$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: 3OPa+r+UgLHHJLiJBXbl0qf0FFRg1Fx3dAA/emywZtQ= Subject key identifier: D6:50:06:E4:38:22:5C:F9:8C:9B:53:CA:51:74:3F:57:13:69:4B:14 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 1220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 1217 Signing time: Tue 24 Mar 2026 17:01:53 +0000 Manifest this update: Tue 24 Mar 2026 17:01:53 +0000 Manifest next update: Tue 31 Mar 2026 17:01:53 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: EJlO0AT4SnHsb+yjxmKxCi+SAYlLqKoa7Qmx5+ET2yc=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: VX0mY2WD7ZljHbXizsuob/HBTfQ0LiFuSS4MaL/xmKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Mar 24 17:01:53 2026 GMT Not After : Mar 31 17:01:53 2026 GMT Subject: CN=69c2c381-4756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:61:f4:05:fb:c4:ab:c7:e1:06:96:81:8a: c1:81:24:04:c3:a1:eb:99:9f:1b:4a:b5:77:30:ce: 69:d1:0a:98:7d:86:4e:b3:bf:fc:6b:37:de:d5:11: fe:90:fa:f3:cd:dc:2a:fd:7e:e8:f6:c7:49:99:61: 04:a7:97:06:ec:22:75:a6:85:dd:82:85:22:e2:60: 4f:8f:b5:c2:82:af:c8:cb:cd:52:a4:f0:22:ee:70: 69:9e:3b:1a:72:10:c7:7b:5c:4f:ac:32:2c:0e:ca: 41:c0:89:1a:13:58:64:b3:9b:c1:08:96:c6:ee:30: f1:0a:5a:6c:e6:de:ca:5d:97:53:59:7c:cd:b5:a0: ad:30:78:6c:ff:0f:49:8c:cf:be:45:d6:84:d2:a5: 50:73:2e:d1:fc:e0:86:67:79:8d:0d:13:59:07:28: d6:b0:be:67:a2:bc:ec:89:3d:44:08:02:09:7b:e2: f2:60:85:49:eb:63:1f:f8:e4:4b:dc:a1:0f:9c:8a: 75:c9:6c:4a:1a:26:e2:c4:b8:c0:6a:1d:82:a2:71: eb:a4:dd:32:76:a2:7f:e5:fd:b3:ca:cf:bb:fe:38: ba:0d:11:92:d5:99:d2:92:2f:c7:e6:c4:cb:44:aa: c7:e5:96:02:e0:1e:2d:7a:cf:a0:82:49:61:1d:0c: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:06:E4:38:22:5C:F9:8C:9B:53:CA:51:74:3F:57:13:69:4B:14 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:4d:99:29:54:da:b3:01:3b:6b:78:1f:49:42:26:5f:2e:58: e3:9c:75:bc:25:e1:18:c3:fd:ab:14:79:7b:40:84:d8:94:c7: 04:c5:63:c5:a4:58:2c:72:54:a8:e8:43:1a:56:46:b4:f2:bc: 4a:13:85:eb:76:df:9d:10:d9:07:71:6e:1e:9b:09:54:60:1f: 2b:a1:fc:27:81:ae:5a:ac:88:b4:6d:65:74:21:4f:82:f7:ba: 7d:31:21:10:ab:56:fa:2d:15:94:72:0c:55:b6:f4:f1:8c:30: bf:12:1e:c3:af:17:0b:e1:7c:48:c6:d7:ec:e8:2e:f0:53:39: 6b:ff:bd:25:8e:a7:b0:38:36:b6:50:3c:c9:1d:61:8f:37:c2: 60:51:6b:68:cb:a6:3a:a0:d6:bd:97:6a:74:f7:d4:a1:32:f7: 71:7d:e8:9d:d6:54:18:01:3b:04:47:b2:df:d9:e2:74:0e:97: 82:34:4b:62:71:fc:17:b2:24:0d:57:8d:ae:90:02:2b:ab:c2: 54:a5:65:9d:a7:54:7d:c2:94:5a:a9:2b:78:e9:84:cc:c5:0a: 50:af:2b:1c:5a:bf:4f:c7:a7:30:15:59:36:d6:0b:81:3d:16: 0d:6f:6f:89:00:b8:f4:a1:1e:49:9d:f4:af:5b:ba:92:22:bd: 53:a5:d7:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjYwMzI0MTcwMTUzWhcNMjYwMzMxMTcwMTUzWjAYMRYwFAYD VQQDEw02OWMyYzM4MS00NzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCdh9AX7xKvH4QaWgYrBgSQEw6HrmZ8bSrV3MM5p0QqYfYZOs7/8azfe1RH+ kPrzzdwq/X7o9sdJmWEEp5cG7CJ1poXdgoUi4mBPj7XCgq/Iy81SpPAi7nBpnjsa chDHe1xPrDIsDspBwIkaE1hks5vBCJbG7jDxClps5t7KXZdTWXzNtaCtMHhs/w9J jM++RdaE0qVQcy7R/OCGZ3mNDRNZByjWsL5norzsiT1ECAIJe+LyYIVJ62Mf+ORL 3KEPnIp1yWxKGibixLjAah2ConHrpN0ydqJ/5f2zys+7/ji6DRGS1ZnSki/H5sTL RKrH5ZYC4B4tes+ggklhHQxXMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZQBuQ4 Ilz5jJtTylF0P1cTaUsUMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvE2ZKVTaswE7a3gfSUImXy5Y45x1vCXhGMP9qxR5e0CE2JTHBMVjxaRYLHJU qOhDGlZGtPK8ShOF63bfnRDZB3FuHpsJVGAfK6H8J4GuWqyItG1ldCFPgve6fTEh EKtW+i0VlHIMVbb08YwwvxIew68XC+F8SMbX7Ogu8FM5a/+9JY6nsDg2tlA8yR1h jzfCYFFraMumOqDWvZdqdPfUoTL3cX3ondZUGAE7BEey39nidA6XgjRLYnH8F7Ik DVeNrpACK6vCVKVlnadUfcKUWqkreOmEzMUKUK8rHFq/T8enMBVZNtYLgT0WDW9v iQC49KEeSZ30r1u6kiK9U6XXIg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:03 2026 by rpki-client