$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: qnHiS7/+ddpNuMJ9Mmu0Y2U40fY4bywPrP5R6z70Pl8= Subject key identifier: 8A:45:25:45:54:F1:00:2F:5E:A7:26:46:D6:36:FB:67:23:C9:80:51 Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 36 Signing time: Wed 25 Mar 2026 07:50:22 +0000 Manifest this update: Wed 25 Mar 2026 07:50:21 +0000 Manifest next update: Wed 01 Apr 2026 07:50:21 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: dBX9gWsjrnw358FIJsjPs0XkK3RHT86oOhPFUrR3XV0=) 2: 8056379A118511F1AFA21CD3333D8C67.roa (hash: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=) 3: E611D250118111F1BD19AAF2323D8C67.roa (hash: ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=) 4: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Mar 25 07:50:21 2026 GMT Not After : Apr 1 07:50:21 2026 GMT Subject: CN=69c393be-0db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:5b:a2:fa:1e:34:d1:de:2c:04:4f:d5:81: 61:47:02:9d:04:5a:a8:c2:0e:1e:7c:70:42:4d:9c: d0:da:ee:e3:7e:f0:be:1d:b2:00:2e:28:e8:c9:e7: b2:dd:bf:b8:51:09:00:d3:b7:4a:1d:73:4c:42:c9: e8:a0:6b:1f:ab:23:b6:96:46:20:0c:67:66:b2:6d: c9:88:0e:d3:04:89:5e:b6:22:2e:8d:95:29:3a:31: 47:9c:fa:08:df:44:f4:59:2d:33:41:bd:1f:b9:52: ef:ca:b6:8e:96:2d:30:66:df:44:93:6d:e0:71:54: 47:a9:f1:82:93:6d:b4:fb:c6:3b:28:63:ca:94:34: 92:1f:3f:82:fb:96:8c:93:b2:8c:c8:66:d2:94:d8: c4:cf:b5:d6:b5:47:b4:fd:09:9b:d1:de:53:a0:a4: 0e:0c:9e:b5:7f:24:b2:96:a8:57:a6:ad:ce:aa:67: 0b:8b:49:d9:64:79:f2:39:e4:56:71:11:15:f7:ef: 0f:5e:12:cf:11:e2:19:63:e2:7a:a4:8a:d3:bb:3f: 13:8c:12:fa:57:83:05:2d:7a:63:1e:2f:50:0e:cf: 6d:1b:7e:94:06:f4:51:cf:ef:48:8d:c8:a1:35:bd: be:df:67:f9:4d:7c:f3:d0:44:91:b9:38:9c:83:6e: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:45:25:45:54:F1:00:2F:5E:A7:26:46:D6:36:FB:67:23:C9:80:51 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bd:83:1c:e8:2c:ae:c6:51:b0:cc:ce:a0:c6:c8:ca:a8:2d: 5b:fe:fd:ea:ba:10:df:c2:97:7b:68:df:0e:c3:ba:4f:59:bc: 72:b1:71:d6:74:fe:d5:9f:b2:16:36:77:cf:4e:fb:31:08:f9: ef:4d:f0:24:63:90:3f:17:d6:8e:e0:a3:1a:b9:8e:46:90:4b: bb:76:6e:33:d0:3b:a2:72:83:fe:11:a0:61:4a:60:8a:14:b2: de:d3:c9:4a:a6:b2:a1:48:71:63:a1:df:27:97:39:3b:e1:51: a1:08:4f:c8:f5:8a:67:0a:b1:00:10:5c:8f:9c:7c:c8:5d:78: 07:75:b0:48:d9:9a:b9:89:11:84:e6:74:2d:3f:a5:05:71:8b: b9:cd:7f:b8:1a:c3:e0:05:5f:c1:a7:e0:83:74:b0:33:9a:1e: b7:2f:03:6a:7e:68:9e:11:0e:f5:8a:b6:dc:bb:80:1d:b3:99: 27:09:cf:fd:c9:03:80:cd:eb:dc:79:8d:06:67:d3:31:7e:fe: 6b:3e:41:8b:f4:0d:4b:72:df:7a:38:80:32:1f:46:3d:69:87: 70:94:53:cc:eb:a0:90:59:58:99:e3:05:fc:88:e5:e7:52:50: f3:17:b7:8f:4c:df:d2:13:70:9b:9b:03:87:7a:7d:b2:17:6d: 20:c4:c1:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx NEMzRUJDOTAeFw0yNjAzMjUwNzUwMjFaFw0yNjA0MDEwNzUwMjFaMBgxFjAUBgNV BAMTDTY5YzM5M2JlLTBkYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Dlui+h400d4sBE/VgWFHAp0EWqjCDh58cEJNnNDa7uN+8L4dsgAuKOjJ57Ld v7hRCQDTt0odc0xCyeigax+rI7aWRiAMZ2aybcmIDtMEiV62Ii6NlSk6MUec+gjf RPRZLTNBvR+5Uu/Kto6WLTBm30STbeBxVEep8YKTbbT7xjsoY8qUNJIfP4L7loyT sozIZtKU2MTPtda1R7T9CZvR3lOgpA4MnrV/JLKWqFemrc6qZwuLSdlkefI55FZx ERX37w9eEs8R4hlj4nqkitO7PxOMEvpXgwUtemMeL1AOz20bfpQG9FHP70iNyKE1 vb7fZ/lNfPPQRJG5OJyDbiP5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUikUlRVTx AC9epyZG1jb7ZyPJgFEwHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0IxNzFEQjUwRTFBQTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4 TTYxd3N1UnMwMnhURDY4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMvYMc6CyuxlGwzM6gxsjKqC1b/v3quhDfwpd7aN8Ow7pPWbxysXHWdP7Vn7IW NnfPTvsxCPnvTfAkY5A/F9aO4KMauY5GkEu7dm4z0DuicoP+EaBhSmCKFLLe08lK prKhSHFjod8nlzk74VGhCE/I9YpnCrEAEFyPnHzIXXgHdbBI2Zq5iRGE5nQtP6UF cYu5zX+4GsPgBV/Bp+CDdLAzmh63LwNqfmieEQ71irbcu4Ads5knCc/9yQOAzevc eY0GZ9Mxfv5rPkGL9A1Lct96OIAyH0Y9aYdwlFPM66CQWViZ4wX8iOXnUlDzF7eP TN/SE3CbmwOHen2yF20gxME6 -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:49 2026 by rpki-client