$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: csu4d50Cc1n4qiFnKAjEYSujnKipkNIVCXfCJHig2YQ= Subject key identifier: 81:0A:DF:B9:E9:91:A1:53:1B:D0:25:58:17:B2:5C:58:E9:01:8D:B0 Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 30 Signing time: Wed 25 Mar 2026 07:52:08 +0000 Manifest this update: Wed 25 Mar 2026 07:52:08 +0000 Manifest next update: Wed 01 Apr 2026 07:52:08 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: YY4RcyH4RvfSuI52MD0kcT+LmAJW4URRkHo5A/4RE40=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: Mar 25 07:52:08 2026 GMT Not After : Apr 1 07:52:08 2026 GMT Subject: CN=69c39428-8496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:52:0c:38:85:3e:60:30:da:63:ed:ea:86: d6:a3:f4:61:f8:4d:95:b2:23:9f:e1:bd:18:5a:90: f7:0b:12:55:35:e1:94:06:cd:f8:21:2e:6b:10:00: 2c:f3:bd:34:17:46:e3:eb:dd:7e:58:d4:2c:d3:26: be:f7:ca:e3:59:ae:e1:fd:7a:50:aa:2a:dd:8c:48: a4:13:96:8e:78:42:5c:61:7b:99:3e:49:b8:cd:18: 29:93:c3:5e:6a:9e:0a:0b:ad:19:78:f2:ca:e6:b2: f0:21:a2:f6:01:01:fc:ea:05:e5:7c:ce:a7:fb:0e: 9a:3e:ff:e4:ff:16:11:83:0b:f7:18:02:a8:2c:b7: d3:ff:82:88:b3:cf:65:86:73:b8:95:a6:dc:a8:af: a1:7b:b4:2d:95:3b:89:6f:d9:92:0e:2b:f1:e6:84: be:d8:b1:1b:0f:de:67:9e:90:ec:d5:8c:b8:57:0b: 9c:9d:b1:3b:96:ca:6e:af:51:18:31:5e:35:1f:12: f2:b2:12:b4:cb:b6:ee:83:d5:58:ea:9a:04:a2:b1: dd:ee:b6:d7:f1:b2:ca:cf:09:72:4d:93:76:89:65: b7:35:e6:2b:e6:30:56:68:42:25:d8:7c:35:05:38: fd:83:b9:70:e9:0a:05:ed:12:cb:6b:d8:2d:6e:02: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:DF:B9:E9:91:A1:53:1B:D0:25:58:17:B2:5C:58:E9:01:8D:B0 X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:0a:4d:bc:3f:00:01:ec:1b:86:46:79:3e:91:fd:ac:9c: bc:59:54:ae:64:a2:23:39:57:dc:6a:76:ad:e3:82:f9:2a:70: 9b:49:97:55:c0:06:79:6e:2c:c0:5c:33:33:0f:1b:4a:d0:57: 9a:8f:3f:6b:9c:a1:6b:2b:af:b6:c9:d1:c8:da:26:8b:e6:87: 0c:78:8d:97:58:47:06:15:51:9e:a4:a6:b9:fd:61:48:36:3e: 6d:c0:f1:df:0b:60:f7:d4:f9:8e:b7:00:d2:c4:ed:85:9d:ab: 14:d7:ca:8a:5d:19:ec:71:7b:4c:a7:fb:bb:a6:1b:b7:ba:dc: 31:90:e2:b8:9d:6e:a9:7d:f2:ab:d0:94:3f:af:9e:b7:38:58: d9:08:17:04:94:81:2b:13:98:ca:67:e2:5b:dc:ec:66:f4:85: e4:49:57:b2:b3:cf:25:5d:f1:2f:e9:09:57:35:e1:c4:d1:58: ae:fb:c1:75:76:73:ba:8c:39:13:3a:9f:71:cf:47:e1:ba:bc: 41:4f:88:5e:71:73:19:d7:85:21:7d:3a:ea:d8:a6:37:20:c7: 71:13:54:86:08:de:47:4c:06:69:d4:69:ad:80:5f:48:63:0d: 9e:0d:29:f3:e8:db:ff:12:75:86:56:59:b4:10:c6:65:09:f4: 17:f2:0c:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlENTc0M0I0NzQ1 QkY1OTA3NTAeFw0yNjAzMjUwNzUyMDhaFw0yNjA0MDEwNzUyMDhaMBgxFjAUBgNV BAMTDTY5YzM5NDI4LTg0OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGLlIMOIU+YDDaY+3qhtaj9GH4TZWyI5/hvRhakPcLElU14ZQGzfghLmsQACzz vTQXRuPr3X5Y1CzTJr73yuNZruH9elCqKt2MSKQTlo54Qlxhe5k+SbjNGCmTw15q ngoLrRl48srmsvAhovYBAfzqBeV8zqf7Dpo+/+T/FhGDC/cYAqgst9P/goizz2WG c7iVptyor6F7tC2VO4lv2ZIOK/HmhL7YsRsP3meekOzVjLhXC5ydsTuWym6vURgx XjUfEvKyErTLtu6D1VjqmgSisd3uttfxssrPCXJNk3aJZbc15ivmMFZoQiXYfDUF OP2DuXDpCgXtEstr2C1uAswZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgQrfuemR oVMb0CVYF7JcWOkBjbAwHwYDVR0jBBgwFoAUD1RnqdHrCYtSzBOdV0O0dFv1kHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzUxOUMxMDRFRTU1 OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFSbnFkSHJDWXRTekJPZFYwTzBkRnYxa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0 U3pCT2RWME8wZEZ2MWtIVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBglgpNvD8AAewbhkZ5PpH9rJy8WVSuZKIjOVfcanat44L5KnCbSZdVwAZ5bizA XDMzDxtK0Feajz9rnKFrK6+2ydHI2iaL5ocMeI2XWEcGFVGepKa5/WFINj5twPHf C2D31PmOtwDSxO2FnasU18qKXRnscXtMp/u7phu3utwxkOK4nW6pffKr0JQ/r563 OFjZCBcElIErE5jKZ+Jb3Oxm9IXkSVeys88lXfEv6QlXNeHE0Viu+8F1dnO6jDkT Op9xz0fhurxBT4hecXMZ14UhfTrq2KY3IMdxE1SGCN5HTAZp1GmtgF9IYw2eDSnz 6Nv/EnWGVlm0EMZlCfQX8gz0 -----END CERTIFICATE-----Generated at Fri Mar 27 06:52:27 2026 by rpki-client