$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: X4xxGUHxete8HeSJbCrDd7msbb8s8QaQahB7hfnFra0= Subject key identifier: 56:5D:61:02:26:03:C4:A2:49:B3:D6:E3:9B:58:02:3B:35:A7:9C:0D Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 5E Signing time: Wed 25 Mar 2026 07:16:12 +0000 Manifest this update: Wed 25 Mar 2026 07:16:11 +0000 Manifest next update: Wed 01 Apr 2026 07:16:11 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: 56L/479EKs/yYzPKn/fFmETTqZoftej4DBUNtyBf4SM=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Mar 25 07:16:11 2026 GMT Not After : Apr 1 07:16:11 2026 GMT Subject: CN=69c38bbc-37e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:90:6e:59:63:38:5d:ee:a0:a0:43:e6:26: 6c:3a:9c:0e:5d:7c:d9:5e:2e:9b:90:57:26:21:61: 71:d5:df:59:9f:a0:e6:eb:ac:90:c3:b6:a7:3b:47: ab:a5:78:5c:b5:c7:a9:45:09:1b:05:4e:39:e6:35: 51:ef:18:5f:8a:d4:9d:58:04:6d:9f:8c:1a:9d:ca: d9:4a:7f:bb:5e:c7:55:5c:79:b0:3e:36:3e:5d:21: 93:2a:f8:9d:57:57:ec:96:16:eb:75:7e:c9:d3:11: 0d:84:53:d8:57:a5:3f:44:1c:5b:cd:e4:81:b1:bb: 0d:7e:71:27:61:c9:bb:7f:cc:dc:d6:c0:1f:a9:b2: ec:b0:ad:6f:7a:54:7f:70:52:46:36:19:f3:bf:54: f1:c0:4b:3f:cf:45:f0:6b:03:4f:3e:73:1f:2b:a7: ae:5d:46:c2:1d:f9:af:57:be:d8:b4:81:8b:24:b9: ff:43:ec:34:6a:71:29:0d:80:42:ba:7b:8b:db:9e: 46:29:a0:c4:9a:87:2f:c9:8a:c5:89:bc:23:6a:7c: d9:7c:86:77:ca:eb:ae:87:ad:92:a6:ca:da:71:08: 0b:f9:1e:e2:17:77:32:13:6f:9a:2d:c4:80:99:6e: db:e4:59:f2:34:30:e9:3d:5f:49:70:5a:ea:79:6d: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5D:61:02:26:03:C4:A2:49:B3:D6:E3:9B:58:02:3B:35:A7:9C:0D X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e3:05:bb:42:6a:d4:5b:b2:3a:b8:f1:58:de:95:77:5d:c6: de:c3:ac:e1:b3:7e:c3:9e:c6:ff:d3:25:31:de:ea:3a:4c:71: 4a:a4:7c:bc:b8:3c:9f:52:d9:85:4e:c7:46:59:76:90:bc:b7: cd:e8:2f:e1:e4:f6:6e:5c:95:07:af:10:3d:43:6a:8d:83:b8: a3:8d:69:ee:69:c6:21:d5:d5:42:8c:c7:f2:37:78:e5:9b:fb: 2c:d8:47:36:34:33:a9:ba:15:78:f1:1f:61:da:22:72:15:12: da:d0:22:d2:c3:43:86:5a:06:d1:d7:b1:73:31:d1:1d:b2:8d: 25:c2:06:45:e8:fd:0d:f3:de:c5:ce:42:96:ec:f5:7c:4c:7c: 7d:98:bd:79:1e:0d:63:5c:51:35:80:88:a0:4b:aa:96:9f:c0: 05:4d:50:4a:06:6f:15:ad:2c:ef:6c:53:28:ee:82:58:64:3d: 4a:fb:68:6f:ad:55:33:d7:f5:8f:6f:cc:78:fe:d6:a0:bb:f0: 29:73:9e:b4:b4:d4:e9:c7:b9:9f:d0:ff:56:53:9c:99:fb:b9: 0b:8f:75:c3:23:0b:3a:d9:e4:c8:e2:b5:39:42:15:71:63:7d: 14:19:94:4c:ac:d6:4e:72:51:f6:fd:a1:21:3b:08:4b:f0:54: f5:11:78:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNjAzMjUwNzE2MTFaFw0yNjA0MDEwNzE2MTFaMBgxFjAUBgNV BAMTDTY5YzM4YmJjLTM3ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6kZBuWWM4Xe6goEPmJmw6nA5dfNleLpuQVyYhYXHV31mfoObrrJDDtqc7R6ul eFy1x6lFCRsFTjnmNVHvGF+K1J1YBG2fjBqdytlKf7tex1VcebA+Nj5dIZMq+J1X V+yWFut1fsnTEQ2EU9hXpT9EHFvN5IGxuw1+cSdhybt/zNzWwB+psuywrW96VH9w UkY2GfO/VPHASz/PRfBrA08+cx8rp65dRsId+a9Xvti0gYskuf9D7DRqcSkNgEK6 e4vbnkYpoMSahy/JisWJvCNqfNl8hnfK666HrZKmytpxCAv5HuIXdzITb5otxICZ btvkWfI0MOk9X0lwWup5bfBnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVl1hAiYD xKJJs9bjm1gCOzWnnA0wHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAk4wW7QmrUW7I6uPFY3pV3Xcbew6zhs37Dnsb/0yUx3uo6THFKpHy8uDyfUtmF TsdGWXaQvLfN6C/h5PZuXJUHrxA9Q2qNg7ijjWnuacYh1dVCjMfyN3jlm/ss2Ec2 NDOpuhV48R9h2iJyFRLa0CLSw0OGWgbR17FzMdEdso0lwgZF6P0N897FzkKW7PV8 THx9mL15Hg1jXFE1gIigS6qWn8AFTVBKBm8VrSzvbFMo7oJYZD1K+2hvrVUz1/WP b8x4/tagu/Apc560tNTpx7mf0P9WU5yZ+7kLj3XDIws62eTI4rU5QhVxY30UGZRM rNZOclH2/aEhOwhL8FT1EXiB -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:16 2026 by rpki-client