$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: 0Ho17pUfzwQoHWv5H9d8ZocG8vq+srp2eve+mecEaBo= Subject key identifier: 79:5C:66:74:28:35:F9:FD:80:63:47:26:33:0E:AF:84:86:92:4E:9B Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 038A Signing time: Wed 25 Mar 2026 01:50:06 +0000 Manifest this update: Wed 25 Mar 2026 01:50:06 +0000 Manifest next update: Wed 01 Apr 2026 01:50:06 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: uetcsRZnvcq/v5Kdx2ERDOxWDmlq2r7BIT+8X3pfuVM=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: sQtbzr9sjoTxhodc3OLVckeC77AlxSzlNGMJTJ2p2QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Mar 25 01:50:06 2026 GMT Not After : Apr 1 01:50:06 2026 GMT Subject: CN=69c33f4e-14f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:f1:31:c5:b1:aa:d3:fc:b6:b5:5d:6c:77: 02:c9:92:df:27:c6:f6:a0:7c:ca:ef:6b:65:75:09: 1b:a9:fc:0c:3e:44:b6:d2:8c:40:94:b5:47:73:d2: dd:98:e6:70:8c:cb:1e:11:65:0a:4e:06:5f:12:bd: ed:a7:f7:f3:27:e9:46:ce:42:85:aa:cc:98:84:75: c6:2b:6b:8c:86:99:25:f3:61:b4:db:6f:29:3a:19: c7:0f:15:86:9e:9f:a4:2c:51:f8:20:c4:cb:e9:22: d6:76:c9:88:95:c5:42:c9:b2:d0:d5:b7:ac:4c:72: 4e:44:cf:db:38:56:ce:20:51:6f:71:9e:40:fb:e9: 76:12:2e:e9:9f:8e:8c:ef:10:f9:39:7e:7c:7a:65: f3:b2:b7:f9:6b:ea:e7:ba:42:f9:54:0d:a2:25:90: 48:94:76:af:53:b8:49:48:60:d9:bd:fc:29:df:9c: ab:5c:82:69:61:1c:8b:d9:ce:bc:b8:d5:24:5f:3e: 29:1e:56:89:d8:95:e5:b0:82:65:e9:48:9a:25:d7: 30:5d:a6:31:1c:bf:43:ca:5e:2e:d6:4e:bb:be:ac: a1:81:a3:9a:b4:58:83:1c:ae:62:78:02:ed:f7:ad: 8d:e4:dd:60:75:e2:d0:74:cb:e3:bd:2b:b8:55:c1: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5C:66:74:28:35:F9:FD:80:63:47:26:33:0E:AF:84:86:92:4E:9B X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6d:cb:d1:c1:bb:13:fc:46:63:ed:fb:65:68:90:b6:15:71: 10:83:89:77:4d:1e:2b:07:a3:df:67:25:0c:f3:0d:0d:92:58: 17:fb:34:91:1b:28:e9:c2:4a:64:e0:5b:20:be:fe:0e:7e:d7: f4:89:98:b4:35:2e:d6:ad:ea:08:5e:fc:3c:8e:6e:98:21:0f: 99:5d:7a:a0:0e:18:37:4a:73:99:20:83:7d:24:3e:cf:b9:de: 33:6a:58:4d:30:86:51:55:68:a6:72:d7:6e:60:39:bc:23:fb: 46:3c:e0:e6:41:fb:73:ce:20:c4:2c:6f:ce:e9:17:0a:cd:02: 06:9a:f9:bc:61:20:cb:6e:55:b9:9d:66:72:0d:50:63:45:46: e3:d3:20:97:f5:ec:c8:dd:65:16:e6:8b:4e:00:8f:23:26:79: 82:c8:73:40:71:d5:38:04:5f:46:fe:1c:a7:a8:e6:d9:f2:b4: 97:bd:38:5d:a7:fc:97:03:2e:cd:80:41:7e:81:37:5e:4b:a4: 69:bd:dc:25:3f:86:2f:2e:3b:17:7c:b1:33:b7:15:99:bc:95: 7c:c3:a0:47:52:14:85:61:16:0d:58:d5:ed:f2:88:19:18:ff: ef:d3:8c:6f:e5:3d:bb:2f:cf:07:fb:92:f0:9a:ce:c1:66:39: c5:fb:67:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjYwMzI1MDE1MDA2WhcNMjYwNDAxMDE1MDA2WjAYMRYwFAYD VQQDEw02OWMzM2Y0ZS0xNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyDxMcWxqtP8trVdbHcCyZLfJ8b2oHzK72tldQkbqfwMPkS20oxAlLVHc9Ld mOZwjMseEWUKTgZfEr3tp/fzJ+lGzkKFqsyYhHXGK2uMhpkl82G0228pOhnHDxWG np+kLFH4IMTL6SLWdsmIlcVCybLQ1besTHJORM/bOFbOIFFvcZ5A++l2Ei7pn46M 7xD5OX58emXzsrf5a+rnukL5VA2iJZBIlHavU7hJSGDZvfwp35yrXIJpYRyL2c68 uNUkXz4pHlaJ2JXlsIJl6UiaJdcwXaYxHL9Dyl4u1k67vqyhgaOatFiDHK5ieALt 962N5N1gdeLQdMvjvSu4VcFq1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlcZnQo Nfn9gGNHJjMOr4SGkk6bMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASm3L0cG7E/xGY+37ZWiQthVxEIOJd00eKwej32clDPMNDZJYF/s0kRso6cJK ZOBbIL7+Dn7X9ImYtDUu1q3qCF78PI5umCEPmV16oA4YN0pzmSCDfSQ+z7neM2pY TTCGUVVopnLXbmA5vCP7Rjzg5kH7c84gxCxvzukXCs0CBpr5vGEgy25VuZ1mcg1Q Y0VG49Mgl/XsyN1lFuaLTgCPIyZ5gshzQHHVOARfRv4cp6jm2fK0l704Xaf8lwMu zYBBfoE3Xkukab3cJT+GLy47F3yxM7cVmbyVfMOgR1IUhWEWDVjV7fKIGRj/79OM b+U9uy/PB/uS8JrOwWY5xftnQw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:12 2026 by rpki-client