$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json) Hash identifier: fACebaX0TESYKFd+gdIqxPUDcQ3r0bbDH0iTgxlM98Y= Subject key identifier: 23:00:34:41:3C:88:D0:3E:75:5C:69:30:44:8C:2E:C3:3C:E4:A2:52 Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 07:37:38 +0000 Manifest this update: Wed 25 Mar 2026 07:37:38 +0000 Manifest next update: Wed 01 Apr 2026 07:37:38 +0000 Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: jC2lygt0YocLESZNdEWZIj0LxEAvIvO4lRe0esjTgHk=) 2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Validity Not Before: Mar 25 07:37:38 2026 GMT Not After : Apr 1 07:37:38 2026 GMT Subject: CN=69c390c2-f26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:fa:e1:a1:b5:3f:49:89:32:c2:15:8e:6d: b0:8e:f3:47:1c:85:d2:4d:70:f8:96:f3:38:4c:b1: 38:8e:09:72:5f:0c:78:55:06:6f:e2:f9:a5:e8:ac: 3d:33:d9:d8:67:9f:d2:fb:4b:da:c5:84:ba:d9:9a: 74:07:16:e3:b8:28:2b:49:fc:d3:b3:87:78:b7:81: 7b:20:64:f8:f5:22:fb:bd:f3:c5:a6:27:2c:97:bd: 4d:de:61:92:0c:31:6e:e8:f6:11:55:65:e1:06:a0: ce:93:46:9c:0d:9a:f2:18:4e:4c:c6:25:9a:a8:af: b0:84:b1:ce:7f:2c:e8:50:98:9f:33:0b:27:66:57: a3:a6:c3:83:56:dc:b0:5c:19:e6:fe:31:61:26:b2: 97:4b:2a:56:a4:a4:05:6d:1e:32:85:0a:87:b8:0f: 01:49:af:f0:5f:16:e7:c7:5d:b4:45:f2:f1:e3:d3: ad:e2:9a:6d:fe:09:0f:93:46:1f:e1:89:36:96:ec: 6a:46:95:97:ea:aa:94:93:90:79:30:bc:00:88:e1: 0b:1e:6a:8e:48:88:db:f7:a5:40:64:94:a8:82:75: 53:34:b6:a3:28:b1:aa:3d:74:6b:45:f0:6f:b7:a4: df:02:28:1a:3b:88:4c:9f:60:e2:d0:8b:63:da:c4: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:00:34:41:3C:88:D0:3E:75:5C:69:30:44:8C:2E:C3:3C:E4:A2:52 X509v3 Authority Key Identifier: keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:88:29:25:12:14:2b:71:11:2d:a2:ae:4d:c4:56:dc:68:83: dc:29:68:66:ea:c5:d4:41:07:3e:76:80:e8:23:79:e2:a6:56: c1:70:6d:63:6b:ad:f7:d8:48:9f:5d:ab:3f:81:30:6a:08:d8: 30:54:de:86:8e:4e:94:c6:9c:32:55:7f:e1:bc:25:5c:fb:b6: 62:33:dc:89:69:55:27:e7:c5:03:1a:20:1f:47:c2:8c:aa:68: c6:93:e8:b0:2d:4c:5f:05:a3:06:ca:ce:e9:15:3d:36:dd:9b: 41:70:4c:ec:47:ce:66:c2:f5:c2:c2:33:6e:ae:af:79:75:78: 96:2e:e1:54:09:2d:47:e8:6b:1e:b8:db:ae:78:e6:61:21:d3: 4e:87:9a:11:36:5c:ab:49:8f:ba:1e:e7:f0:10:f2:b4:a3:b1: 48:f6:61:13:2b:84:0c:25:3f:3c:f4:b2:fc:17:bf:cf:49:17: 58:7f:0d:9c:5b:9e:f3:99:b1:50:eb:44:81:c1:6c:63:6c:5e: 9c:44:88:4b:e3:47:be:7a:7d:f1:7d:cc:7f:30:d7:27:b6:66: 42:43:e3:e3:f1:fd:e3:9a:5a:45:2f:7d:c4:bc:94:10:3e:b3: 1d:78:b9:dd:5f:bb:e3:cc:54:1f:d2:3c:de:8a:24:02:93:ba: 7d:2e:54:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDJEODExMC8GA1UEBRMoQTJEMEU3REY4OEFCNjlEQjZFMDU5QTMwNjRFNEREQzFF NkZDOUQxOTAeFw0yNjAzMjUwNzM3MzhaFw0yNjA0MDEwNzM3MzhaMBgxFjAUBgNV BAMTDTY5YzM5MGMyLWYyNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxNfrhobU/SYkywhWObbCO80cchdJNcPiW8zhMsTiOCXJfDHhVBm/i+aXorD0z 2dhnn9L7S9rFhLrZmnQHFuO4KCtJ/NOzh3i3gXsgZPj1Ivu988WmJyyXvU3eYZIM MW7o9hFVZeEGoM6TRpwNmvIYTkzGJZqor7CEsc5/LOhQmJ8zCydmV6Omw4NW3LBc Geb+MWEmspdLKlakpAVtHjKFCoe4DwFJr/BfFufHXbRF8vHj063imm3+CQ+TRh/h iTaW7GpGlZfqqpSTkHkwvACI4Qseao5IiNv3pUBklKiCdVM0tqMosao9dGtF8G+3 pN8CKBo7iEyfYOLQi2PaxNJjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIwA0QTyI 0D51XGkwRIwuwzzkolIwHwYDVR0jBBgwFoAUotDn34iradtuBZowZOTdweb8nRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMkQ4Lzk0OTZENzRFQzkx MTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3REbjM0aXJhZHR1Qlpvd1pPVGR3ZWI4blJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0 dUJab3daT1Rkd2ViOG5Say5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIiCklEhQrcREtoq5NxFbcaIPcKWhm6sXUQQc+doDoI3niplbBcG1ja6332Eif Xas/gTBqCNgwVN6Gjk6UxpwyVX/hvCVc+7ZiM9yJaVUn58UDGiAfR8KMqmjGk+iw LUxfBaMGys7pFT023ZtBcEzsR85mwvXCwjNurq95dXiWLuFUCS1H6GseuNuueOZh IdNOh5oRNlyrSY+6HufwEPK0o7FI9mETK4QMJT889LL8F7/PSRdYfw2cW57zmbFQ 60SBwWxjbF6cRIhL40e+en3xfcx/MNcntmZCQ+Pj8f3jmlpFL33EvJQQPrMdeLnd X7vjzFQf0jzeiiQCk7p9LlT+ -----END CERTIFICATE-----Generated at Thu Mar 26 09:55:23 2026 by rpki-client