$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: /FGgt6rR894RXXkG8sBKRAZPYCz3YQrtpvqibwy3WDc= Subject key identifier: 45:14:19:C6:19:36:B9:C2:7C:46:1E:14:59:28:18:35:45:D7:3D:3D Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 0258 Signing time: Wed 25 Mar 2026 01:38:37 +0000 Manifest this update: Wed 25 Mar 2026 01:38:37 +0000 Manifest next update: Wed 01 Apr 2026 01:38:37 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: ixapywZ4anji88ii0o2PxjdyxiUAESk/qbrkbSyOp1Y=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: TNBEB8bv/VEmVVea2OmlN0ueyYUZVCLkiz8lmx3cgdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Mar 25 01:38:37 2026 GMT Not After : Apr 1 01:38:37 2026 GMT Subject: CN=69c33c9d-d82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:5a:76:05:b0:33:4b:40:08:ea:81:5a:6c: 8e:ce:fe:de:d5:6b:3b:9f:ad:af:e8:33:33:cf:39: f2:6a:d4:fd:2c:d7:00:aa:43:ff:51:a9:a7:f9:c2: 4d:cf:7d:de:c9:0c:24:1d:94:31:62:d5:52:4c:62: c9:1b:aa:34:c3:b2:6d:ea:0d:e0:7d:d2:55:a0:58: 01:a0:af:3f:4f:e0:02:a8:28:47:a5:83:58:e0:03: 8a:bf:a6:cf:8a:07:b9:85:63:ea:17:c0:b9:0d:98: 44:16:3d:65:cc:82:11:78:4e:bd:6d:72:75:cd:be: 0b:df:85:a7:e3:7b:3f:a1:66:d0:94:dd:82:51:1b: be:3b:b4:cd:d9:46:b0:7b:7e:a6:c2:68:e4:bd:8f: 15:22:2a:a6:da:ea:a3:64:5d:54:07:78:d9:93:e0: cd:d7:b8:62:fb:56:ef:50:76:5a:72:ea:f3:93:83: 64:ae:b2:0f:6b:b4:eb:24:a1:b6:e8:0d:91:2c:52: 92:2f:da:00:bc:ec:c8:6f:b0:d1:db:1b:1f:9d:73: 1e:05:a9:ee:ce:fb:b2:86:57:df:9b:c9:51:99:d3: 9f:70:cc:c4:e4:37:80:76:c7:94:49:fb:22:3c:5a: f8:f6:20:41:b7:59:70:ed:41:4e:44:36:85:16:83: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:14:19:C6:19:36:B9:C2:7C:46:1E:14:59:28:18:35:45:D7:3D:3D X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:26:67:a0:ad:f5:ff:f2:75:1a:2b:59:16:d6:48:83:91: f3:c3:e2:04:d1:1a:3e:8d:1a:ed:ad:08:96:5f:7e:ef:53:d2: d6:bc:50:43:a7:4c:25:33:d6:40:01:cd:03:84:a5:3e:8c:89: 9d:f4:72:bc:a3:73:6c:8b:5b:e2:c8:86:7f:39:ee:5e:26:03: 79:99:fa:80:38:69:9c:41:ed:87:c1:5a:92:da:e0:89:d8:a7: 99:b2:6e:13:a3:97:66:6f:27:e3:71:9a:86:c5:33:a9:09:d1: f4:7c:81:d1:77:e8:7b:38:13:54:5e:53:8c:11:68:db:f8:bb: d1:03:8a:1a:de:ee:bf:ea:d3:56:5c:fc:72:12:76:53:6c:b5: ba:3e:ad:e7:23:2a:32:77:1f:27:40:35:00:ce:5b:0b:a1:ef: 31:c8:2f:91:0c:f5:c8:e5:c0:ff:87:da:ec:a5:e8:ac:c5:22: 17:b1:aa:ba:74:21:8a:f6:a5:7a:88:6b:c0:ab:52:a7:5a:39: 18:9d:02:9d:09:a8:3f:f3:de:14:95:9c:06:42:95:23:62:be: f7:e9:6f:95:ea:21:d3:16:b2:29:8f:c3:7b:0a:67:9f:4d:5a: 01:b8:5c:9b:70:89:94:6b:cc:97:ba:5d:0e:74:9b:42:98:d3: 97:2d:e8:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjYwMzI1MDEzODM3WhcNMjYwNDAxMDEzODM3WjAYMRYwFAYD VQQDEw02OWMzM2M5ZC1kODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDNadgWwM0tACOqBWmyOzv7e1Ws7n62v6DMzzznyatT9LNcAqkP/Uamn+cJN z33eyQwkHZQxYtVSTGLJG6o0w7Jt6g3gfdJVoFgBoK8/T+ACqChHpYNY4AOKv6bP ige5hWPqF8C5DZhEFj1lzIIReE69bXJ1zb4L34Wn43s/oWbQlN2CURu+O7TN2Uaw e36mwmjkvY8VIiqm2uqjZF1UB3jZk+DN17hi+1bvUHZacurzk4NkrrIPa7TrJKG2 6A2RLFKSL9oAvOzIb7DR2xsfnXMeBanuzvuyhlffm8lRmdOfcMzE5DeAdseUSfsi PFr49iBBt1lw7UFORDaFFoMt/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUUGcYZ NrnCfEYeFFkoGDVF1z09MB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZH8mZ6Ct9f/ydRorWRbWSIOR88PiBNEaPo0a7a0Ill9+71PS1rxQQ6dMJTPW QAHNA4SlPoyJnfRyvKNzbItb4siGfznuXiYDeZn6gDhpnEHth8FaktrgidinmbJu E6OXZm8n43GahsUzqQnR9HyB0XfoezgTVF5TjBFo2/i70QOKGt7uv+rTVlz8chJ2 U2y1uj6t5yMqMncfJ0A1AM5bC6HvMcgvkQz1yOXA/4fa7KXorMUiF7GqunQhival eohrwKtSp1o5GJ0CnQmoP/PeFJWcBkKVI2K+9+lvleoh0xayKY/Dewpnn01aAbhc m3CJlGvMl7pdDnSbQpjTly3oPA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:08 2026 by rpki-client