$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: 6bZXhyh541EwHaSjKztFGkXKhcbDDOpImtwn2f1KHzw= Subject key identifier: 6E:D8:A1:DF:E7:E2:33:35:41:5D:D0:EF:5B:E0:61:E3:98:8F:B9:FE Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 20A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1920 Signing time: Tue 24 Mar 2026 17:04:42 +0000 Manifest this update: Tue 24 Mar 2026 17:04:41 +0000 Manifest next update: Tue 31 Mar 2026 17:04:41 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: Gl173KmbUBiHDPVN1DZtGS1eC8fe/vyjYcuIPOhdh/E=) 2: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: HjkUEQsav5pUE/WVtKbSKskctR1MphO2V35javK4YnI=) 3: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: bLApvChK2zUe4CWUx9RU9qgAGAkxX8oSnJKH1tdA0/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8359 (0x20a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Mar 24 17:04:41 2026 GMT Not After : Mar 31 17:04:41 2026 GMT Subject: CN=69c2c42a-5f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:f1:16:41:c1:c4:f7:40:2c:e9:2a:40:b4: 8b:5a:fc:8f:b1:a9:6a:46:9e:f7:59:da:9f:11:59: 56:d5:80:ea:a3:24:46:80:ad:7f:18:a4:bd:65:49: 6e:3f:2c:ac:4e:52:d3:26:e6:db:08:9a:6a:c6:79: e5:a4:03:73:dd:5d:5d:6c:6b:7b:00:6e:b9:af:c5: 80:0f:f8:a5:95:19:04:3d:1b:0a:69:3d:17:c5:b6: f7:91:6d:28:40:ca:aa:4b:cc:46:59:19:73:97:78: 12:7b:07:4e:0b:44:d5:75:b2:80:0d:74:25:07:8f: 30:a8:b3:fc:9c:b0:7b:93:ae:95:e0:5a:88:28:13: a5:f0:e0:5e:65:04:10:0c:1b:31:13:8e:27:e8:8a: 1e:98:d2:7d:3b:9c:04:27:f0:50:fd:5f:cd:6b:3a: 18:f9:2f:c9:6b:78:ad:cd:b5:d1:f5:3c:e0:e6:bf: e7:64:90:8b:f6:be:28:00:8d:23:eb:33:75:57:a3: 1b:d0:d3:e1:85:a0:57:9f:13:bd:ff:38:6a:82:62: 22:3d:f5:82:93:ac:ae:2f:f6:bb:4a:08:d1:5a:58: 89:f0:de:86:8a:dc:dc:f2:5d:26:3e:12:22:1a:41: d9:7a:1d:5d:11:f2:df:49:48:16:5a:7a:5b:f8:19: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D8:A1:DF:E7:E2:33:35:41:5D:D0:EF:5B:E0:61:E3:98:8F:B9:FE X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:27:b3:83:d6:c2:9d:d7:40:56:d4:71:d9:b8:99:e8:f3:9d: 5a:af:b4:69:f5:32:02:76:92:b6:9b:00:40:f8:0a:bb:c2:47: a0:11:77:c6:8b:53:9c:23:4d:bb:f5:76:c6:ed:ca:87:9a:97: 82:c0:13:db:00:05:58:ee:18:17:a0:7b:e1:a2:50:a3:3e:c1: 3a:8f:1e:58:17:06:a6:59:ae:61:32:c8:a0:96:b3:c5:bd:68: d3:ee:a2:5e:e1:ca:b4:7c:e5:5e:3e:33:2e:b2:6d:cb:e9:ee: 92:b3:4f:ed:75:62:f7:92:aa:9a:29:38:74:0c:18:29:5e:47: 2d:25:f0:21:ec:86:39:9f:29:ea:87:bc:74:b0:c5:8b:5a:17: 2c:b3:d4:9a:5a:af:12:1a:41:0b:13:61:18:37:a0:95:ac:5d: 77:87:f2:17:3a:69:d0:74:b0:e3:e6:2f:58:6e:33:03:6e:5c: fc:8d:30:30:c3:13:c4:0b:31:cc:6c:2e:56:39:3a:04:f1:ba: 03:8d:5c:21:f9:c7:2b:85:d0:15:83:c9:af:4c:12:1b:65:a3: 1a:45:2c:00:b3:a7:ba:6f:6d:13:f8:ab:35:19:7d:02:56:d9: ef:34:f0:b2:14:53:6c:cb:83:96:01:6e:af:8a:67:3f:9e:7d: 64:0e:37:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjYwMzI0MTcwNDQxWhcNMjYwMzMxMTcwNDQxWjAYMRYwFAYD VQQDEw02OWMyYzQyYS01Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCXxFkHBxPdALOkqQLSLWvyPsalqRp73WdqfEVlW1YDqoyRGgK1/GKS9ZUlu PyysTlLTJubbCJpqxnnlpANz3V1dbGt7AG65r8WAD/illRkEPRsKaT0Xxbb3kW0o QMqqS8xGWRlzl3gSewdOC0TVdbKADXQlB48wqLP8nLB7k66V4FqIKBOl8OBeZQQQ DBsxE44n6IoemNJ9O5wEJ/BQ/V/NazoY+S/Ja3itzbXR9Tzg5r/nZJCL9r4oAI0j 6zN1V6Mb0NPhhaBXnxO9/zhqgmIiPfWCk6yuL/a7SgjRWliJ8N6Gitzc8l0mPhIi GkHZeh1dEfLfSUgWWnpb+BmHZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7Yod/n 4jM1QV3Q71vgYeOYj7n+MB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSezg9bCnddAVtRx2biZ6POdWq+0afUyAnaStpsAQPgKu8JHoBF3xotTnCNN u/V2xu3Kh5qXgsAT2wAFWO4YF6B74aJQoz7BOo8eWBcGplmuYTLIoJazxb1o0+6i XuHKtHzlXj4zLrJty+nukrNP7XVi95Kqmik4dAwYKV5HLSXwIeyGOZ8p6oe8dLDF i1oXLLPUmlqvEhpBCxNhGDeglaxdd4fyFzpp0HSw4+YvWG4zA25c/I0wMMMTxAsx zGwuVjk6BPG6A41cIfnHK4XQFYPJr0wSG2WjGkUsALOnum9tE/irNRl9AlbZ7zTw shRTbMuDlgFur4pnP559ZA43Fw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:03 2026 by rpki-client