$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: bi2KC/icrznbSZqQtR7L+eVZz0wAVBE5pqSOuZS7l4k= Subject key identifier: E9:79:77:10:67:B5:CD:1A:81:7A:30:51:EA:46:6F:73:29:25:1C:08 Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 02C4 Signing time: Wed 25 Mar 2026 01:03:15 +0000 Manifest this update: Wed 25 Mar 2026 01:03:14 +0000 Manifest next update: Wed 01 Apr 2026 01:03:14 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: K3UFphqueR1dFyf1fmlOFEt+wCswenOYgmA75yijyjk=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: YXWFFFPBzpkV2m2yoFC2Tf/XolI9oJsfQCRArQVbJbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Mar 25 01:03:14 2026 GMT Not After : Apr 1 01:03:14 2026 GMT Subject: CN=69c33453-7df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:48:74:58:22:ed:a6:7f:b0:26:f5:95:a0: 47:96:1e:9f:54:62:ad:83:02:17:d0:eb:1d:ae:00: 3a:3a:63:1a:60:b1:f7:57:f1:0a:4a:16:90:c4:f2: 94:f4:08:da:be:23:f9:bd:10:e9:c7:95:09:4c:73: 15:1f:a8:82:30:ad:0f:36:8a:f1:66:7f:fe:36:32: 47:ac:8f:d2:f1:44:28:13:78:76:e0:af:57:9c:ed: 50:10:cf:fb:1f:de:13:0f:0a:4b:17:14:74:a9:a4: 73:8f:11:57:cd:73:b9:cd:77:a7:5a:e7:54:2e:cf: 41:5d:29:93:b3:7e:bc:1e:a2:d1:91:cf:3e:54:50: ff:8d:82:a6:b3:9e:e6:ad:ac:33:51:7e:a6:9d:c7: 19:7f:00:a9:ab:04:62:62:44:a5:dc:35:78:9f:09: c1:c5:15:d8:4a:82:f2:e0:3b:2c:5b:59:32:30:b6: 2c:1f:57:52:d2:bb:7d:4b:6f:bc:a3:25:59:a6:0e: 64:7d:c6:e4:a4:10:84:fd:07:72:f4:bd:60:ef:80: 1d:17:d1:1c:20:c5:48:8a:6e:84:08:ff:27:cb:56: 6a:47:4c:9f:4c:ed:5c:c5:ba:87:02:12:39:d6:f3: ea:25:7e:38:df:6b:18:4a:cb:3a:89:6f:fa:f1:c7: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:79:77:10:67:B5:CD:1A:81:7A:30:51:EA:46:6F:73:29:25:1C:08 X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:62:87:bf:4c:08:49:97:17:27:e5:56:6d:f0:77:93:f7:de: 83:14:92:f0:d3:3a:6a:e4:5d:58:48:53:d0:15:33:8d:2a:5c: 29:68:e2:a4:cf:59:e5:4f:4b:78:33:6b:38:f3:fa:25:1b:3f: 1f:ba:9e:e8:56:a5:b0:ac:33:e6:7f:62:d6:55:15:17:54:f9: 6e:16:5f:8b:dc:30:ce:a7:b7:3f:3a:96:f0:cb:d9:95:1c:54: 69:e5:a8:f8:91:a9:b4:bc:67:e8:f5:77:0c:66:73:d3:6a:52: 90:a4:4a:37:1e:28:ec:c0:30:02:57:90:9e:5c:dc:d7:71:0b: 85:cd:87:81:88:fd:0f:83:82:57:bf:2a:30:06:10:bf:79:22: 20:ab:ba:48:ee:05:39:e4:96:53:6a:9f:75:1f:8c:af:f6:13: 9e:e3:ca:89:73:0f:bf:92:ff:a7:ae:9c:2d:6c:ba:c7:0e:41: 35:d1:d4:60:32:09:51:7e:64:20:80:ac:51:4c:ce:90:19:94: 5a:32:1f:6f:91:5b:5d:77:55:7c:8f:98:f0:e3:0d:c8:8e:4d: f8:4a:ae:9d:71:c0:54:a9:ec:68:e9:4c:6b:eb:1f:63:1a:5d: 63:5e:aa:bc:a6:42:7e:b4:2c:9f:2b:9c:c2:a2:5d:99:38:a7: b1:9e:59:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjYwMzI1MDEwMzE0WhcNMjYwNDAxMDEwMzE0WjAYMRYwFAYD VQQDEw02OWMzMzQ1My03ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOFIdFgi7aZ/sCb1laBHlh6fVGKtgwIX0OsdrgA6OmMaYLH3V/EKShaQxPKU 9AjaviP5vRDpx5UJTHMVH6iCMK0PNorxZn/+NjJHrI/S8UQoE3h24K9XnO1QEM/7 H94TDwpLFxR0qaRzjxFXzXO5zXenWudULs9BXSmTs368HqLRkc8+VFD/jYKms57m rawzUX6mnccZfwCpqwRiYkSl3DV4nwnBxRXYSoLy4DssW1kyMLYsH1dS0rt9S2+8 oyVZpg5kfcbkpBCE/Qdy9L1g74AdF9EcIMVIim6ECP8ny1ZqR0yfTO1cxbqHAhI5 1vPqJX4432sYSss6iW/68ccfOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOl5dxBn tc0agXowUepGb3MpJRwIMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQWKHv0wISZcXJ+VWbfB3k/fegxSS8NM6auRdWEhT0BUzjSpcKWjipM9Z5U9L eDNrOPP6JRs/H7qe6FalsKwz5n9i1lUVF1T5bhZfi9wwzqe3PzqW8MvZlRxUaeWo +JGptLxn6PV3DGZz02pSkKRKNx4o7MAwAleQnlzc13ELhc2HgYj9D4OCV78qMAYQ v3kiIKu6SO4FOeSWU2qfdR+Mr/YTnuPKiXMPv5L/p66cLWy6xw5BNdHUYDIJUX5k IICsUUzOkBmUWjIfb5FbXXdVfI+Y8OMNyI5N+EqunXHAVKnsaOlMa+sfYxpdY16q vKZCfrQsnyucwqJdmTinsZ5ZPw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:14 2026 by rpki-client