$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: b+Udy/NrIwDNjK3vIAAyBZQCNqlwbbJf3yB4wRKFSTU= Subject key identifier: 97:72:19:4F:EB:52:BD:A8:40:77:CC:9A:FD:B0:A5:72:83:D5:0C:CE Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 94 Signing time: Wed 25 Mar 2026 06:47:47 +0000 Manifest this update: Wed 25 Mar 2026 06:47:46 +0000 Manifest next update: Wed 01 Apr 2026 06:47:46 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: oA67yAv3AuBTgXliXTAZ+J+Arl2DsHAQHegSutm1KP8=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Mar 25 06:47:46 2026 GMT Not After : Apr 1 06:47:46 2026 GMT Subject: CN=69c38512-b8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:45:a8:59:8a:31:64:b3:c2:60:02:94:d5: 11:1e:33:dd:c0:cd:b7:14:d0:ea:a9:f8:ce:a2:e1: dc:cc:69:e2:de:3f:cf:f4:f1:9e:14:36:44:6e:af: c7:28:c4:56:0b:2a:7e:b9:1c:40:f0:d0:65:73:07: 77:94:9b:f4:f8:87:1c:01:42:d5:54:33:fd:2c:5f: ea:15:97:f0:0c:cc:c2:e8:da:17:36:02:20:7c:4f: c3:49:7c:f2:d7:84:1b:b6:39:a4:14:f0:39:2e:b3: ac:cc:d2:c4:89:77:e0:b1:a1:87:72:19:9f:de:c7: bf:2b:d9:a3:9a:60:bf:3a:0e:76:c0:50:4b:7e:12: 47:52:0d:44:fa:12:dc:fc:29:0c:1f:1b:fd:04:7b: 14:d0:a6:9a:ae:3a:16:2b:0d:6f:2c:41:39:ae:73: 7f:ff:54:38:a5:f5:af:25:cd:f0:2e:18:69:42:e3: b5:97:57:c2:1a:1e:9f:1b:cb:f8:2d:d9:ba:49:e8: 53:c8:0b:34:30:24:d2:a4:31:8d:0e:cb:3b:44:4a: ef:d7:5a:11:90:80:16:b4:a5:ad:bf:95:ef:2c:94: 24:5f:cb:6e:c0:15:ba:8f:06:2b:e7:a1:94:95:bd: d8:62:f8:5e:6c:f2:d5:32:33:d2:cd:5d:2f:85:ee: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:19:4F:EB:52:BD:A8:40:77:CC:9A:FD:B0:A5:72:83:D5:0C:CE X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:d2:77:b5:fc:f3:19:42:c7:b8:e1:ff:43:53:66:39:24: 56:d8:d6:97:8c:2f:af:fd:da:cd:a0:8c:b4:df:76:d7:68:cf: 14:3f:d1:73:62:67:02:5c:14:a6:50:4c:2b:06:58:12:63:16: 76:f9:90:92:aa:65:6d:a2:52:6c:09:c5:b3:2f:a5:20:e0:90: 3f:c4:36:ee:bf:78:39:51:34:a3:c7:a2:3a:e2:2b:55:45:8f: 32:42:87:4b:10:da:de:e5:c9:64:d1:e2:53:cc:e9:d6:5e:00: a0:83:a7:49:0a:de:14:a5:b6:15:c6:f0:77:df:7f:d8:29:eb: ea:ee:70:0b:10:2c:a9:b3:b0:4f:bb:11:01:b0:fd:57:bc:33: 85:4e:4b:11:c1:46:4d:40:80:21:7a:72:a4:f5:06:91:77:6c: 61:c3:3e:b0:50:89:f7:13:bc:6e:f6:05:d1:7e:4f:72:0b:5d: dc:e9:b1:59:3e:e6:c7:df:00:9f:07:28:7e:b5:d9:cc:56:04: 7e:2f:e3:71:6f:9a:13:f7:5b:1c:6f:93:a7:5e:72:de:51:36: 03:80:93:d3:46:99:ac:37:e8:9a:ed:ac:5e:76:c3:8c:1d:bd: 6d:1d:37:55:fe:37:3e:d3:84:79:11:71:fb:82:9d:13:64:1c: d8:56:47:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2NjExMTAvBgNVBAUTKDBGOTE0QTFEQzk0RjVCRTQyRTg4M0MyQURENTQzMEJD REY2REYzMzQwHhcNMjYwMzI1MDY0NzQ2WhcNMjYwNDAxMDY0NzQ2WjAYMRYwFAYD VQQDEw02OWMzODUxMi1iOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7lFqFmKMWSzwmAClNURHjPdwM23FNDqqfjOouHczGni3j/P9PGeFDZEbq/H KMRWCyp+uRxA8NBlcwd3lJv0+IccAULVVDP9LF/qFZfwDMzC6NoXNgIgfE/DSXzy 14QbtjmkFPA5LrOszNLEiXfgsaGHchmf3se/K9mjmmC/Og52wFBLfhJHUg1E+hLc /CkMHxv9BHsU0KaarjoWKw1vLEE5rnN//1Q4pfWvJc3wLhhpQuO1l1fCGh6fG8v4 Ldm6SehTyAs0MCTSpDGNDss7RErv11oRkIAWtKWtv5XvLJQkX8tuwBW6jwYr56GU lb3YYvhebPLVMjPSzV0vhe7b2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdyGU/r Ur2oQHfMmv2wpXKD1QzOMB8GA1UdIwQYMBaAFA+RSh3JT1vkLog8Kt1UMLzfbfM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8wRjQzRUMzQzU4 RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFctUXVpRHdxM1ZRd3ZOOXQ4 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTY2MS8wRjQzRUMzQzU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFct UXVpRHdxM1ZRd3ZOOXQ4elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQlPSd7X88xlCx7jh/0NTZjkkVtjWl4wvr/3azaCMtN9212jPFD/Rc2JnAlwU plBMKwZYEmMWdvmQkqplbaJSbAnFsy+lIOCQP8Q27r94OVE0o8eiOuIrVUWPMkKH SxDa3uXJZNHiU8zp1l4AoIOnSQreFKW2Fcbwd99/2Cnr6u5wCxAsqbOwT7sRAbD9 V7wzhU5LEcFGTUCAIXpypPUGkXdsYcM+sFCJ9xO8bvYF0X5Pcgtd3OmxWT7mx98A nwcofrXZzFYEfi/jcW+aE/dbHG+Tp15y3lE2A4CT00aZrDfomu2sXnbDjB29bR03 Vf43PtOEeRFx+4KdE2Qc2FZHnQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:59 2026 by rpki-client