$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: IpnXx25E4E+Qdpg5OpucEccR9j7aquTBZs0b+GdVPDQ= Subject key identifier: 42:7C:97:D4:CA:71:70:7D:B5:88:A7:C3:CA:B4:91:0C:4B:D6:2C:29 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0F00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0EEC Signing time: Tue 24 Mar 2026 17:31:15 +0000 Manifest this update: Tue 24 Mar 2026 17:31:14 +0000 Manifest next update: Tue 31 Mar 2026 17:31:14 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: vAZ92vKq9O0DMyFs0v0DBqG4wEHgBrvtcFyEPCiaFJs=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: EgdNpKJv5qTrYsCD4ruXe4GnFpA9Meqmqv0UvPzJUpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Mar 24 17:31:14 2026 GMT Not After : Mar 31 17:31:14 2026 GMT Subject: CN=69c2ca63-06fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:d7:c5:7e:23:cc:d6:86:73:3e:62:1e:d5: 27:b5:b4:07:53:5b:45:0a:0d:3d:eb:56:71:28:2a: 7a:98:dd:f9:73:79:e8:13:d1:ca:0c:34:57:6f:0e: f8:be:32:07:ac:bf:55:69:47:45:14:d2:7a:70:67: 91:18:63:52:39:79:12:34:27:fd:89:e0:fe:0c:cb: 09:d0:4c:0f:1c:ef:f7:44:16:3b:ac:78:67:b3:08: f4:90:0a:33:60:78:8a:10:20:02:61:3a:25:13:32: e8:90:48:01:e6:fb:52:e2:fd:6f:da:00:e1:d5:cf: 4e:0f:a5:b4:9d:eb:a7:d5:7c:f0:ae:19:2a:c3:10: 18:73:0e:b1:6a:97:d0:e6:fd:d5:87:c4:3f:50:d3: 14:a2:81:2d:d9:26:23:f6:ca:cc:ed:e3:26:bc:56: 79:4b:13:9e:65:d6:44:85:7d:65:dd:a5:3a:c2:0b: 80:d6:e8:91:d2:92:e1:94:58:48:bf:f5:73:54:c6: 16:ef:ed:b3:1d:41:e3:e2:3d:75:5a:93:b7:d7:b0: a6:27:28:cc:e0:2d:ea:6c:87:97:90:98:ea:3d:eb: 8d:27:48:e7:1a:28:19:0b:58:13:e6:07:d6:af:4a: 26:c7:5e:37:6d:fa:bd:8e:77:a7:af:84:0a:25:34: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:97:D4:CA:71:70:7D:B5:88:A7:C3:CA:B4:91:0C:4B:D6:2C:29 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ec:8a:89:ba:39:64:0a:9f:20:85:41:1e:33:f6:8c:61:48: 26:80:8a:2b:34:fd:61:4f:f6:6d:da:c4:06:27:d0:bc:2d:c9: a1:31:13:53:5c:f1:e3:fc:81:96:27:98:23:cb:f0:ce:11:34: b9:e5:7c:6d:d0:33:ec:c2:c5:b3:0c:c1:38:d2:23:51:d7:3f: 09:06:d6:3b:7b:7e:ca:30:fe:e5:62:ec:9d:62:0c:16:67:fd: 1f:f5:1d:08:f6:38:4e:52:3f:17:9b:73:92:ac:58:3f:5f:91: 31:95:3d:02:32:43:ec:a7:c6:3c:20:6e:b6:22:4c:9e:7c:96: 17:1c:f2:b3:91:3a:a6:f7:10:a1:c5:ff:61:b7:01:9f:55:e8: 7c:f0:67:37:6b:33:de:39:5c:d3:3b:9e:dd:21:55:82:45:da: ca:9c:79:3b:96:e6:08:25:f5:28:bf:12:f4:5b:7a:7c:90:2c: 6a:2e:19:b6:8a:2c:a6:c2:a9:6c:62:ad:f1:2b:5a:5f:c0:08: 9d:3d:08:1f:47:74:d0:25:d3:1e:ce:3b:f3:13:c3:87:be:5e: 69:22:f0:39:a4:c9:83:7e:98:01:97:59:6e:f5:c4:d4:be:35: 68:03:a1:57:9f:6b:25:99:a1:53:7f:0a:a2:9c:e6:a4:b1:bd: 2f:e1:39:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjYwMzI0MTczMTE0WhcNMjYwMzMxMTczMTE0WjAYMRYwFAYD VQQDEw02OWMyY2E2My0wNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnczXxX4jzNaGcz5iHtUntbQHU1tFCg0961ZxKCp6mN35c3noE9HKDDRXbw74 vjIHrL9VaUdFFNJ6cGeRGGNSOXkSNCf9ieD+DMsJ0EwPHO/3RBY7rHhnswj0kAoz YHiKECACYTolEzLokEgB5vtS4v1v2gDh1c9OD6W0neun1XzwrhkqwxAYcw6xapfQ 5v3Vh8Q/UNMUooEt2SYj9srM7eMmvFZ5SxOeZdZEhX1l3aU6wguA1uiR0pLhlFhI v/VzVMYW7+2zHUHj4j11WpO317CmJyjM4C3qbIeXkJjqPeuNJ0jnGigZC1gT5gfW r0omx143bfq9jnenr4QKJTRPWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ8l9TK cXB9tYinw8q0kQxL1iwpMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWeyKibo5ZAqfIIVBHjP2jGFIJoCKKzT9YU/2bdrEBifQvC3JoTETU1zx4/yB lieYI8vwzhE0ueV8bdAz7MLFswzBONIjUdc/CQbWO3t+yjD+5WLsnWIMFmf9H/Ud CPY4TlI/F5tzkqxYP1+RMZU9AjJD7KfGPCButiJMnnyWFxzys5E6pvcQocX/YbcB n1XofPBnN2sz3jlc0zue3SFVgkXaypx5O5bmCCX1KL8S9Ft6fJAsai4ZtoospsKp bGKt8StaX8AInT0IH0d00CXTHs478xPDh75eaSLwOaTJg36YAZdZbvXE1L41aAOh V59rJZmhU38KopzmpLG9L+E50g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:24 2026 by rpki-client