$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: MrGydL4LUvNLrfcSEnDYnhCMGDbhV2HkrMfFbF46Jno= Subject key identifier: CE:FE:58:08:92:B4:0B:A9:3E:90:72:46:5A:A2:ED:40:70:34:8C:E6 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: CE Signing time: Wed 25 Mar 2026 06:00:03 +0000 Manifest this update: Wed 25 Mar 2026 06:00:02 +0000 Manifest next update: Wed 01 Apr 2026 06:00:02 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: vQ++uQPnoZWNaOFRgW8c6BRhMrNUBwWYYx0ChRTYw/0=) 2: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: zH79Pg4ZQIEeTl4Pd39EmE15gNeuVouP/IuZpHLtxZU=) 3: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: q11CNL+t4x5Vwq5rP/tYmXtfqpTGYiz7uq25DLAZUOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Mar 25 06:00:02 2026 GMT Not After : Apr 1 06:00:02 2026 GMT Subject: CN=69c379e2-9997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:7f:db:e7:c4:b1:14:4b:1c:b3:14:ab:62: 6d:a6:e1:84:e6:e5:9a:9d:a8:27:15:0a:19:1a:63: 85:6b:82:a9:1c:00:0c:59:7e:19:74:18:1d:e7:54: 59:a8:bc:a4:ff:66:22:0a:81:5b:f2:04:e5:a6:13: 19:f0:32:f8:d2:0b:08:db:48:cb:de:93:00:ba:7f: ea:24:09:f2:43:48:13:7c:90:f8:c8:20:ab:8e:62: 87:62:70:91:ed:80:63:9f:30:c9:f0:ea:de:91:af: 4b:2e:b2:db:3b:d7:ea:2b:47:c2:77:52:ae:bb:cc: 48:1e:d2:69:61:da:14:39:66:32:57:d5:bf:0e:08: cf:15:4d:19:cb:b0:fe:c7:ce:44:8b:ad:2d:75:b5: c4:65:e9:51:5f:5b:99:f2:41:78:c5:f9:76:d1:16: ec:67:aa:cd:88:d4:f1:30:ba:f5:27:46:58:d5:f9: b7:dc:fa:47:dd:ad:b3:17:31:82:90:fb:69:7b:42: 0a:71:25:79:4d:68:5a:5d:3d:44:f4:3c:d3:61:aa: ea:c3:3b:2b:fc:fd:6d:e8:4b:fb:7f:26:ba:34:de: 36:f4:40:13:67:88:0b:2e:bc:2c:0c:09:1f:c2:53: 71:78:52:38:02:09:d6:52:9b:a7:72:d9:29:42:6b: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:58:08:92:B4:0B:A9:3E:90:72:46:5A:A2:ED:40:70:34:8C:E6 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:07:aa:ac:e8:52:13:8f:77:24:b4:82:57:bd:fd:f9:c2:63: 7d:2a:51:2b:83:31:e2:22:ab:68:6a:7f:af:3d:20:11:03:4a: 93:65:99:93:07:f5:c9:3e:2e:d3:a5:d5:9c:24:5c:1f:f4:ca: a9:0e:9b:49:8b:07:da:ed:0a:71:63:d9:65:d0:fa:54:98:bd: 20:3f:db:c3:e8:5b:57:48:18:ea:1e:ea:c2:3b:3c:54:ee:4a: 31:2d:e2:e6:39:80:d4:53:fc:1d:1f:27:a3:55:c4:ed:64:05: d9:e7:a5:60:66:d0:10:ca:43:d9:cf:c7:29:45:af:4e:b8:9f: 11:18:be:5c:03:9d:f7:54:cd:27:eb:4a:33:d3:57:5e:65:00: a4:81:5c:3d:65:07:49:38:4e:11:86:32:cd:64:c2:8b:d0:80: b8:63:7b:a0:3b:77:a0:e3:16:b0:e2:5d:d9:d7:42:a6:fb:a5: ae:39:4d:e0:b4:77:43:eb:9e:3e:3e:91:30:05:42:b5:97:11: 54:f5:e0:64:cd:33:cf:dd:b7:e0:0c:02:e3:1f:48:a5:1a:b7: 9e:d0:d4:75:46:51:71:a0:d0:db:e6:8e:39:ce:ea:a3:f5:79: 29:02:94:0c:40:3f:d1:f7:a2:ff:d6:64:fa:2f:65:34:20:99: ec:7d:0b:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjYwMzI1MDYwMDAyWhcNMjYwNDAxMDYwMDAyWjAYMRYwFAYD VQQDEw02OWMzNzllMi05OTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh/9/2+fEsRRLHLMUq2JtpuGE5uWanagnFQoZGmOFa4KpHAAMWX4ZdBgd51RZ qLyk/2YiCoFb8gTlphMZ8DL40gsI20jL3pMAun/qJAnyQ0gTfJD4yCCrjmKHYnCR 7YBjnzDJ8Oreka9LLrLbO9fqK0fCd1Kuu8xIHtJpYdoUOWYyV9W/DgjPFU0Zy7D+ x85Ei60tdbXEZelRX1uZ8kF4xfl20RbsZ6rNiNTxMLr1J0ZY1fm33PpH3a2zFzGC kPtpe0IKcSV5TWhaXT1E9DzTYarqwzsr/P1t6Ev7fya6NN429EATZ4gLLrwsDAkf wlNxeFI4AgnWUpunctkpQmvbjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7+WAiS tAupPpByRlqi7UBwNIzmMB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQeqrOhSE493JLSCV739+cJjfSpRK4Mx4iKraGp/rz0gEQNKk2WZkwf1yT4u 06XVnCRcH/TKqQ6bSYsH2u0KcWPZZdD6VJi9ID/bw+hbV0gY6h7qwjs8VO5KMS3i 5jmA1FP8HR8no1XE7WQF2eelYGbQEMpD2c/HKUWvTrifERi+XAOd91TNJ+tKM9NX XmUApIFcPWUHSThOEYYyzWTCi9CAuGN7oDt3oOMWsOJd2ddCpvulrjlN4LR3Q+ue Pj6RMAVCtZcRVPXgZM0zz9234AwC4x9IpRq3ntDUdUZRcaDQ2+aOOc7qo/V5KQKU DEA/0fei/9Zk+i9lNCCZ7H0Low== -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:10 2026 by rpki-client