$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: MrNz6NsX+ZyyM5r2RVJ29hQgL62AG1DyLcFXcbFetn0= Subject key identifier: 64:8E:BE:48:7C:C4:3D:24:C6:BF:69:79:70:44:93:5C:48:0B:D5:5B Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 016C Signing time: Wed 25 Mar 2026 04:11:50 +0000 Manifest this update: Wed 25 Mar 2026 04:11:50 +0000 Manifest next update: Wed 01 Apr 2026 04:11:50 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: HalrwLvCgKc46f/1whLAaZNF83SaWqC87dLZyVHzCbs=) 2: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=) 3: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Mar 25 04:11:50 2026 GMT Not After : Apr 1 04:11:50 2026 GMT Subject: CN=69c36086-01f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:40:f1:98:d5:ca:ba:88:31:33:1d:9a:63: 07:e8:0c:ef:58:15:2e:e7:e5:ad:58:46:25:6a:34: c8:23:fe:53:41:3a:a2:c8:48:ea:d8:8d:52:05:a0: 2c:b9:05:df:d3:02:79:1f:c2:f9:06:4f:30:d8:5b: 08:18:a9:e8:3b:18:c4:e4:96:d8:a1:77:be:13:4f: 6c:54:7f:89:ba:48:2b:1e:48:1a:26:67:d5:3c:60: 14:68:e1:28:05:cc:7d:67:d7:d9:82:0a:3d:5e:08: 81:23:25:a0:79:ef:49:70:6a:98:6a:44:24:cd:0e: 6b:7f:b3:24:36:c9:d5:fa:f3:97:d9:e1:32:2a:2d: 93:ea:eb:93:9a:c0:12:08:59:2c:e8:91:3a:47:7b: 88:34:e9:96:68:e2:5f:a9:39:da:b8:20:f5:2d:69: 99:8e:e5:4d:0f:73:83:e7:d7:68:56:80:12:ac:77: 55:ad:2d:b3:bd:eb:7c:59:8b:9a:46:db:d0:27:be: 4c:2f:dd:bc:5e:68:dc:1d:06:08:bb:d6:0a:ec:0a: 27:0c:66:f0:8b:c8:eb:5e:21:6c:cb:eb:53:04:d2: 8c:15:5e:d0:1d:5b:20:4a:a3:85:4b:e5:59:52:0d: 1e:8d:ae:f2:b7:01:af:e7:9f:a1:c6:66:34:75:64: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:BE:48:7C:C4:3D:24:C6:BF:69:79:70:44:93:5C:48:0B:D5:5B X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:38:67:4b:5e:43:96:8f:fc:08:7d:63:eb:9b:35:e3:31:26: 25:12:01:f3:4d:85:15:37:90:a8:ed:51:03:1b:1e:76:1c:db: 10:db:e8:6f:4c:0d:35:53:91:d3:80:88:f9:ae:b3:b6:42:a6: 7c:d5:91:e1:88:44:58:eb:30:fb:f6:db:89:b8:c8:a2:91:29: 9e:ed:e9:22:58:92:6b:ce:57:90:4c:e2:16:cd:43:12:c1:d5: a0:b6:c4:0e:03:46:86:b2:f7:64:ed:9d:62:e0:9a:ba:04:6f: 9b:10:19:46:b6:ef:87:cb:51:d8:14:b8:e1:04:50:75:5b:86: c0:a5:32:df:ec:5d:1f:f0:24:af:ba:04:b4:33:07:81:ec:8b: 19:9c:95:02:6b:da:14:e6:30:78:4c:0f:24:89:f7:28:2b:6a: c0:1f:71:3a:32:0b:e6:e7:22:02:51:5f:f9:92:37:cc:c3:b4: 39:58:68:fd:1f:f9:d2:ca:54:82:50:97:4f:c5:15:1d:ed:d1: 32:39:ed:bf:1c:ba:f0:7c:fd:b2:86:a8:b6:39:a2:f1:90:c6: 07:0c:cf:97:7a:8d:10:aa:06:15:b2:5a:c4:15:f6:55:01:08: 80:dc:2e:89:51:c1:2f:57:4b:4f:e0:7f:9d:64:80:52:cb:65: 9d:43:19:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjYwMzI1MDQxMTUwWhcNMjYwNDAxMDQxMTUwWjAYMRYwFAYD VQQDEw02OWMzNjA4Ni0wMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjNA8ZjVyrqIMTMdmmMH6AzvWBUu5+WtWEYlajTII/5TQTqiyEjq2I1SBaAs uQXf0wJ5H8L5Bk8w2FsIGKnoOxjE5JbYoXe+E09sVH+JukgrHkgaJmfVPGAUaOEo Bcx9Z9fZggo9XgiBIyWgee9JcGqYakQkzQ5rf7MkNsnV+vOX2eEyKi2T6uuTmsAS CFks6JE6R3uINOmWaOJfqTnauCD1LWmZjuVND3OD59doVoASrHdVrS2zvet8WYua RtvQJ75ML928XmjcHQYIu9YK7AonDGbwi8jrXiFsy+tTBNKMFV7QHVsgSqOFS+VZ Ug0eja7ytwGv55+hxmY0dWSzwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSOvkh8 xD0kxr9peXBEk1xIC9VbMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiThnS15Dlo/8CH1j65s14zEmJRIB802FFTeQqO1RAxsedhzbENvob0wNNVOR 04CI+a6ztkKmfNWR4YhEWOsw+/bbibjIopEpnu3pIliSa85XkEziFs1DEsHVoLbE DgNGhrL3ZO2dYuCaugRvmxAZRrbvh8tR2BS44QRQdVuGwKUy3+xdH/Akr7oEtDMH geyLGZyVAmvaFOYweEwPJIn3KCtqwB9xOjIL5uciAlFf+ZI3zMO0OVho/R/50spU glCXT8UVHe3RMjntvxy68Hz9soaotjmi8ZDGBwzPl3qNEKoGFbJaxBX2VQEIgNwu iVHBL1dLT+B/nWSAUstlnUMZMg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:01 2026 by rpki-client