$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: HMfjSNAaD7rK9wSfS6P1UXaizioHhaQlBRPdAcquh1w= Subject key identifier: BE:35:33:B6:CA:74:3F:52:AE:25:CD:95:2B:27:67:29:9C:61:19:9C Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 01B7 Signing time: Wed 25 Mar 2026 03:46:53 +0000 Manifest this update: Wed 25 Mar 2026 03:46:52 +0000 Manifest next update: Wed 01 Apr 2026 03:46:52 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: 5jEGoX4FtnAEk3DLJt9xUMTZsJpcCVYWHndJbATje3w=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Mar 25 03:46:52 2026 GMT Not After : Apr 1 03:46:52 2026 GMT Subject: CN=69c35aad-3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:99:81:ca:a7:f4:84:86:51:31:b5:49:50: 88:1b:1d:f8:2f:12:f1:94:9a:98:9a:02:6b:70:21: 22:d4:00:3a:db:db:41:9d:f3:4a:42:7c:49:91:bf: 6a:86:44:3f:a3:c5:77:b2:ba:25:34:de:0f:6c:64: fe:ac:a1:27:43:ab:89:c9:d3:5e:9e:4a:8d:5c:6f: b8:93:fb:49:12:01:9a:bc:4d:7b:44:38:54:6c:f8: 8b:34:ea:58:72:cb:d4:02:e9:8d:85:c4:44:ec:4b: f0:61:8b:b8:da:43:bd:7e:ed:a9:43:49:b9:82:dd: c7:67:63:39:fe:e2:87:35:49:1e:c6:77:3f:5a:b9: f8:a9:34:58:1a:1a:66:bb:12:6e:9e:ea:ce:d2:c7: dc:54:8c:1e:d6:c8:38:bf:dc:be:cd:6f:0e:9f:f5: 8a:47:e7:2e:99:e4:28:17:84:c2:13:5d:8b:ec:e2: 75:c1:17:32:bb:c1:85:8d:d8:3c:3f:a3:ad:18:fd: 73:1c:cb:22:3a:72:b2:04:5a:c2:88:2f:34:fa:4f: f3:ae:5b:db:47:d4:49:a8:43:59:d1:d8:1d:d9:4b: cc:e5:1f:28:ed:2c:11:f4:e6:10:75:cd:59:b2:91: 5f:89:c8:38:f9:29:83:4e:bf:dc:f8:47:7c:5a:df: 30:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:33:B6:CA:74:3F:52:AE:25:CD:95:2B:27:67:29:9C:61:19:9C X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e6:0a:0d:64:97:39:35:39:26:85:e7:79:53:53:5d:5a:88: 2f:48:68:77:42:4f:c7:d8:10:11:d3:d8:b2:ae:b5:84:af:ee: d3:f0:62:18:66:5c:81:7d:db:45:f2:6d:45:a1:d1:21:cd:65: af:5d:54:d0:ec:5f:87:9e:34:5f:93:30:e8:88:73:7e:a5:74: 53:88:79:6d:70:52:f1:f2:fb:9a:64:98:4d:d3:88:c6:95:4e: 5a:73:88:5e:e0:2d:90:22:93:dd:4a:aa:6e:b1:84:d4:c2:80: e1:95:2d:a0:9c:e8:4f:87:86:2e:45:3a:29:fe:91:e7:74:8c: 29:19:3d:3b:33:9e:f2:87:97:41:16:51:0f:3a:3e:28:36:c7: 00:e8:e0:91:6e:c5:d2:39:76:94:d8:a8:51:6f:47:ed:c5:71: f2:34:6a:a4:1a:96:fd:17:10:4f:e8:ac:2d:b6:ef:bd:ca:40: 8e:b3:71:af:88:a3:41:27:85:e0:f5:04:a5:c1:00:1d:53:aa: 64:09:dd:fc:20:6b:43:25:69:91:d7:5e:4c:ab:55:a6:c7:8f: b0:6e:0c:60:c5:13:03:40:35:ab:aa:c9:31:0e:f2:25:5c:4b: dc:2e:bb:a3:95:b5:5c:e4:ab:1b:f5:3f:f8:4b:22:8f:74:ae: be:56:1c:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwMzI1MDM0NjUyWhcNMjYwNDAxMDM0NjUyWjAYMRYwFAYD VQQDEw02OWMzNWFhZC0zYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOmZgcqn9ISGUTG1SVCIGx34LxLxlJqYmgJrcCEi1AA629tBnfNKQnxJkb9q hkQ/o8V3srolNN4PbGT+rKEnQ6uJydNenkqNXG+4k/tJEgGavE17RDhUbPiLNOpY csvUAumNhcRE7EvwYYu42kO9fu2pQ0m5gt3HZ2M5/uKHNUkexnc/Wrn4qTRYGhpm uxJunurO0sfcVIwe1sg4v9y+zW8On/WKR+cumeQoF4TCE12L7OJ1wRcyu8GFjdg8 P6OtGP1zHMsiOnKyBFrCiC80+k/zrlvbR9RJqENZ0dgd2UvM5R8o7SwR9OYQdc1Z spFficg4+SmDTr/c+Ed8Wt8w/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL41M7bK dD9SriXNlSsnZymcYRmcMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOeYKDWSXOTU5JoXneVNTXVqIL0hod0JPx9gQEdPYsq61hK/u0/BiGGZcgX3b RfJtRaHRIc1lr11U0Oxfh540X5Mw6IhzfqV0U4h5bXBS8fL7mmSYTdOIxpVOWnOI XuAtkCKT3UqqbrGE1MKA4ZUtoJzoT4eGLkU6Kf6R53SMKRk9OzOe8oeXQRZRDzo+ KDbHAOjgkW7F0jl2lNioUW9H7cVx8jRqpBqW/RcQT+isLbbvvcpAjrNxr4ijQSeF 4PUEpcEAHVOqZAnd/CBrQyVpkddeTKtVpsePsG4MYMUTA0A1q6rJMQ7yJVxL3C67 o5W1XOSrG/U/+Esij3SuvlYcvw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:23 2026 by rpki-client