$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: vKR44aVm9egAm0zfhP2eNo2ausCGPkeHrTAoE1B2BjA= Subject key identifier: CC:66:2C:C5:DC:66:90:2C:6B:61:48:9B:98:0B:20:DD:4C:71:38:10 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 0851 Signing time: Thu 26 Mar 2026 20:39:57 +0000 Manifest this update: Thu 26 Mar 2026 20:39:57 +0000 Manifest next update: Thu 02 Apr 2026 20:39:57 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: VtIZ07sF/Jk9VD13JF3OHRTPTn+8S+WvXckL0XMCtOA=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Mar 26 20:39:57 2026 GMT Not After : Apr 2 20:39:57 2026 GMT Subject: CN=69c5999d-fa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:3d:e6:7f:db:7c:c5:20:e4:64:23:79:b2: f4:5d:5b:e1:23:7f:64:ad:dc:a5:34:e4:ee:aa:ef: 9b:2b:90:84:b8:9d:f4:3e:45:2e:b6:a8:63:f8:96: 8a:3e:61:0e:88:3a:4b:ad:71:85:2f:c3:75:b5:36: 04:72:fa:93:2e:57:7c:f3:9f:90:fb:91:d2:12:5e: bb:41:c2:80:cb:b2:92:ba:82:0a:43:f6:6d:83:dd: 43:04:33:42:eb:da:63:ea:8e:06:c3:8a:59:84:a2: bd:f0:91:48:99:02:29:9c:86:ce:c9:0f:4f:2f:59: 96:85:69:5e:2d:00:13:dd:82:1e:d5:c3:61:04:20: 40:18:c7:bd:24:55:9c:d9:8d:67:39:b2:da:3d:73: 46:27:c7:5c:18:9d:ea:5b:56:94:f4:9b:be:b4:47: 9b:f6:44:f4:dc:d9:a0:18:16:ea:f9:18:42:43:71: a2:c5:29:91:35:4b:d8:93:5a:12:67:02:5d:05:33: 0a:47:d4:e4:9e:3b:fc:86:97:69:4b:44:c1:df:d0: 37:67:1a:8a:9b:b0:e3:f4:21:41:1d:2c:16:80:48: b9:20:ca:e2:c3:24:db:a3:80:79:02:75:c6:09:8e: 6a:5a:bb:e4:f0:4b:8b:14:bb:1c:fb:db:3a:41:53: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:66:2C:C5:DC:66:90:2C:6B:61:48:9B:98:0B:20:DD:4C:71:38:10 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e8:9c:ec:f6:e7:6a:09:ef:c8:94:00:c1:ca:af:30:15:75: 61:33:07:6c:9f:52:23:4c:66:ff:44:5e:6d:7a:59:44:f7:52: 64:83:61:56:d5:d9:c1:ef:be:77:60:e8:e3:d4:ba:a2:78:1e: bd:8a:2f:95:7c:7d:b5:4c:c8:48:96:37:e8:03:c7:a8:0a:99: ed:90:b1:96:fd:a0:b8:00:8d:3b:8d:1b:93:62:56:c2:bf:5e: 3e:39:f0:45:73:d8:3c:41:ae:2c:61:7f:e4:72:20:9b:cf:bd: 13:34:1e:99:95:4f:2c:a3:b3:b3:82:96:a3:98:1c:57:ca:a5: cf:74:e5:0a:20:ec:ce:ae:57:61:d2:9e:9e:91:a9:be:bc:37: 8c:ad:96:d7:c5:b5:ee:cc:10:98:57:1b:27:f0:05:85:f2:b2: eb:d3:68:fe:d0:ea:81:b0:62:d1:b0:80:ce:5d:1d:16:52:01: d8:23:dc:72:78:dd:ad:29:e3:ed:bf:a5:0c:a7:f4:5f:6a:41: 4e:52:66:59:f6:87:e0:09:06:07:6e:f1:19:f3:d2:62:ae:ab: 0d:fc:52:bf:39:23:8e:80:90:1e:0a:02:87:11:7e:66:85:20: 83:a0:32:89:5e:9a:95:0d:cd:b2:a8:eb:00:7d:a4:71:4e:c0: d1:b6:73:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjYwMzI2MjAzOTU3WhcNMjYwNDAyMjAzOTU3WjAYMRYwFAYD VQQDEw02OWM1OTk5ZC1mYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Y95n/bfMUg5GQjebL0XVvhI39krdylNOTuqu+bK5CEuJ30PkUutqhj+JaK PmEOiDpLrXGFL8N1tTYEcvqTLld885+Q+5HSEl67QcKAy7KSuoIKQ/Ztg91DBDNC 69pj6o4Gw4pZhKK98JFImQIpnIbOyQ9PL1mWhWleLQAT3YIe1cNhBCBAGMe9JFWc 2Y1nObLaPXNGJ8dcGJ3qW1aU9Ju+tEeb9kT03NmgGBbq+RhCQ3GixSmRNUvYk1oS ZwJdBTMKR9Tknjv8hpdpS0TB39A3ZxqKm7Dj9CFBHSwWgEi5IMriwyTbo4B5AnXG CY5qWrvk8EuLFLsc+9s6QVMx4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxmLMXc ZpAsa2FIm5gLIN1McTgQMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJuic7PbnagnvyJQAwcqvMBV1YTMHbJ9SI0xm/0RebXpZRPdSZINhVtXZwe++ d2Do49S6ongevYovlXx9tUzISJY36APHqAqZ7ZCxlv2guACNO40bk2JWwr9ePjnw RXPYPEGuLGF/5HIgm8+9EzQemZVPLKOzs4KWo5gcV8qlz3TlCiDszq5XYdKenpGp vrw3jK2W18W17swQmFcbJ/AFhfKy69No/tDqgbBi0bCAzl0dFlIB2CPccnjdrSnj 7b+lDKf0X2pBTlJmWfaH4AkGB27xGfPSYq6rDfxSvzkjjoCQHgoChxF+ZoUgg6Ay iV6alQ3NsqjrAH2kcU7A0bZz2g== -----END CERTIFICATE-----Generated at Fri Mar 27 03:56:09 2026 by rpki-client