$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: RN3MiMAYWvR9SjhrTyJC+b+c+5P1zYiby3knAQxSC3I= Subject key identifier: 9D:0E:5B:C9:18:74:B7:F0:7D:63:9A:7A:30:6E:11:35:3E:92:1E:88 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1801 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 17DA Signing time: Tue 24 Mar 2026 16:27:47 +0000 Manifest this update: Tue 24 Mar 2026 16:27:47 +0000 Manifest next update: Tue 31 Mar 2026 16:27:47 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: hyNvnuwPsPaEopOpBXKatbHbYe0a2Gb5jOXaA6FJDbw=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: G1K2oOJN8JSdZJH7sAiV+vdZ3tm2/QChp9HUt6nzUkw=) 3: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 6SGIVV8UzkYI8imkUH9CHf8Pfdrw5iBU8LEsd0w7wTY=) 4: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: eNCAWuAh5KW5qBuvE5k2vNN9F1eCn7J5iVfhenudu/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6145 (0x1801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Mar 24 16:27:47 2026 GMT Not After : Mar 31 16:27:47 2026 GMT Subject: CN=69c2bb83-107e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:59:56:1e:24:70:c4:bc:71:ca:77:38:f4: f6:ab:31:49:24:af:bd:66:8e:c3:dd:07:aa:db:69: de:6f:89:a6:9b:ab:5e:33:a5:ce:af:d3:f7:a8:d4: a5:c1:1b:43:dc:0e:1f:b7:00:15:b7:49:76:e9:bd: 1c:85:77:aa:f8:ac:f3:9b:79:6c:52:14:b7:97:c1: c9:1f:55:73:1b:32:d1:a2:98:86:9a:6e:84:c5:31: 42:36:32:78:f2:42:84:fc:00:bd:d3:3c:e0:d1:73: 82:58:ab:31:ef:59:69:05:ad:2e:d5:94:d4:aa:ab: 2c:cd:07:8a:c1:79:a9:2a:aa:d6:96:ed:12:64:74: 29:06:e1:b5:05:c7:e0:e7:85:4f:9f:77:eb:d3:d6: 46:0e:29:a1:21:0c:4c:f2:bf:7d:b8:58:e7:de:62: 98:ef:e2:de:06:3f:fe:52:c3:b9:ae:3d:e7:f1:00: c1:68:0b:e7:94:d4:02:0e:6b:a5:f1:f0:c4:f3:07: f9:2a:6e:5d:2f:37:d1:10:34:03:36:d2:4c:7f:95: 5c:28:52:b3:85:f1:ea:fa:c0:ff:ce:be:08:8b:f9: a6:ff:a3:0b:fe:12:18:49:d4:18:37:7c:eb:17:f0: 72:53:52:e9:73:d7:9a:d0:de:96:cc:dc:04:7f:9a: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0E:5B:C9:18:74:B7:F0:7D:63:9A:7A:30:6E:11:35:3E:92:1E:88 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d4:1f:10:eb:aa:c4:a4:92:03:50:c8:51:72:60:92:fb:71: 11:97:75:d4:b3:8f:76:3f:5d:55:c5:bc:7a:66:f3:4c:d5:ea: 5c:71:67:14:66:b7:24:4e:61:3f:25:b3:46:9d:1b:3f:39:91: a9:23:29:ed:e4:a2:fe:ad:7f:59:17:fd:94:97:77:bd:ed:76: ad:bb:43:dc:af:10:5f:97:ea:80:97:e6:7e:96:fc:6a:1a:a1: 27:a6:24:dc:e0:84:5b:cd:ae:59:eb:81:fa:cc:35:67:c3:26: 86:61:4e:d0:9d:ca:14:62:3b:90:61:99:7e:7b:67:20:db:fb: b9:47:ea:c6:5c:b0:db:d1:aa:c3:9f:14:01:2e:7b:30:a7:1e: 45:38:f8:51:ee:db:3b:f3:6e:1f:27:52:2a:2d:8d:8e:7b:27: 57:4b:e1:75:4d:31:24:b1:4b:2f:79:ef:f3:c4:df:e4:f4:ed: d5:d3:08:cd:4f:e2:3c:eb:ad:15:9c:84:3b:dc:c0:c4:7c:91: a9:16:aa:4e:4b:97:0b:f0:7f:0c:d3:60:15:7a:5e:84:21:d1: f4:b7:2d:b4:5e:7b:d9:4b:fb:ed:4e:fe:85:be:3c:71:b7:04: 80:1c:bc:3a:44:9e:e9:5b:64:13:02:43:a8:d4:5a:0c:b1:79: d6:c3:c1:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjYwMzI0MTYyNzQ3WhcNMjYwMzMxMTYyNzQ3WjAYMRYwFAYD VQQDEw02OWMyYmI4My0xMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31JZVh4kcMS8ccp3OPT2qzFJJK+9Zo7D3Qeq22neb4mmm6teM6XOr9P3qNSl wRtD3A4ftwAVt0l26b0chXeq+Kzzm3lsUhS3l8HJH1VzGzLRopiGmm6ExTFCNjJ4 8kKE/AC90zzg0XOCWKsx71lpBa0u1ZTUqqsszQeKwXmpKqrWlu0SZHQpBuG1Bcfg 54VPn3fr09ZGDimhIQxM8r99uFjn3mKY7+LeBj/+UsO5rj3n8QDBaAvnlNQCDmul 8fDE8wf5Km5dLzfREDQDNtJMf5VcKFKzhfHq+sD/zr4Ii/mm/6ML/hIYSdQYN3zr F/ByU1Lpc9ea0N6WzNwEf5r/OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0OW8kY dLfwfWOaejBuETU+kh6IMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdQfEOuqxKSSA1DIUXJgkvtxEZd11LOPdj9dVcW8embzTNXqXHFnFGa3JE5h PyWzRp0bPzmRqSMp7eSi/q1/WRf9lJd3ve12rbtD3K8QX5fqgJfmfpb8ahqhJ6Yk 3OCEW82uWeuB+sw1Z8MmhmFO0J3KFGI7kGGZfntnINv7uUfqxlyw29Gqw58UAS57 MKceRTj4Ue7bO/NuHydSKi2NjnsnV0vhdU0xJLFLL3nv88Tf5PTt1dMIzU/iPOut FZyEO9zAxHyRqRaqTkuXC/B/DNNgFXpehCHR9LcttF572Uv77U7+hb48cbcEgBy8 OkSe6VtkEwJDqNRaDLF51sPB8w== -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:41 2026 by rpki-client