$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: qUz8Lbo/p3TSIt4sXSFXM52si/vJ2GTlpmWlLYu/1bI= Subject key identifier: B9:3E:FC:AC:0E:B1:EA:72:B7:78:19:AF:66:C2:B7:77:4D:20:5B:83 Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 025F Signing time: Wed 25 Mar 2026 01:37:14 +0000 Manifest this update: Wed 25 Mar 2026 01:37:13 +0000 Manifest next update: Wed 01 Apr 2026 01:37:13 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: 5KexVG+aDAmGQprxU59UHVhvvQ3B40wJ9Naz0CKQdmE=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Mar 25 01:37:13 2026 GMT Not After : Apr 1 01:37:13 2026 GMT Subject: CN=69c33c4a-a818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:3e:bc:42:51:22:20:65:82:61:99:99:90: 7c:99:8a:cb:ae:39:da:d7:3d:9e:d6:0e:83:10:99: e8:79:3d:9d:c4:d6:85:73:49:bf:36:11:8e:7e:81: 1b:41:12:7d:a5:a6:a1:86:df:38:0b:03:6a:ea:ef: 03:41:7d:a6:d7:6d:f4:31:8b:45:c9:5f:4c:c4:33: 5d:66:81:8e:19:ff:cc:8a:db:0d:eb:a2:84:08:36: 0f:6c:31:3d:30:d5:a7:a6:ea:e6:66:cd:45:42:eb: 8d:5a:dd:dd:c5:ed:16:39:e5:4e:4b:1a:d9:fa:cc: c6:3a:32:d6:73:d9:71:8b:a6:ff:6e:19:60:84:f4: 90:d8:06:0a:f7:27:f5:42:8a:ab:f1:3c:82:3a:5b: e8:f0:a5:5f:fd:d6:f8:5c:cf:06:86:a2:b2:1d:95: 0b:0e:38:6e:f6:47:02:f4:e0:a0:fa:ff:31:d3:90: d0:81:96:57:bd:5f:5f:2f:07:ae:81:f6:c0:15:96: bd:be:3d:b3:93:eb:ce:9e:87:61:d2:a3:c5:b4:5f: 6c:5d:b8:e2:30:5f:7e:28:6a:16:fb:d4:68:71:d7: d9:4a:e2:7a:8b:ff:d8:40:65:76:e8:06:8c:85:44: 72:56:f3:95:4b:82:31:07:7c:25:33:e3:26:1d:3f: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:FC:AC:0E:B1:EA:72:B7:78:19:AF:66:C2:B7:77:4D:20:5B:83 X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ba:76:d3:8f:9c:8b:9d:aa:ec:1a:ea:c1:6e:89:f3:db:3e: 08:35:c7:cb:0a:e6:aa:09:72:3b:bd:fd:92:01:c8:f1:e8:4c: 65:16:2e:d0:66:d0:ba:52:f3:54:d6:b5:78:ea:71:e0:ca:ee: 97:86:14:10:f3:7e:31:96:30:8c:26:1e:d6:e4:09:b6:1d:62: 42:7e:eb:36:32:cf:f1:0b:8e:53:a2:57:50:5c:80:08:d9:1c: 28:45:4c:62:45:6d:b2:b2:5d:7f:a2:7b:d6:05:6b:18:a3:eb: 10:3f:85:8f:4a:70:1e:74:60:58:7e:61:ab:72:aa:33:81:a4: 79:2b:2a:6f:36:85:d1:52:06:d3:9c:53:2f:7a:ed:e2:cd:6f: fc:a6:04:92:61:1c:2a:c6:fe:98:aa:34:b8:26:5a:de:3e:d4: 5d:8d:ff:27:be:09:c0:07:04:06:be:57:63:18:c1:8b:63:91: 0d:1a:c3:ae:35:4b:a7:2b:85:08:d0:0c:bb:40:47:93:52:85: 00:40:18:66:73:e4:4e:fa:b1:80:7e:3b:78:20:9c:6c:34:af: 07:aa:f1:07:83:65:b4:4d:3e:3f:f8:9c:99:9a:f3:0a:6b:c5: 8c:6b:bf:3f:2d:16:42:71:eb:6d:07:b2:62:5f:4b:15:0f:c3: 05:de:68:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjYwMzI1MDEzNzEzWhcNMjYwNDAxMDEzNzEzWjAYMRYwFAYD VQQDEw02OWMzM2M0YS1hODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApb4+vEJRIiBlgmGZmZB8mYrLrjna1z2e1g6DEJnoeT2dxNaFc0m/NhGOfoEb QRJ9paahht84CwNq6u8DQX2m1230MYtFyV9MxDNdZoGOGf/MitsN66KECDYPbDE9 MNWnpurmZs1FQuuNWt3dxe0WOeVOSxrZ+szGOjLWc9lxi6b/bhlghPSQ2AYK9yf1 Qoqr8TyCOlvo8KVf/db4XM8GhqKyHZULDjhu9kcC9OCg+v8x05DQgZZXvV9fLweu gfbAFZa9vj2zk+vOnodh0qPFtF9sXbjiMF9+KGoW+9RocdfZSuJ6i//YQGV26AaM hURyVvOVS4IxB3wlM+MmHT/0xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLk+/KwO sepyt3gZr2bCt3dNIFuDMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtbp204+ci52q7BrqwW6J89s+CDXHywrmqglyO739kgHI8ehMZRYu0GbQulLz VNa1eOpx4Mrul4YUEPN+MZYwjCYe1uQJth1iQn7rNjLP8QuOU6JXUFyACNkcKEVM YkVtsrJdf6J71gVrGKPrED+Fj0pwHnRgWH5hq3KqM4GkeSsqbzaF0VIG05xTL3rt 4s1v/KYEkmEcKsb+mKo0uCZa3j7UXY3/J74JwAcEBr5XYxjBi2ORDRrDrjVLpyuF CNAMu0BHk1KFAEAYZnPkTvqxgH47eCCcbDSvB6rxB4NltE0+P/icmZrzCmvFjGu/ Py0WQnHrbQeyYl9LFQ/DBd5orw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:50 2026 by rpki-client