$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: QdCVZzIcU2RCo4CnxZNkku2j2CUNr2aJroeFrHkB2nY= Subject key identifier: 1C:C4:D5:01:F9:8F:49:C7:D0:D7:A7:8A:D0:3B:06:49:31:FA:A7:37 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0CE7 Signing time: Tue 24 Mar 2026 18:04:34 +0000 Manifest this update: Tue 24 Mar 2026 18:04:34 +0000 Manifest next update: Tue 31 Mar 2026 18:04:34 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: nOcfpDXsURdWJqdMqj8a8FaBOoJS0u6PmCfXbne74oQ=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2fSA/Xuks+HjnmqBwbLjNPpAQRgRqBJVlHexUjGLyjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Mar 24 18:04:34 2026 GMT Not After : Mar 31 18:04:34 2026 GMT Subject: CN=69c2d232-8e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:aa:db:7b:45:30:d5:fd:1e:60:20:58:83:72: 18:dc:95:3f:30:d5:93:1f:32:ff:35:85:db:4a:78: 62:8b:9b:64:a3:69:af:00:0e:a6:05:94:e4:c6:8d: c1:9b:e2:5c:20:91:58:ee:81:ef:3f:62:69:95:cc: a3:89:18:d4:06:64:a7:e7:64:35:04:4b:ac:56:21: de:45:86:f3:f5:93:8d:33:83:1a:7f:d7:41:26:1a: 23:b8:ce:58:b3:56:37:3a:e5:6a:8e:83:eb:2d:64: 96:87:1f:da:eb:6f:eb:9e:a8:10:0e:bb:1a:f7:e0: 5e:c3:7e:bf:e5:43:dd:78:0b:4b:bd:1b:92:d1:cc: eb:b0:ae:21:5b:5f:e1:c9:8f:cc:de:d5:0e:4f:4e: ab:1a:8c:79:52:2e:bc:da:36:29:f8:08:fe:0b:83: 9b:c1:47:3d:8a:5e:d4:24:1e:25:0f:b7:f6:d2:dd: f0:c1:d3:87:7d:6f:06:b6:b6:cb:3e:22:a4:13:0d: 0c:3c:c9:e2:3f:d1:46:60:94:fd:be:fa:6e:35:50: 2c:4f:17:64:6c:44:06:44:98:36:b1:5b:97:2b:65: 72:ff:bc:2c:11:58:18:98:70:ee:53:21:1c:18:7e: 7f:20:32:f0:1a:54:d2:99:45:3d:47:3e:25:3d:bd: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C4:D5:01:F9:8F:49:C7:D0:D7:A7:8A:D0:3B:06:49:31:FA:A7:37 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:eb:be:1e:d1:03:2e:a7:ac:fb:96:fb:5b:34:12:6a:ee:db: 8d:96:ae:7b:84:bf:06:05:e0:23:6b:50:ae:73:fb:b1:20:28: ed:e1:16:f2:3c:e6:d3:27:7a:c7:5f:f5:f6:bb:c5:a2:0b:d4: 38:9d:54:58:f5:1f:b8:2d:7f:7f:f0:3f:d7:85:fe:5f:88:61: cb:d1:e7:94:d7:bc:44:d6:e6:6c:66:7c:03:8b:ec:eb:c5:b7: 50:47:81:d0:02:10:c1:27:51:69:1c:0f:11:71:f8:13:f9:66: 5b:f5:e6:a4:0e:2d:7a:89:51:33:ab:97:69:09:36:35:35:9e: a7:5f:ef:50:b3:5d:5f:d6:ac:60:c9:e1:0b:47:97:ba:e9:8a: e1:48:7b:37:8a:bb:69:9a:20:5f:47:ed:c0:42:89:ad:fc:e5: 97:15:44:b9:b7:f8:db:e8:fa:16:a0:f4:51:8b:b4:d2:a5:77: 44:48:b4:66:4c:bf:e8:9e:4b:25:61:9f:56:88:52:89:9d:e8: 75:fa:40:74:6f:11:ba:50:49:7b:dd:7f:c7:9a:68:51:22:7b: a1:cd:4d:f8:f7:66:ac:79:40:43:83:68:68:fe:7b:df:12:b0: 56:93:9a:ff:30:67:14:90:df:e1:55:32:cf:cb:a2:55:24:0e: a7:42:85:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjYwMzI0MTgwNDM0WhcNMjYwMzMxMTgwNDM0WjAYMRYwFAYD VQQDEw02OWMyZDIzMi04ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9arbe0Uw1f0eYCBYg3IY3JU/MNWTHzL/NYXbSnhii5tko2mvAA6mBZTkxo3B m+JcIJFY7oHvP2JplcyjiRjUBmSn52Q1BEusViHeRYbz9ZONM4Maf9dBJhojuM5Y s1Y3OuVqjoPrLWSWhx/a62/rnqgQDrsa9+Bew36/5UPdeAtLvRuS0czrsK4hW1/h yY/M3tUOT06rGox5Ui682jYp+Aj+C4ObwUc9il7UJB4lD7f20t3wwdOHfW8GtrbL PiKkEw0MPMniP9FGYJT9vvpuNVAsTxdkbEQGRJg2sVuXK2Vy/7wsEVgYmHDuUyEc GH5/IDLwGlTSmUU9Rz4lPb1PMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzE1QH5 j0nH0NenitA7Bkkx+qc3MB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbeu+HtEDLqes+5b7WzQSau7bjZaue4S/BgXgI2tQrnP7sSAo7eEW8jzm0yd6 x1/19rvFogvUOJ1UWPUfuC1/f/A/14X+X4hhy9HnlNe8RNbmbGZ8A4vs68W3UEeB 0AIQwSdRaRwPEXH4E/lmW/XmpA4teolRM6uXaQk2NTWep1/vULNdX9asYMnhC0eX uumK4Uh7N4q7aZogX0ftwEKJrfzllxVEubf42+j6FqD0UYu00qV3REi0Zky/6J5L JWGfVohSiZ3odfpAdG8RulBJe91/x5poUSJ7oc1N+PdmrHlAQ4NoaP573xKwVpOa /zBnFJDf4VUyz8uiVSQOp0KFtg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:50 2026 by rpki-client