$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: TDT35/XuYYRIumG+SE5P8rsP2fgAb3JX2q1OfZLd050= Subject key identifier: C6:3A:29:87:E0:B2:DD:8C:86:82:4A:A5:EE:A1:F8:54:2F:3E:AC:0B Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 83 Signing time: Wed 25 Mar 2026 06:59:27 +0000 Manifest this update: Wed 25 Mar 2026 06:59:26 +0000 Manifest next update: Wed 01 Apr 2026 06:59:26 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: u58F5iL/xjdbfIqaRFOCpzDTEQp7o2OpzLwI+jfA2yY=) 2: 44C226F2A5B111F095806166C4F9AE02.roa (hash: yD8SkPkAKN5+VowUi+qJexOJ8oP+7GjQ59FL3/Sa598=) 3: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: ZfwhMy+pX5aCJlJ8qOMcY95LqfN6RcWNdworol/4Bvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Mar 25 06:59:26 2026 GMT Not After : Apr 1 06:59:26 2026 GMT Subject: CN=69c387ce-fce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:b3:57:46:f0:7e:9c:e4:37:a7:b0:63:44: 0e:22:db:40:56:1e:a4:08:87:12:49:da:3b:a0:16: ee:61:c8:1e:60:17:6f:b7:94:88:01:b0:81:2f:88: ee:76:85:92:aa:77:d2:05:38:de:1d:14:b2:10:73: a7:f0:e2:22:dd:22:0a:b6:69:92:60:12:37:08:ed: 38:c3:46:a9:86:81:df:f0:ad:0a:94:a5:47:eb:38: 3b:1c:54:d6:d5:c6:0d:10:9e:7b:3f:03:d3:b1:3e: 83:fa:79:12:96:78:3a:47:2c:10:d0:75:82:9f:72: f5:34:61:1b:90:82:a9:36:ef:d4:de:0d:32:19:16: 71:ae:31:65:34:1f:13:70:19:d6:8f:9f:b7:84:6c: f3:6a:d7:bb:8c:f4:11:f3:41:35:6b:33:8d:45:43: 6f:15:17:24:9d:e7:f9:03:d7:57:82:f2:f1:1c:9d: d3:87:87:58:1f:10:a8:84:57:a3:f3:71:2a:8f:bf: 53:0b:14:95:e9:7b:aa:57:71:94:29:50:48:8f:41: ca:8b:8e:9d:db:28:94:26:df:f7:52:d6:ad:5f:62: 90:11:d3:cb:fd:43:d8:6f:cd:72:8d:e3:1f:fe:03: 87:1b:6a:13:63:e0:cd:1b:24:d5:64:38:96:23:70: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:29:87:E0:B2:DD:8C:86:82:4A:A5:EE:A1:F8:54:2F:3E:AC:0B X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4d:7e:35:fb:ef:db:bc:14:26:86:16:6b:ee:9c:fd:3f:70: 39:c8:de:e6:1d:e3:d2:58:29:97:04:ed:14:7f:93:30:23:e0: ab:a6:61:b0:de:5b:92:51:be:9f:85:f0:66:51:60:c5:a8:ff: 29:dd:0d:c7:dc:f7:62:8a:4a:5a:c9:c1:b2:4b:09:ae:0e:0a: 51:76:88:c8:43:2d:11:77:4c:b7:af:5a:0e:e7:39:99:8a:44: e8:68:2b:ba:2e:f1:1a:ca:a3:60:a6:09:1e:91:a0:96:6a:d4: 79:ad:f6:a2:01:9b:1a:e8:50:61:49:59:93:48:3e:65:1e:33: d7:c8:55:5b:8e:ef:bd:5f:d1:18:6f:96:82:c7:24:cb:c6:b6: 8e:f7:4e:3d:29:d8:aa:68:56:f5:2d:c1:84:fa:3c:9d:7e:86: 59:09:72:ec:90:7a:df:55:c7:4c:04:f3:f1:70:22:20:b8:a4: 7e:01:79:d2:cf:fe:0f:78:98:b6:72:ec:ea:20:b4:a6:19:c6: e3:90:39:c7:43:93:06:37:11:0e:cc:91:ed:7f:aa:6c:2d:ab: 7c:40:fe:15:9b:ad:2d:5e:39:f5:45:06:3a:26:9a:fc:b5:91: 53:3a:4c:a9:70:04:32:78:25:d4:a5:4e:52:5b:9c:8a:47:f2: 5c:01:d9:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwMzI1MDY1OTI2WhcNMjYwNDAxMDY1OTI2WjAYMRYwFAYD VQQDEw02OWMzODdjZS1mY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx76zV0bwfpzkN6ewY0QOIttAVh6kCIcSSdo7oBbuYcgeYBdvt5SIAbCBL4ju doWSqnfSBTjeHRSyEHOn8OIi3SIKtmmSYBI3CO04w0aphoHf8K0KlKVH6zg7HFTW 1cYNEJ57PwPTsT6D+nkSlng6RywQ0HWCn3L1NGEbkIKpNu/U3g0yGRZxrjFlNB8T cBnWj5+3hGzzate7jPQR80E1azONRUNvFRcknef5A9dXgvLxHJ3Th4dYHxCohFej 83Eqj79TCxSV6XuqV3GUKVBIj0HKi46d2yiUJt/3UtatX2KQEdPL/UPYb81yjeMf /gOHG2oTY+DNGyTVZDiWI3DJZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMY6KYfg st2MhoJKpe6h+FQvPqwLMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgU1+Nfvv27wUJoYWa+6c/T9wOcje5h3j0lgplwTtFH+TMCPgq6ZhsN5bklG+ n4XwZlFgxaj/Kd0Nx9z3YopKWsnBsksJrg4KUXaIyEMtEXdMt69aDuc5mYpE6Ggr ui7xGsqjYKYJHpGglmrUea32ogGbGuhQYUlZk0g+ZR4z18hVW47vvV/RGG+Wgsck y8a2jvdOPSnYqmhW9S3BhPo8nX6GWQly7JB631XHTATz8XAiILikfgF50s/+D3iY tnLs6iC0phnG45A5x0OTBjcRDsyR7X+qbC2rfED+FZutLV459UUGOiaa/LWRUzpM qXAEMngl1KVOUlucikfyXAHZ4g== -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:04 2026 by rpki-client