$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: kjsocdKuKz523QYeWd8505ZlOo6CbLbD4zavj/B8CyY= Subject key identifier: 57:28:26:E1:5C:2A:AE:AA:B5:4F:36:5F:DD:E9:C2:53:AB:E0:E7:A5 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 0397 Signing time: Wed 25 Mar 2026 00:25:20 +0000 Manifest this update: Wed 25 Mar 2026 00:25:19 +0000 Manifest next update: Wed 01 Apr 2026 00:25:19 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: mUEe8VrlahIRTsRvPPC/wTPwZTwarZZ0aTHA6dt4m4w=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: DNHpbbH0OLt61W1/5I9yLZt1WIT0NpFfbOWathJ7PW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Mar 25 00:25:19 2026 GMT Not After : Apr 1 00:25:19 2026 GMT Subject: CN=69c32b70-1ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:07:c1:a6:a5:50:33:2a:93:9d:52:cd:ef: 78:e5:fc:5a:66:7f:e1:20:8c:bd:41:31:a3:9b:3f: cc:94:06:7a:86:b6:df:03:92:6f:30:e8:59:74:cf: 02:a9:86:17:36:c1:1f:9f:fc:cd:af:1d:58:56:86: ca:f2:89:3e:d8:a8:58:bd:75:06:78:3e:02:01:e3: a0:8d:c1:81:bb:e0:6a:d0:8d:da:0d:bb:24:75:ae: 9d:c4:10:f9:fb:3e:4a:d0:f2:6f:3b:05:03:fb:74: 0d:d0:55:85:66:7c:d3:65:ac:f6:02:b2:13:d4:bb: 4e:5b:e2:34:a5:0e:ee:16:56:3c:97:b2:cc:79:52: 63:d1:c6:45:8d:90:13:52:32:f1:50:1d:70:18:62: bc:fc:75:75:73:0a:35:51:27:c3:bf:95:d7:88:31: 68:e1:91:82:79:af:46:2e:1e:42:96:89:23:37:0b: 79:f4:38:29:48:48:9e:40:84:c1:92:1a:99:8e:be: 16:12:ba:2b:fd:64:17:46:07:3d:20:74:32:10:14: 14:4c:b8:72:de:3c:a5:f2:7c:a3:2c:be:1f:e0:4d: 10:44:14:16:05:31:95:22:5b:b3:e3:83:e7:84:b2: 7b:78:3a:43:6d:34:9a:f8:ea:d1:92:8f:b5:7d:46: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:26:E1:5C:2A:AE:AA:B5:4F:36:5F:DD:E9:C2:53:AB:E0:E7:A5 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:64:82:81:66:47:de:ad:44:14:f3:a5:44:e0:70:0c:e5:80: a0:5d:0e:18:1f:16:92:b5:c9:9b:99:28:30:85:52:e0:77:0a: 62:55:8a:0a:8a:40:95:11:e0:de:31:a4:88:ca:1f:68:80:d1: 13:f9:f2:a7:2a:29:92:ff:4d:16:cd:ed:d2:62:16:ba:f0:ed: f6:fc:2e:95:a8:7e:2b:f1:8c:c2:48:c8:4a:29:06:f8:cd:6e: dd:02:c5:65:cc:09:bd:59:bf:38:3f:81:f6:92:55:01:bd:d7: 71:e0:76:93:d1:77:2b:66:4c:f8:30:04:db:ae:5a:35:10:5c: 93:cf:90:d7:a5:06:53:ce:91:9f:8d:39:ef:5a:1c:72:2a:e3: 49:7a:f8:77:63:1f:cc:2c:9c:57:d4:4f:40:28:68:3d:23:c5: 4d:0f:de:d0:03:5d:da:5f:98:66:e4:9e:02:dd:21:a6:09:96: d7:f2:a2:19:6d:0c:5d:1c:9c:e0:df:8c:b8:2c:9e:50:4a:9b: c6:9d:5c:38:c9:23:44:23:78:25:1b:08:36:cc:1c:85:8d:59: 75:47:d6:5e:99:52:48:6d:b3:4b:45:bf:27:2c:d9:d0:92:58: e2:5e:1d:6d:4d:8d:0a:ab:88:b2:f9:9f:3c:cf:f8:03:c6:f0: ee:ff:1f:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjYwMzI1MDAyNTE5WhcNMjYwNDAxMDAyNTE5WjAYMRYwFAYD VQQDEw02OWMzMmI3MC0xZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OgHwaalUDMqk51Sze945fxaZn/hIIy9QTGjmz/MlAZ6hrbfA5JvMOhZdM8C qYYXNsEfn/zNrx1YVobK8ok+2KhYvXUGeD4CAeOgjcGBu+Bq0I3aDbskda6dxBD5 +z5K0PJvOwUD+3QN0FWFZnzTZaz2ArIT1LtOW+I0pQ7uFlY8l7LMeVJj0cZFjZAT UjLxUB1wGGK8/HV1cwo1USfDv5XXiDFo4ZGCea9GLh5ClokjNwt59DgpSEieQITB khqZjr4WEror/WQXRgc9IHQyEBQUTLhy3jyl8nyjLL4f4E0QRBQWBTGVIluz44Pn hLJ7eDpDbTSa+OrRko+1fUZmBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcoJuFc Kq6qtU82X93pwlOr4OelMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJGSCgWZH3q1EFPOlROBwDOWAoF0OGB8WkrXJm5koMIVS4HcKYlWKCopAlRHg 3jGkiMofaIDRE/nypyopkv9NFs3t0mIWuvDt9vwulah+K/GMwkjISikG+M1u3QLF ZcwJvVm/OD+B9pJVAb3XceB2k9F3K2ZM+DAE265aNRBck8+Q16UGU86Rn40571oc cirjSXr4d2MfzCycV9RPQChoPSPFTQ/e0ANd2l+YZuSeAt0hpgmW1/KiGW0MXRyc 4N+MuCyeUEqbxp1cOMkjRCN4JRsINswchY1ZdUfWXplSSG2zS0W/JyzZ0JJY4l4d bU2NCquIsvmfPM/4A8bw7v8fZw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:35 2026 by rpki-client