$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: VXD4HhVE+xtGSInHtP1Cnq2SSiI3w6OlMeKeP8lxGfY= Subject key identifier: 6A:CA:DF:23:80:CD:C5:DB:5C:9C:48:13:AF:34:72:6E:78:4B:C0:3C Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 13B5 Signing time: Tue 24 Mar 2026 19:30:51 +0000 Manifest this update: Tue 24 Mar 2026 19:30:51 +0000 Manifest next update: Tue 31 Mar 2026 19:30:51 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: a33mykWMDcwIy5/b9MLZm3TfgNs376zsuGaPK6wN+CU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Mar 24 19:30:51 2026 GMT Not After : Mar 31 19:30:51 2026 GMT Subject: CN=69c2e66b-6034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:af:82:16:e2:a1:a4:1c:e9:90:33:0c:48:3b: ac:72:75:e3:9a:9d:6f:00:43:21:b2:f3:41:bb:2c: c3:2a:a6:79:53:25:5e:62:61:8e:6c:70:9a:78:16: 0c:37:3d:10:5e:68:95:9f:9a:73:14:34:03:5d:c8: ec:8f:95:96:f1:5b:a0:67:58:82:cd:9c:24:bd:4e: f3:8a:f5:1d:f3:cd:e7:9a:d0:61:3a:85:ea:83:eb: e9:23:bc:79:62:da:16:01:9e:8a:95:c2:a3:d7:e6: 65:f9:6d:89:77:9d:e2:5f:fc:3c:38:f4:95:f8:58: a1:79:3e:51:ff:93:40:b2:47:24:f8:47:d2:5f:55: c8:43:4c:eb:8a:53:3b:59:52:a1:4e:c3:b9:8e:7f: c2:6d:1b:de:f4:9f:11:f9:f4:f4:c8:fb:62:35:41: 54:32:a0:79:12:51:b9:4b:cc:3a:c9:87:bf:49:e0: da:64:3b:e0:f4:88:3d:77:4c:d8:77:f0:66:53:ea: dd:b0:fc:f5:d9:af:88:2f:93:ea:a2:fe:d5:3a:12: d5:ad:ac:f6:9d:d2:44:68:54:1c:be:52:2b:c6:cc: ca:5f:b8:7f:0d:3c:28:28:27:00:0a:08:2c:54:3c: 18:47:79:28:d5:74:9e:1e:42:cb:ff:ea:e8:d9:26: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:DF:23:80:CD:C5:DB:5C:9C:48:13:AF:34:72:6E:78:4B:C0:3C X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b3:77:ad:0a:e2:91:64:e7:46:64:b4:f8:57:6f:32:98:2e: 71:f7:55:fc:4b:44:46:e0:c4:35:31:1c:09:6d:3f:6d:da:f4: 7f:99:de:71:28:77:c0:16:22:12:21:f6:79:c9:06:25:87:30: 18:13:84:7e:0b:45:09:4b:4e:cd:fe:83:08:e1:7a:a4:c7:a2: e1:16:ab:20:13:57:7f:94:a1:b2:d6:35:01:eb:85:12:36:98: 8e:31:55:b1:30:12:85:bb:59:d7:10:51:e0:f2:ec:5e:d8:c1: 9f:0c:b0:2b:4a:5e:ac:68:71:4e:5b:cb:c8:ba:20:6a:b0:15: 21:ff:01:80:e2:cf:ac:e0:43:e0:bc:78:a2:c7:1d:c1:e5:71: 12:ed:91:42:84:2c:2d:34:6c:cf:14:b8:6c:8a:13:10:5a:59: 52:22:eb:43:36:23:9d:2e:40:f3:db:e8:71:e1:2c:0d:63:fa: 72:63:e0:b1:ac:cd:2c:04:9d:33:24:13:9a:41:d7:83:ea:bf: ce:da:74:ce:15:41:96:27:5f:0d:20:31:49:1a:fe:4f:a7:3f: ce:9a:47:4c:5d:4e:4a:6b:fa:0e:3e:f7:cc:5d:2e:fd:d0:51: 21:cf:29:c6:d7:0d:a2:fb:d2:17:4d:1c:7a:89:7b:6e:61:59: 4f:f0:09:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjYwMzI0MTkzMDUxWhcNMjYwMzMxMTkzMDUxWjAYMRYwFAYD VQQDEw02OWMyZTY2Yi02MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlK+CFuKhpBzpkDMMSDuscnXjmp1vAEMhsvNBuyzDKqZ5UyVeYmGObHCaeBYM Nz0QXmiVn5pzFDQDXcjsj5WW8VugZ1iCzZwkvU7zivUd883nmtBhOoXqg+vpI7x5 YtoWAZ6KlcKj1+Zl+W2Jd53iX/w8OPSV+FiheT5R/5NAskck+EfSX1XIQ0zrilM7 WVKhTsO5jn/CbRve9J8R+fT0yPtiNUFUMqB5ElG5S8w6yYe/SeDaZDvg9Ig9d0zY d/BmU+rdsPz12a+IL5Pqov7VOhLVraz2ndJEaFQcvlIrxszKX7h/DTwoKCcACggs VDwYR3ko1XSeHkLL/+ro2SaP6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrK3yOA zcXbXJxIE680cm54S8A8MB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcrN3rQrikWTnRmS0+FdvMpgucfdV/EtERuDENTEcCW0/bdr0f5necSh3wBYi EiH2eckGJYcwGBOEfgtFCUtOzf6DCOF6pMei4RarIBNXf5ShstY1AeuFEjaYjjFV sTAShbtZ1xBR4PLsXtjBnwywK0perGhxTlvLyLogarAVIf8BgOLPrOBD4Lx4oscd weVxEu2RQoQsLTRszxS4bIoTEFpZUiLrQzYjnS5A89voceEsDWP6cmPgsazNLASd MyQTmkHXg+q/ztp0zhVBlidfDSAxSRr+T6c/zppHTF1OSmv6Dj73zF0u/dBRIc8p xtcNovvSF00ceol7bmFZT/AJSA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:57 2026 by rpki-client