$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: U7JFFrJw0Vf5rJWRG7NXfn9SEVCCgzARVnBqYuPiw10= Subject key identifier: 26:01:9D:CC:2B:C2:C9:83:73:77:93:98:64:D7:BA:1E:68:0C:5F:1C Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 10EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 10D1 Signing time: Tue 24 Mar 2026 17:12:46 +0000 Manifest this update: Tue 24 Mar 2026 17:12:46 +0000 Manifest next update: Tue 31 Mar 2026 17:12:46 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: jtoT2hwmQCgrpkanIVwf/bfMN00nLktKld0X3LV/JPY=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Mar 24 17:12:46 2026 GMT Not After : Mar 31 17:12:46 2026 GMT Subject: CN=69c2c60e-f735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:13:9f:48:65:e7:eb:ef:a9:19:c8:98:02: f5:57:7c:ad:23:b3:f3:6b:08:a8:33:98:85:32:a6: 06:1b:4c:f6:e0:7e:31:0d:65:03:bb:be:6b:09:0f: 3c:33:7f:8e:43:63:41:c6:0d:2c:bf:76:47:e1:56: 85:dd:3d:5a:0e:14:d1:ec:25:d9:88:6e:a7:87:43: 3b:2d:36:f3:69:20:a4:03:05:c9:82:b5:84:7d:10: 1d:cb:4e:2f:9b:08:60:eb:dd:04:61:8f:50:4d:9e: 55:7f:fb:20:97:cd:31:a6:ea:76:d5:51:8d:71:a2: 3e:41:93:76:df:5d:d9:cd:3c:62:3a:0f:de:6f:f4: 5e:3b:21:6f:2f:ec:43:a6:b4:c0:1e:3a:df:ff:c9: 39:8a:4a:b8:40:e8:23:99:89:e9:a0:67:81:9e:33: 33:93:f1:20:28:bf:f9:e1:79:3c:3d:b2:a0:d1:b1: e8:09:6b:24:2b:ab:07:23:a7:e8:d9:f9:08:5c:55: c1:53:d0:d9:36:8e:f3:12:21:06:7a:08:8f:d8:33: bf:f2:24:3d:a7:e6:7e:4f:7f:79:05:33:7a:68:17: 81:f4:bb:33:0b:c9:e8:9b:2f:5b:ef:7a:f0:9c:b9: d5:3d:f6:ae:ba:9e:04:54:6a:dd:6e:e3:75:79:da: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:9D:CC:2B:C2:C9:83:73:77:93:98:64:D7:BA:1E:68:0C:5F:1C X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:aa:27:b9:d2:ab:5b:6a:80:57:43:f1:38:7c:a3:49:e5:0c: 4c:73:b9:6e:4a:49:e3:75:19:c9:b5:5e:ad:24:d2:4b:a8:fa: 83:1f:a1:0a:2c:0d:1c:d7:6b:2a:7f:df:17:0b:f8:29:d5:ea: 0e:37:4c:61:fd:35:30:fe:d8:a2:5f:a4:79:41:ef:8f:3e:e1: 34:2d:5d:88:85:c1:87:9e:dc:36:e5:c4:cf:7c:3b:58:0e:33: 78:ba:91:0c:95:80:bd:66:8d:69:85:b3:50:5e:82:b7:e3:9a: 1c:34:e2:3c:9e:75:33:4c:d4:00:39:76:83:c6:c0:6a:7e:a7: bb:56:bf:84:f6:de:4a:e0:28:0b:84:41:98:95:55:2e:1f:d3: 57:aa:e1:61:79:6a:4a:3a:87:5c:bf:98:60:98:0b:ee:28:b0: 40:83:24:94:f2:92:75:b4:f6:f9:52:eb:d1:f6:5d:e5:a4:51: 91:5a:a5:0d:71:5c:bd:8d:26:01:8b:d4:aa:75:76:b1:18:40: 9d:d6:d0:1f:69:dd:3f:9d:62:6d:f3:d9:f3:ad:9c:d1:f4:c0: c2:0e:69:a7:01:ea:80:57:14:b5:80:57:c2:95:14:54:93:43: 8c:8c:85:ad:ae:4a:67:5e:ae:c7:01:36:2d:bb:9f:da:8b:ca: 0f:84:b4:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjYwMzI0MTcxMjQ2WhcNMjYwMzMxMTcxMjQ2WjAYMRYwFAYD VQQDEw02OWMyYzYwZS1mNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl88Tn0hl5+vvqRnImAL1V3ytI7PzawioM5iFMqYGG0z24H4xDWUDu75rCQ88 M3+OQ2NBxg0sv3ZH4VaF3T1aDhTR7CXZiG6nh0M7LTbzaSCkAwXJgrWEfRAdy04v mwhg690EYY9QTZ5Vf/sgl80xpup21VGNcaI+QZN2313ZzTxiOg/eb/ReOyFvL+xD prTAHjrf/8k5ikq4QOgjmYnpoGeBnjMzk/EgKL/54Xk8PbKg0bHoCWskK6sHI6fo 2fkIXFXBU9DZNo7zEiEGegiP2DO/8iQ9p+Z+T395BTN6aBeB9LszC8nomy9b73rw nLnVPfauup4EVGrdbuN1edogyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYBncwr wsmDc3eTmGTXuh5oDF8cMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm6onudKrW2qAV0PxOHyjSeUMTHO5bkpJ43UZybVerSTSS6j6gx+hCiwNHNdr Kn/fFwv4KdXqDjdMYf01MP7Yol+keUHvjz7hNC1diIXBh57cNuXEz3w7WA4zeLqR DJWAvWaNaYWzUF6Ct+OaHDTiPJ51M0zUADl2g8bAan6nu1a/hPbeSuAoC4RBmJVV Lh/TV6rhYXlqSjqHXL+YYJgL7iiwQIMklPKSdbT2+VLr0fZd5aRRkVqlDXFcvY0m AYvUqnV2sRhAndbQH2ndP51ibfPZ862c0fTAwg5ppwHqgFcUtYBXwpUUVJNDjIyF ra5KZ16uxwE2Lbuf2ovKD4S0JQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:42:09 2026 by rpki-client