$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft File: dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json) Hash identifier: v1IPCCGlMW1SHaaxzrZYuumUs5t3aPt2qLsyNd8czss= Subject key identifier: 35:F2:DC:44:44:C1:E9:60:5F:1C:FE:E2:5E:6F:E2:8A:D0:43:E9:C5 Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft Manifest number: 02EB Signing time: Wed 25 Mar 2026 01:06:51 +0000 Manifest this update: Wed 25 Mar 2026 01:06:50 +0000 Manifest next update: Wed 01 Apr 2026 01:06:50 +0000 Files and hashes: 1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: ATaEHPLT5bIupEYQTdYFgi49dOwoPI6k0hhaDYqVHNc=) 2: 40FAF0C8090A11F191B4F9FF353D8C67.roa (hash: tSEq0mWoGPibwDQ4pSkCNY7zhK1jNgm3b9+3eCbUq8Y=) 3: 1AC505BE090B11F1A5787D1E363D8C67.roa (hash: 6dvfhysIbcVTCkyj0ZkmbXr/UmJBK+KvtS/v29xveLo=) 4: 912370B6D9EE11F0944D00527AD3641D.roa (hash: 5pFojy8NGtNG0ljxoxG1BE0VoZH5eOFMgSsGp6wv8ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C Validity Not Before: Mar 25 01:06:50 2026 GMT Not After : Apr 1 01:06:50 2026 GMT Subject: CN=69c3352b-f2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:8a:9a:67:76:b4:df:c5:63:67:5b:dd:82: df:9b:2e:db:5d:14:99:30:e2:78:2d:12:2e:80:2c: 2b:73:dc:87:36:9e:6f:61:a2:0f:c3:81:e2:70:cb: 65:73:cf:d5:35:85:8a:a6:40:b2:f9:54:02:64:93: 14:d2:cc:4c:44:3c:d5:e9:4b:0e:18:7e:07:8a:0f: 5c:02:f9:ed:b8:84:74:86:54:37:50:03:58:6a:1a: 02:4e:9f:e7:32:9e:8f:07:84:e6:f9:03:25:83:07: fa:04:18:5a:05:34:d7:21:c6:70:99:a0:51:ce:2b: 88:d3:cb:be:3c:06:40:05:69:3a:e3:92:d9:2e:dc: f8:af:42:83:db:6d:cd:0d:f4:81:f3:ca:61:95:45: 8e:2a:a9:26:3f:fd:3a:42:8f:37:17:d9:cb:88:49: f4:f5:dc:3d:b4:11:af:02:f2:2c:e8:f2:dc:b5:c1: 65:a4:96:c2:b2:6d:86:71:98:47:28:91:a1:95:0e: b9:4f:9a:20:bf:0b:92:85:23:85:48:cc:79:8a:90: 72:ab:16:b1:e7:94:3e:4a:1b:ad:e8:b5:74:19:c0: 69:64:cd:d3:15:dc:e6:f4:09:12:11:de:16:4f:79: 35:33:a5:0b:4c:77:e9:58:10:b2:d6:3a:02:c3:c6: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F2:DC:44:44:C1:E9:60:5F:1C:FE:E2:5E:6F:E2:8A:D0:43:E9:C5 X509v3 Authority Key Identifier: keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a0:f7:48:19:9e:9c:35:d4:15:e6:65:a5:0d:0d:8b:f5:5a: 52:ee:7c:c1:94:95:bd:e2:67:04:8d:ed:41:86:4e:a7:ad:43: 14:a2:dd:c7:d3:69:47:69:85:48:90:a7:7d:07:b0:86:e4:f7: 72:b9:08:31:ce:f2:7f:9a:84:6b:6d:59:b5:0e:f3:0a:fd:77: eb:6c:7a:d5:ae:f5:16:e7:b3:e1:ca:37:bb:1c:f7:7e:40:c7: 31:53:e9:7c:2c:07:92:27:7d:da:7b:cf:f2:c3:b9:28:aa:db: f4:02:46:52:de:45:11:bf:39:9f:59:8f:2a:f8:23:76:a7:3a: 2b:2e:5f:15:ad:c6:65:9e:8b:7e:ef:5e:92:9d:dd:ce:20:ab: 4d:76:66:2a:79:dc:a0:11:db:1b:0f:9b:2e:df:0c:15:07:8e: e0:23:b7:78:7e:32:02:75:77:3e:4f:f1:25:3c:a9:7c:58:96: 4b:d6:c6:26:bc:27:78:bc:70:c7:b2:fe:a2:da:00:29:3b:3d: 8c:33:8b:83:07:d9:35:0b:10:81:cc:0b:4a:58:a6:7d:47:87: 92:b9:33:80:ce:08:f0:51:a4:18:b6:8d:02:dc:45:3d:08:82: dc:3f:95:98:f6:b0:b9:47:ae:27:09:1f:0b:e4:68:21:82:22: 3c:4a:46:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2MUMxMTAvBgNVBAUTKDc0QUVCNjNGMkYxREE5NTdENjU4MjA5NjRGRjc5REYw RjU5MzgwMEMwHhcNMjYwMzI1MDEwNjUwWhcNMjYwNDAxMDEwNjUwWjAYMRYwFAYD VQQDEw02OWMzMzUyYi1mMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstSKmmd2tN/FY2db3YLfmy7bXRSZMOJ4LRIugCwrc9yHNp5vYaIPw4HicMtl c8/VNYWKpkCy+VQCZJMU0sxMRDzV6UsOGH4Hig9cAvntuIR0hlQ3UANYahoCTp/n Mp6PB4Tm+QMlgwf6BBhaBTTXIcZwmaBRziuI08u+PAZABWk645LZLtz4r0KD223N DfSB88phlUWOKqkmP/06Qo83F9nLiEn09dw9tBGvAvIs6PLctcFlpJbCsm2GcZhH KJGhlQ65T5ogvwuShSOFSMx5ipByqxax55Q+Shut6LV0GcBpZM3TFdzm9AkSEd4W T3k1M6ULTHfpWBCy1joCw8bVQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXy3ERE welgXxz+4l5v4orQQ+nFMB8GA1UdIwQYMBaAFHSutj8vHalX1lgglk/3nfD1k4AM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjYxQy83NzBDQkUyNDM2 QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFWZldXQ0NXVF9lZDhQV1Rn QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLNjJQeThkcVZmV1dDQ1dUX2VkOFBXVGdBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjYxQy83NzBDQkUyNDM2QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFW ZldXQ0NXVF9lZDhQV1RnQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE6D3SBmenDXUFeZlpQ0Ni/VaUu58wZSVveJnBI3tQYZOp61DFKLdx9NpR2mF SJCnfQewhuT3crkIMc7yf5qEa21ZtQ7zCv1362x61a71Fuez4co3uxz3fkDHMVPp fCwHkid92nvP8sO5KKrb9AJGUt5FEb85n1mPKvgjdqc6Ky5fFa3GZZ6Lfu9ekp3d ziCrTXZmKnncoBHbGw+bLt8MFQeO4CO3eH4yAnV3Pk/xJTypfFiWS9bGJrwneLxw x7L+otoAKTs9jDOLgwfZNQsQgcwLSlimfUeHkrkzgM4I8FGkGLaNAtxFPQiC3D+V mPawuUeuJwkfC+RoIYIiPEpGSg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:52:59 2026 by rpki-client