:04:84: 01:7d:ad:bb:70:b3:c4:97:fd:1d:3b:ab:3c:4f:79:74:78:7d: ee:5d:3c:4a:1a:81:3c:e2:ec:39:20:2e:06:b3:80:dc:9d:eb: c7:48:e6:32:92:0a:d5:60:b6:8a:25:00:9f:51:50:04:46:0c: 75:16:6e:2b:00:a4:27:cd:9c:6a:46:b8:db:bf:f4:ae:4b:f7: 72:7e:76:6a:8e:a9:fd:a4:97:a9:42:42:7d:3e:31:0b:58:0b: 32:70:0d:ed:51:f4:66:e4:bf:b3:be:d4:00:6e:56:26:07:6c: f3:a2:43:2c:82:c4:e6:ca:83:2e:19:43:73:6b:79:32:f0:ce: 47:36:72:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjYwMzI0MTgxMTM1WhcNMjYwMzMxMTgxMTM1WjAYMRYwFAYD VQQDEw02OWMyZDNkNy1jODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3hPR3ran+0p6jOdIcVPFwu0bVkvkm0TaO1lxZSW/zkDrsZ2do78nqcjThwu 0XgQVj3wMxXjfuEbc4+0ZUTwyEY2Z6OchvYeKM3WCCf0HLL7+7mNEip+3nExGBv6 As32Q2GSn0jk80knBcEDhjR1GGcJqvUgVWE0qgwWbyoaCsfhSAYW0F9wCxjI71vf r7fY8yFa84gdRG6AdsoCVpZAubKeSlStYr+/yylbyL2ATRaXkI43x26YjbWwX16x e4RLHF76RC8b2rf1CB2zA+aF3LXQX/aLBLviovir8nwfBURB7Om1Awn3ce0iF6j6 e3PgAS6G0wqfvI4wPrqoXiCYSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAegzkCl mt4KUuOxfIonF22bDDozMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQqlcI8eEnU79DcqkBDR1bKQBXfiPCh+1BtkpqMRRGENJMStnxL8AS+3/5L3O vPVjeWFuJN1fx4eWYukEwNyRT9qoDKLYivA0TsfB5ZrVmNEOtBnwpHqQFwmriZuM bJEVXmhegqBDK0TmKv8c7uWN1oVGO67bRxGoZ0GGogSEAX2tu3CzxJf9HTurPE95 dHh97l08ShqBPOLsOSAuBrOA3J3rx0jmMpIK1WC2iiUAn1FQBEYMdRZuKwCkJ82c aka427/0rkv3cn52ao6p/aSXqUJCfT4xC1gLMnAN7VH0ZuS/s77UAG5WJgds86JD LILE5sqDLhlDc2t5MvDORzZyCw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:26:38 2026 by rpki-client