$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: VGeKH/K2LqWnJsIIeE4Nnz71ZGh+yqg30kL6U9bVR8c= Subject key identifier: C3:C4:1A:A1:20:7A:37:D1:D9:43:90:85:67:40:3F:C2:73:86:50:52 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 0342 Signing time: Wed 25 Mar 2026 00:38:11 +0000 Manifest this update: Wed 25 Mar 2026 00:38:10 +0000 Manifest next update: Wed 01 Apr 2026 00:38:10 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: N85LUC0qHCJpVbMip0v3wQXe1ZDxXaPiYvI8N+RlB+k=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: TtrTIWnfFIl37m5rTP9ZdJpu1u1f7Kc1NjF4hf7dx38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Mar 25 00:38:10 2026 GMT Not After : Apr 1 00:38:10 2026 GMT Subject: CN=69c32e72-83ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:27:dd:21:91:71:ba:5f:ce:27:a2:a4:61: 42:9c:33:f7:52:08:29:79:8d:7f:ee:60:5a:00:b0: 70:af:55:d2:d7:bd:08:88:8b:2d:83:ab:71:9b:59: 7d:c4:65:b2:7a:02:34:38:7f:5c:71:cb:92:92:27: 05:9c:4e:73:31:23:85:4e:96:bc:7c:bc:76:86:24: f1:98:ea:c4:73:7c:fa:a2:ff:23:99:e7:79:64:2e: fd:e3:98:05:63:87:0d:f8:23:89:f5:1e:57:a3:3f: ce:a2:9c:3d:ab:4b:06:ef:bb:e2:36:1a:b5:02:34: ea:cf:a4:18:86:3b:47:84:c7:a7:7f:36:9b:a0:65: 37:e5:86:58:42:cb:7a:f2:5e:7a:c7:8a:ee:d5:4c: 24:43:54:01:48:95:fb:9f:ef:eb:b4:10:5d:be:bc: c1:d7:8c:ac:9d:1f:79:47:fc:4f:c1:5f:47:42:fd: 0c:24:88:02:0e:27:77:52:ae:d8:13:a5:10:a4:7d: 7a:08:62:e1:af:a9:dc:25:af:51:89:74:e7:94:a9: 9d:5d:26:5c:2a:13:21:c0:13:75:28:44:9a:e6:2b: 7f:fc:d0:c3:bf:92:54:21:59:a1:11:7f:b9:9e:9a: eb:cf:2f:5c:a2:83:38:d5:ae:17:de:c7:9f:da:51: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:1A:A1:20:7A:37:D1:D9:43:90:85:67:40:3F:C2:73:86:50:52 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5f:34:c0:93:ce:dd:64:44:f6:84:47:fd:a7:65:0c:30:ff: e4:f1:41:e1:c0:1e:26:88:12:14:e7:56:ae:16:54:51:5a:b1: a7:a8:75:32:4d:d8:c6:c2:7e:02:61:fd:b7:9b:03:c1:ac:20: fb:23:51:1c:cd:45:47:16:aa:e6:8a:6d:4e:cd:91:a7:53:51: 19:cb:f0:59:e8:c2:e5:6f:50:68:63:1c:4f:b8:b2:76:a2:a2: c3:f8:3f:a5:a0:58:cc:67:a3:8d:51:26:e7:b1:cb:27:41:62: c9:a4:63:8f:a9:ec:0c:12:91:59:bf:ff:df:33:fb:f2:f2:1b: fc:70:27:79:96:6e:52:07:6f:83:9b:2e:4e:27:14:ce:a3:31: 39:48:8f:c9:61:a8:e1:98:3b:68:81:2f:62:ac:03:5f:77:16: 58:7b:bd:fc:2e:0d:08:ea:51:1b:ed:15:b8:50:fb:56:9e:30: 28:75:66:0d:bb:79:55:56:c7:f2:77:e5:73:48:49:35:82:20: f5:39:b6:49:e7:aa:33:64:87:b8:36:5f:18:3b:ac:a2:90:d6: cf:cb:c9:38:b4:1f:86:2c:3b:79:6b:a4:b9:f1:11:a8:cb:94: a8:ac:86:5b:ac:6b:cc:f2:7a:98:33:de:1f:a1:f2:7f:7b:71: a8:21:23:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjYwMzI1MDAzODEwWhcNMjYwNDAxMDAzODEwWjAYMRYwFAYD VQQDEw02OWMzMmU3Mi04M2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCYn3SGRcbpfzieipGFCnDP3UggpeY1/7mBaALBwr1XS170IiIstg6txm1l9 xGWyegI0OH9cccuSkicFnE5zMSOFTpa8fLx2hiTxmOrEc3z6ov8jmed5ZC7945gF Y4cN+COJ9R5Xoz/Oopw9q0sG77viNhq1AjTqz6QYhjtHhMenfzaboGU35YZYQst6 8l56x4ru1UwkQ1QBSJX7n+/rtBBdvrzB14ysnR95R/xPwV9HQv0MJIgCDid3Uq7Y E6UQpH16CGLhr6ncJa9RiXTnlKmdXSZcKhMhwBN1KESa5it//NDDv5JUIVmhEX+5 nprrzy9cooM41a4X3sef2lHnnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPEGqEg ejfR2UOQhWdAP8JzhlBSMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjl80wJPO3WRE9oRH/adlDDD/5PFB4cAeJogSFOdWrhZUUVqxp6h1Mk3YxsJ+ AmH9t5sDwawg+yNRHM1FRxaq5optTs2Rp1NRGcvwWejC5W9QaGMcT7iydqKiw/g/ paBYzGejjVEm57HLJ0FiyaRjj6nsDBKRWb//3zP78vIb/HAneZZuUgdvg5suTicU zqMxOUiPyWGo4Zg7aIEvYqwDX3cWWHu9/C4NCOpRG+0VuFD7Vp4wKHVmDbt5VVbH 8nflc0hJNYIg9Tm2SeeqM2SHuDZfGDusopDWz8vJOLQfhiw7eWukufERqMuUqKyG W6xrzPJ6mDPeH6Hyf3txqCEjOA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:28 2026 by rpki-client