$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json) Hash identifier: UUu+ZcB3sZjwtmJ72mRWCDIIutazmnMXnfgVQgYPht4= Subject key identifier: AC:14:BB:82:42:92:6F:8C:E8:69:C3:A1:AC:17:AB:20:41:B3:DD:56 Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 07:39:17 +0000 Manifest this update: Wed 25 Mar 2026 07:39:17 +0000 Manifest next update: Wed 01 Apr 2026 07:39:17 +0000 Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: QRjl5iCWFS+pw0USIPMRjJdDmDCqvMi+E3YxbNlpmGk=) 2: CE34BEF810A111F195BE013C393D8C67.roa (hash: rDiCsLkX8LztFPRKhHu/8w/OO3VhnMwZmTtx/fy38wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Validity Not Before: Mar 25 07:39:17 2026 GMT Not After : Apr 1 07:39:17 2026 GMT Subject: CN=69c39125-b665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cf:a5:38:81:0f:06:b1:29:94:56:7e:7e:c9: 2c:52:f6:b9:de:a2:aa:07:9c:fb:af:73:37:50:cb: 5d:9f:b6:dd:fa:32:82:7e:d6:43:c9:70:3e:28:f7: 19:e2:51:c6:35:f7:03:70:35:b9:cf:59:52:a2:2a: 0b:d7:6d:ec:64:5e:c2:5e:1b:bd:ca:c8:77:ef:14: f0:42:ff:46:4e:fa:87:44:fb:01:3d:a2:ee:26:47: ec:92:ce:91:a5:d5:99:4b:6b:10:d2:d6:2c:ff:35: 68:ea:11:66:6d:58:16:09:01:c5:14:a0:4a:90:fa: a6:a9:41:bd:ee:03:81:90:fd:4a:3f:a1:47:b3:1d: a6:31:fe:e3:0f:b3:16:46:a8:e8:66:e6:5b:f9:f5: 32:93:56:0b:ec:da:10:65:80:dc:c9:03:d2:e5:26: 40:ee:bc:4d:f5:c7:e3:02:f8:67:e0:d7:a2:26:55: 45:81:a6:f3:5b:d3:aa:bd:e6:39:33:ab:84:b5:32: c4:3d:e4:03:61:50:bf:68:eb:84:8c:3d:5d:1a:5e: 9d:ad:6e:1b:f8:29:ea:2d:38:74:52:c9:ed:87:23: 1f:f0:55:07:01:9a:f9:e9:7e:b6:87:a5:c6:20:7a: 80:ab:4a:31:ec:74:9d:8c:96:07:53:4b:77:5b:6d: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:BB:82:42:92:6F:8C:E8:69:C3:A1:AC:17:AB:20:41:B3:DD:56 X509v3 Authority Key Identifier: keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:43:3f:17:f1:fc:42:ab:9b:7e:cc:80:bc:86:ae:bb:f2:5d: 83:e6:ca:3c:b3:30:7c:ba:fd:dc:0f:05:fb:9e:e2:b3:af:1e: de:4a:34:54:53:05:42:f8:01:1c:73:8a:f0:3c:73:af:22:e0: 92:23:a7:e5:e7:06:00:3a:d2:fb:99:d5:6b:30:b2:d9:2d:b8: 6f:53:8d:10:50:fe:a0:95:da:d9:61:c4:f7:cf:90:53:c5:30: 44:8e:bc:51:40:6c:73:33:b1:a4:77:af:58:df:13:dd:5b:95: d9:19:56:32:ab:4d:de:1c:20:50:21:64:d5:33:e0:af:75:c8: 6f:b0:d9:e4:8c:07:78:96:8c:5c:5b:02:81:67:0e:58:45:9a: 59:95:9a:d9:86:0d:93:e6:3c:12:14:54:30:63:c8:34:a4:53: 08:7e:d3:29:15:0d:ac:25:3a:b0:b1:47:ed:7b:dd:13:c1:ed: e8:25:38:57:8c:6e:8b:34:a8:11:32:8f:1c:7e:ab:a6:e6:68: 12:01:48:37:c8:55:64:b8:87:33:c6:4b:53:c1:76:3a:74:53: 0c:bc:97:48:59:bd:f6:9f:89:12:c1:88:35:2f:6d:53:14:82: b5:91:1d:8a:4c:d1:c0:83:98:95:56:c1:3b:7c:e1:1c:74:dd: f2:6b:07:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdFRDExMC8GA1UEBRMoRDVEMEQ4RTFGMDNENTEwMDg4OUY0MTgwQTY1RjU1MEEw RDU4MEI4NTAeFw0yNjAzMjUwNzM5MTdaFw0yNjA0MDEwNzM5MTdaMBgxFjAUBgNV BAMTDTY5YzM5MTI1LWI2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOz6U4gQ8GsSmUVn5+ySxS9rneoqoHnPuvczdQy12ftt36MoJ+1kPJcD4o9xni UcY19wNwNbnPWVKiKgvXbexkXsJeG73KyHfvFPBC/0ZO+odE+wE9ou4mR+ySzpGl 1ZlLaxDS1iz/NWjqEWZtWBYJAcUUoEqQ+qapQb3uA4GQ/Uo/oUezHaYx/uMPsxZG qOhm5lv59TKTVgvs2hBlgNzJA9LlJkDuvE31x+MC+Gfg16ImVUWBpvNb06q95jkz q4S1MsQ95ANhUL9o64SMPV0aXp2tbhv4KeotOHRSye2HIx/wVQcBmvnpfraHpcYg eoCrSjHsdJ2MlgdTS3dbbYA3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrBS7gkKS b4zoacOhrBerIEGz3VYwHwYDVR0jBBgwFoAU1dDY4fA9UQCIn0GApl9VCg1YC4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0M5QzYyREE0Q0I4 MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWREWTRmQTlVUUNJbjBHQXBsOVZDZzFZQzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 N0VEL0M5QzYyREE0Q0I4MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFD SW4wR0FwbDlWQ2cxWUM0VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9Qz8X8fxCq5t+zIC8hq678l2D5so8szB8uv3cDwX7nuKzrx7eSjRUUwVC+AEc c4rwPHOvIuCSI6fl5wYAOtL7mdVrMLLZLbhvU40QUP6gldrZYcT3z5BTxTBEjrxR QGxzM7Gkd69Y3xPdW5XZGVYyq03eHCBQIWTVM+CvdchvsNnkjAd4loxcWwKBZw5Y RZpZlZrZhg2T5jwSFFQwY8g0pFMIftMpFQ2sJTqwsUfte90Twe3oJThXjG6LNKgR Mo8cfqum5mgSAUg3yFVkuIczxktTwXY6dFMMvJdIWb32n4kSwYg1L21TFIK1kR2K TNHAg5iVVsE7fOEcdN3yawen -----END CERTIFICATE-----Generated at Thu Mar 26 14:07:21 2026 by rpki-client