$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json) Hash identifier: gPBUNb5hzEkCGJoU5/cbHywygGZS//ZAxEkk+u/8EcU= Subject key identifier: EF:98:B1:3E:87:24:C6:4D:E4:B3:E3:F3:22:0C:C9:25:8D:25:26:F1 Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 07:34:20 +0000 Manifest this update: Wed 25 Mar 2026 07:34:20 +0000 Manifest next update: Wed 01 Apr 2026 07:34:20 +0000 Files and hashes: 1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: GfZLBMP+MkF15xR7E6DS20bxHBDWb3gbBz0XzhCGcl0=) 2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Validity Not Before: Mar 25 07:34:20 2026 GMT Not After : Apr 1 07:34:20 2026 GMT Subject: CN=69c38ffc-8a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:f4:64:87:8e:6a:41:84:25:41:45:a3:c7: 0b:81:fa:40:f1:60:18:d1:b3:f1:56:dc:cf:88:bd: f2:08:8f:7a:49:45:21:f1:5e:a4:32:cd:1f:0f:ed: 1f:53:37:da:0d:1e:97:71:27:7b:bf:25:69:dc:23: 37:f7:7b:3a:2e:b1:fa:be:6f:b7:c4:03:c0:e5:ff: f7:3e:44:ca:4d:23:38:61:08:9b:5e:a2:60:9f:dd: f9:f4:33:c5:f4:6a:09:df:9f:f7:97:09:f7:dc:c8: 4a:7a:23:7e:1d:73:ef:91:55:78:20:54:20:ae:1b: 1d:a1:0d:59:0b:a1:a8:4b:5d:22:87:2b:10:aa:2b: e0:cd:21:55:99:e7:cf:74:9e:e1:37:49:31:3f:43: 5d:a1:04:ed:9a:a4:43:fe:63:59:0e:3d:9a:6a:e4: 74:76:09:eb:84:93:5c:09:c6:5e:25:f5:f3:e9:a6: 0e:6f:8e:d1:f3:64:64:5a:0f:83:df:a7:1a:07:3a: 2d:cf:a1:f4:30:00:19:45:43:06:f4:cd:d4:74:4d: 80:fe:8b:9b:45:21:00:30:31:df:43:7b:31:fa:ec: 3a:f1:9c:49:03:56:72:d8:84:4c:c5:af:7b:91:4d: da:59:b9:4b:8d:84:4e:3f:31:cb:f7:69:13:86:01: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:98:B1:3E:87:24:C6:4D:E4:B3:E3:F3:22:0C:C9:25:8D:25:26:F1 X509v3 Authority Key Identifier: keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f9:b8:6f:af:5f:d3:f4:a8:af:2f:1c:11:64:2e:f7:56:ef: 49:47:df:b2:19:94:b4:44:05:94:07:cc:82:9c:40:a2:b8:ac: 0e:c6:c1:e3:f0:33:10:9e:d1:19:90:40:bb:1a:01:da:01:74: ca:ad:5c:3e:ab:45:06:c7:38:bc:cd:b5:09:94:dd:eb:d4:49: e9:3a:15:d0:21:f4:38:15:5f:46:b5:78:07:67:a1:ee:54:48: 36:4b:65:b7:10:8b:23:46:e2:15:9a:8f:eb:f5:f2:8b:15:b5: b0:9c:5e:f6:b2:3e:13:2a:f5:f2:70:97:14:6e:3a:4d:42:fd: 8c:6c:8c:30:33:87:6a:00:ed:fc:ca:7f:ad:9a:b4:10:cf:66: 02:57:05:9f:91:96:c8:c3:c2:fb:2a:07:08:f3:8b:de:be:e8: 4e:5a:53:45:bc:f3:97:7f:90:f8:5a:92:9e:15:92:f1:a5:d2: 56:3e:47:7b:f3:d9:67:e8:01:63:9c:2e:78:6f:6d:78:41:88: 27:46:f9:65:f9:18:ff:82:f2:f8:9a:e9:cb:25:5c:b9:aa:9d: 29:a2:11:4f:3f:8e:ee:64:e1:47:b2:ce:87:f9:b8:2c:27:c8: 91:de:ee:e9:d8:3d:ff:c2:43:a9:01:86:79:8e:c8:19:17:89: 82:42:f6:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzA2RjExMC8GA1UEBRMoMEY1MzIwOTZFN0Y1OERFNDAxRjI2NTA3NkRFRkI1Qzgy RTcxRjNFMjAeFw0yNjAzMjUwNzM0MjBaFw0yNjA0MDEwNzM0MjBaMBgxFjAUBgNV BAMTDTY5YzM4ZmZjLThhNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ6vRkh45qQYQlQUWjxwuB+kDxYBjRs/FW3M+IvfIIj3pJRSHxXqQyzR8P7R9T N9oNHpdxJ3u/JWncIzf3ezousfq+b7fEA8Dl//c+RMpNIzhhCJteomCf3fn0M8X0 agnfn/eXCffcyEp6I34dc++RVXggVCCuGx2hDVkLoahLXSKHKxCqK+DNIVWZ5890 nuE3STE/Q12hBO2apEP+Y1kOPZpq5HR2CeuEk1wJxl4l9fPppg5vjtHzZGRaD4Pf pxoHOi3PofQwABlFQwb0zdR0TYD+i5tFIQAwMd9DezH67DrxnEkDVnLYhEzFr3uR TdpZuUuNhE4/Mcv3aROGAa3RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU75ixPock xk3ks+PzIgzJJY0lJvEwHwYDVR0jBBgwFoAUD1Mgluf1jeQB8mUHbe+1yC5x8+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzYxQzI2OEQ2QzU0 RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVRQjhtVUhiZS0xeUM1eDgt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFNZ2x1ZjFqZVFCOG1VSGJlLTF5QzV4OC1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz MDZGLzYxQzI2OEQ2QzU0RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVR QjhtVUhiZS0xeUM1eDgtSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCV+bhvr1/T9KivLxwRZC73Vu9JR9+yGZS0RAWUB8yCnECiuKwOxsHj8DMQntEZ kEC7GgHaAXTKrVw+q0UGxzi8zbUJlN3r1EnpOhXQIfQ4FV9GtXgHZ6HuVEg2S2W3 EIsjRuIVmo/r9fKLFbWwnF72sj4TKvXycJcUbjpNQv2MbIwwM4dqAO38yn+tmrQQ z2YCVwWfkZbIw8L7KgcI84vevuhOWlNFvPOXf5D4WpKeFZLxpdJWPkd789ln6AFj nC54b214QYgnRvll+Rj/gvL4munLJVy5qp0pohFPP47uZOFHss6H+bgsJ8iR3u7p 2D3/wkOpAYZ5jsgZF4mCQvZp -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:51 2026 by rpki-client