$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: p9isgubFYSG0mv7rjBAzjpGjSsgNEIpVVnakL8EcsjU= Subject key identifier: CE:A1:95:30:E0:B6:B8:2B:30:7B:50:12:3B:FD:0E:4F:D4:EB:E7:D1 Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: 73 Signing time: Wed 25 Mar 2026 07:13:54 +0000 Manifest this update: Wed 25 Mar 2026 07:13:54 +0000 Manifest next update: Wed 01 Apr 2026 07:13:54 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: XCD9x4QQDzy8i9p+nIfcOihKxCcPTzkzWU8DTVJiTVo=) 2: ABF8D808CA6D11F084F59728C4F9AE02.roa (hash: CpehDruHAKWYlilkVXEQKfS5FGCQ1Hj+67P+aQNX0UE=) 3: 8EAC217CCA5611F089E70D44C4F9AE02.roa (hash: XXxBCtuO8EG8rucnL16es476f6BaiYAikV+U/4E8csQ=) 4: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Mar 25 07:13:54 2026 GMT Not After : Apr 1 07:13:54 2026 GMT Subject: CN=69c38b32-cfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:93:6f:bf:5f:2b:60:ea:83:84:81:15:04: 67:78:aa:23:3b:a0:b8:44:54:32:18:65:c4:5d:bf: 96:ce:ae:b3:11:35:43:ba:86:fb:3b:5a:01:11:88: 27:f1:28:cb:cb:4a:2f:67:9d:a1:bd:53:41:12:eb: 32:75:f9:fb:4d:2c:22:9a:d9:d9:c9:25:46:92:2d: b7:d1:0b:7e:1c:f3:75:a3:16:14:b1:b1:c1:c8:ed: c3:ad:b2:54:e6:b2:71:8a:d3:17:ae:3e:f9:02:36: 93:15:e0:86:ff:aa:6c:dd:ce:b4:7c:66:a9:96:d9: b2:09:a2:d6:7a:1a:bf:1d:d0:8a:48:c9:d6:7e:02: 96:cd:f6:98:4e:6d:33:71:6b:a2:05:76:c2:0c:13: cd:61:3d:50:bc:f4:c0:b0:07:f0:15:61:49:eb:cb: 14:bb:77:3d:ca:a5:cc:f3:ba:09:7e:f6:6c:7a:c5: 27:b0:75:1e:94:e7:21:88:1d:2e:7d:1b:f7:6a:c1: 06:c8:d1:f1:0b:ba:4c:3d:ad:82:fd:50:9c:bb:77: 47:7f:17:c4:9c:c4:5a:a2:91:4c:6a:59:4c:94:15: 1b:1e:ce:cb:61:76:60:85:eb:ff:60:49:e2:13:60: 0e:74:98:c9:ec:68:ee:7c:df:b9:20:ce:1c:b7:df: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:95:30:E0:B6:B8:2B:30:7B:50:12:3B:FD:0E:4F:D4:EB:E7:D1 X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:28:c9:80:01:42:17:8c:8f:4b:d7:a7:ed:3c:d3:55:3d:13: 86:03:d2:7d:1c:be:fb:eb:5e:6d:99:12:70:48:12:a2:70:d6: 41:c7:d4:4b:6c:97:ed:97:0f:6c:97:c3:0e:c6:52:1b:b4:04: 69:62:d7:ce:e3:50:26:4f:da:e7:91:71:02:cd:79:9c:6e:a5: 6f:60:1f:1a:46:43:6b:1a:67:08:09:27:4c:8c:8d:f1:02:c1: 9b:e4:8e:df:22:cb:57:5a:03:5c:7f:36:f3:e8:3a:16:c2:48: 3a:b1:78:5a:50:6e:d0:06:7d:e5:a9:12:4c:63:bc:b1:3b:eb: cd:73:f8:21:d5:dc:c2:4f:1b:ad:31:e5:7d:b0:79:48:dd:04: a1:71:1c:c3:78:2e:a4:d6:d2:82:6b:08:dc:cd:3c:d2:ba:04: 72:7a:a3:0f:30:c6:79:c2:bb:c9:68:7e:65:54:01:9c:82:dc: 97:85:29:58:45:cd:2b:92:e6:73:8e:5f:56:7e:e9:4f:21:16: c0:d7:f8:38:b7:2d:0f:0f:5f:61:41:5c:bd:99:03:0c:f1:30: 7a:c3:15:8c:69:ce:62:b8:c0:78:19:73:47:3a:92:88:15:f5: df:81:b3:e5:82:28:30:63:f5:c8:64:b9:d4:e7:d3:13:d3:ae: 8b:cf:dc:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVEMUYxMTAvBgNVBAUTKDBDQUI2OEUwNjkwODNBNDM4OEU4RkM2OTc1OEYwNDU5 NjJGRDAxQUYwHhcNMjYwMzI1MDcxMzU0WhcNMjYwNDAxMDcxMzU0WjAYMRYwFAYD VQQDEw02OWMzOGIzMi1jZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6mTb79fK2Dqg4SBFQRneKojO6C4RFQyGGXEXb+Wzq6zETVDuob7O1oBEYgn 8SjLy0ovZ52hvVNBEusydfn7TSwimtnZySVGki230Qt+HPN1oxYUsbHByO3DrbJU 5rJxitMXrj75AjaTFeCG/6ps3c60fGapltmyCaLWehq/HdCKSMnWfgKWzfaYTm0z cWuiBXbCDBPNYT1QvPTAsAfwFWFJ68sUu3c9yqXM87oJfvZsesUnsHUelOchiB0u fRv3asEGyNHxC7pMPa2C/VCcu3dHfxfEnMRaopFMallMlBUbHs7LYXZghev/YEni E2AOdJjJ7GjufN+5IM4ct9//OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6hlTDg trgrMHtQEjv9Dk/U6+fRMB8GA1UdIwQYMBaAFAyraOBpCDpDiOj8aXWPBFli/QGv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUQxRi9BRDIwMjFBNDk3 NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9rT0k2UHhwZFk4RVdXTDlB YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi9ES3RvNEdrSU9r T0k2UHhwZFk4RVdXTDlBYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYijJgAFCF4yPS9en7TzTVT0ThgPSfRy+++tebZkScEgSonDWQcfUS2yX7ZcP bJfDDsZSG7QEaWLXzuNQJk/a55FxAs15nG6lb2AfGkZDaxpnCAknTIyN8QLBm+SO 3yLLV1oDXH828+g6FsJIOrF4WlBu0AZ95akSTGO8sTvrzXP4IdXcwk8brTHlfbB5 SN0EoXEcw3gupNbSgmsI3M080roEcnqjDzDGecK7yWh+ZVQBnILcl4UpWEXNK5Lm c45fVn7pTyEWwNf4OLctDw9fYUFcvZkDDPEwesMVjGnOYrjAeBlzRzqSiBX134Gz 5YIoMGP1yGS51OfTE9Oui8/cmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:15 2026 by rpki-client