$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft File: dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json) Hash identifier: WLH+RlEtbYcjgmjixAEym7AINXyHU8nd0eWc1gryhhA= Subject key identifier: 1D:FE:10:5D:42:7D:F3:4C:B5:D6:DA:E4:68:09:64:AC:E1:53:4B:8F Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37 Certificate issuer: /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft Manifest number: 24 Signing time: Wed 25 Mar 2026 08:02:23 +0000 Manifest this update: Wed 25 Mar 2026 08:02:22 +0000 Manifest next update: Wed 01 Apr 2026 08:02:22 +0000 Files and hashes: 1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: Ct9gJa5qKCsBbcgWDm2NlM+ntUBi6z3QTfSv1T9MD0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937 Validity Not Before: Mar 25 08:02:22 2026 GMT Not After : Apr 1 08:02:22 2026 GMT Subject: CN=69c3968f-8362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:1b:9f:d0:c3:04:53:d2:a9:b4:52:c6:6a: 24:b1:75:4a:c0:07:8c:03:6a:13:84:de:4a:ad:cd: 8b:36:7f:c9:34:45:fe:c3:3b:05:6c:65:d5:f6:a2: e8:48:d0:d7:17:e6:03:6b:25:be:0e:65:9b:96:cd: a2:34:b4:f6:00:67:d3:52:9a:8d:7c:f6:de:9b:18: 99:0d:06:52:d9:94:1a:91:bd:6c:68:7a:50:a9:1e: 63:85:5e:1c:38:48:9f:93:2d:40:e9:71:8f:e7:45: 43:f4:a0:99:6c:46:b5:cc:e9:cb:48:44:17:59:c0: 4a:72:7a:f3:74:b0:20:3e:4d:eb:ac:2d:e5:fd:02: b2:d0:7c:23:ed:76:cc:ed:bb:95:1b:17:de:81:30: 26:6c:28:30:8f:90:bf:d5:b4:f2:5d:10:97:fe:25: 95:5c:86:c5:99:69:02:79:46:0e:55:77:28:d1:25: b0:ab:fa:b9:a4:12:fe:f2:39:87:e4:ff:0b:fc:e3: 53:40:b8:33:e2:f1:88:98:ca:a6:d3:69:79:2c:d9: c5:ca:1b:19:ed:68:c4:be:47:a1:6a:2f:08:3b:fe: 6e:38:c5:b4:13:3b:84:c3:8d:a1:39:63:73:8b:68: a5:2f:3a:1e:64:43:5c:76:60:c8:3c:57:b6:60:f3: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FE:10:5D:42:7D:F3:4C:B5:D6:DA:E4:68:09:64:AC:E1:53:4B:8F X509v3 Authority Key Identifier: keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:64:68:d8:62:7a:89:8c:d9:30:b3:3c:cf:5d:33:1d:a1:42: 3d:0b:5d:68:8d:d7:4b:03:23:9f:1e:a7:d4:46:53:a3:64:cc: e4:b3:83:91:02:8f:c8:fa:d1:62:ce:1d:c6:18:14:fe:bf:22: ba:08:86:e3:19:db:90:5c:2a:53:2c:e8:30:a0:e6:f0:aa:04: d2:26:bb:16:4b:b6:be:b6:70:1e:a7:af:bd:1d:a5:f4:fb:56: 38:3f:44:7f:27:54:21:b6:ad:54:a8:33:f4:30:96:fb:4e:88: fa:a9:3c:af:1b:ff:0e:9f:bb:4c:fa:41:99:a7:be:31:68:ce: 52:b7:b4:68:13:b3:b9:94:18:40:b0:7d:78:8f:d4:39:b5:f5: c8:e3:40:62:7d:1a:c5:09:c4:ef:49:9f:4c:7d:cd:7f:53:fe: 0b:3e:37:9c:d6:33:37:38:98:92:a5:b0:cd:7f:1d:4c:50:87: 25:b7:a8:71:42:06:88:1a:2d:45:56:c4:9b:52:82:0a:d5:3f: 8c:6b:ce:1b:85:c4:11:84:19:66:fb:37:f1:de:f3:92:a9:4d: 71:5f:ec:80:b2:1a:b8:81:31:f8:70:10:9d:28:e9:3a:9d:7e: 3b:33:64:d4:8f:9e:bb:07:97:d7:03:d1:11:c5:15:21:49:c9: d3:d6:46:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0 OTA4MzkzNzAeFw0yNjAzMjUwODAyMjJaFw0yNjA0MDEwODAyMjJaMBgxFjAUBgNV BAMTDTY5YzM5NjhmLTgzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2WBuf0MMEU9KptFLGaiSxdUrAB4wDahOE3kqtzYs2f8k0Rf7DOwVsZdX2ouhI 0NcX5gNrJb4OZZuWzaI0tPYAZ9NSmo189t6bGJkNBlLZlBqRvWxoelCpHmOFXhw4 SJ+TLUDpcY/nRUP0oJlsRrXM6ctIRBdZwEpyevN0sCA+TeusLeX9ArLQfCPtdszt u5UbF96BMCZsKDCPkL/VtPJdEJf+JZVchsWZaQJ5Rg5VdyjRJbCr+rmkEv7yOYfk /wv841NAuDPi8YiYyqbTaXks2cXKGxntaMS+R6FqLwg7/m44xbQTO4TDjaE5Y3OL aKUvOh5kQ1x2YMg8V7Zg85ltAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHf4QXUJ9 80y11trkaAlkrOFTS48wHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ RWFsSTVvRjdQOEVrSU9UYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdZGjYYnqJjNkwszzPXTMdoUI9C11ojddLAyOfHqfURlOjZMzks4ORAo/I+tFi zh3GGBT+vyK6CIbjGduQXCpTLOgwoObwqgTSJrsWS7a+tnAep6+9HaX0+1Y4P0R/ J1Qhtq1UqDP0MJb7Toj6qTyvG/8On7tM+kGZp74xaM5St7RoE7O5lBhAsH14j9Q5 tfXI40BifRrFCcTvSZ9Mfc1/U/4LPjec1jM3OJiSpbDNfx1MUIclt6hxQgaIGi1F VsSbUoIK1T+Ma84bhcQRhBlm+zfx3vOSqU1xX+yAshq4gTH4cBCdKOk6nX47M2TU j567B5fXA9ERxRUhScnT1kYP -----END CERTIFICATE-----Generated at Thu Mar 26 19:00:04 2026 by rpki-client